last executing test programs: 5m19.263837409s ago: executing program 2 (id=3): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x7, 0x1, 0x5, 0x6, 0x5, 0x1, {0x1, 0x180, 0xff, 0x5, 0xff, 0xd615, 0x2, 0x800001, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x6, 0x800001}}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 5m13.945908523s ago: executing program 2 (id=16): r0 = socket$inet6(0xa, 0x2, 0x3a) flistxattr(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1237, &(0x7f00000006c0)="$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") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000005c0)=[{0x0}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$UHID_CREATE2(r2, &(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x118) chdir(0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000, @void, @value}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xe0100, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f00000000c0)) 5m8.808616505s ago: executing program 2 (id=23): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc52b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xf9, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x0, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "6ed93add"}]}}, 0x0}, 0x0) 5m7.6662934s ago: executing program 32 (id=23): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc52b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xf9, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x0, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "6ed93add"}]}}, 0x0}, 0x0) 3m30.496808119s ago: executing program 4 (id=231): accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) syz_clone3(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) lseek(r1, 0x7f, 0x1) 3m24.62679359s ago: executing program 4 (id=236): syz_open_dev$loop(0x0, 0x80000001, 0x4040) clock_gettime(0x0, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYRES8=0x0], 0xff, 0xc2d, &(0x7f0000001cc0)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x404043000) 3m20.886641483s ago: executing program 4 (id=241): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring) 3m20.3633685s ago: executing program 4 (id=244): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x8000) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000140)=""/82) 3m16.476654164s ago: executing program 4 (id=246): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b031200e2ff020002004788001ca13bb1000011000088ca1a00", 0xa059, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x9, 0x6, @link_local}, 0x14) 3m15.183257332s ago: executing program 4 (id=250): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x34, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x2}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0xfbbf6d0df7459967, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0xc004, &(0x7f0000000840)=ANY=[], 0x1, 0x1f0, &(0x7f0000000400)="$eJzsmb2LE0EYxp+ZzcfmEMXGwsbCA0+82+xuVK654gRLQThFLYO3hugmkWSFJCAYbGwsLQRbG0sLCysL/wJbLVQQLExpJ4zMx35k2RW/iAHfH9zsM7Pvvu/Me8lTbEAQxH/Lxw9f3z88t31pE8ABrKNu1j9b+ioOLca/e3zn1KOd80+ev336un/w7st8PiafEWXVNu38SgPAq10LEVjFVFx4ej1NG2tcBsdJo6+AwdHym1DoSQCGaybmZkYPGg2jAuf6INy/0Q0DVw6eHHw5tLL15abmM4Z9ALbanRAsc380md5qh2EwzIuq2UjBrV8VZd1M9rfLsYO4e0JwAFcf3J/JuekNXPCkfx44PKNbYNgzeht1OI6TtiRz/qOVNL/1M+f/t+KZEoe3llUUXLdjFc6+PBF7w9KKVv9KHpZfkV/oZOXIPPbAbMynlWj47wnYJf+mN2theOEPMtcKGpWI1J+ks58woVytVRL/aEa9283RZLrV7bU7QSfo+37rrHvadc/4TWVEevyB/9nKn9Yy/lctia2xGsbtKBp6YyAaesnc12PGcfdeDL4k+53PODaO6xzyo6KOXS+uwcwfV1epNqziyHulZyIIgiAIgiAIgiAIgiAIgijmGBj0L2GCmReiRfgX1RvK7wEAAP//K59fZg==") 2m58.75607939s ago: executing program 33 (id=250): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x34, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x2}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0xfbbf6d0df7459967, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0xc004, &(0x7f0000000840)=ANY=[], 0x1, 0x1f0, &(0x7f0000000400)="$eJzsmb2LE0EYxp+ZzcfmEMXGwsbCA0+82+xuVK654gRLQThFLYO3hugmkWSFJCAYbGwsLQRbG0sLCysL/wJbLVQQLExpJ4zMx35k2RW/iAHfH9zsM7Pvvu/Me8lTbEAQxH/Lxw9f3z88t31pE8ABrKNu1j9b+ioOLca/e3zn1KOd80+ev336un/w7st8PiafEWXVNu38SgPAq10LEVjFVFx4ej1NG2tcBsdJo6+AwdHym1DoSQCGaybmZkYPGg2jAuf6INy/0Q0DVw6eHHw5tLL15abmM4Z9ALbanRAsc380md5qh2EwzIuq2UjBrV8VZd1M9rfLsYO4e0JwAFcf3J/JuekNXPCkfx44PKNbYNgzeht1OI6TtiRz/qOVNL/1M+f/t+KZEoe3llUUXLdjFc6+PBF7w9KKVv9KHpZfkV/oZOXIPPbAbMynlWj47wnYJf+mN2theOEPMtcKGpWI1J+ks58woVytVRL/aEa9283RZLrV7bU7QSfo+37rrHvadc/4TWVEevyB/9nKn9Yy/lctia2xGsbtKBp6YyAaesnc12PGcfdeDL4k+53PODaO6xzyo6KOXS+uwcwfV1epNqziyHulZyIIgiAIgiAIgiAIgiAIgijmGBj0L2GCmReiRfgX1RvK7wEAAP//K59fZg==") 2m51.936732234s ago: executing program 1 (id=285): add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) 2m50.672691992s ago: executing program 1 (id=287): syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000340)=0x8, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x840, 0x0, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000000)={0x0, 0xfff, 0x6, 0x1, 0x8fff, 0x8, 0x1000, 0x7, 0x0, 0x1, 0x8, 0x4}) sendto$inet6(r5, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r7 = dup3(r5, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, 0x0, &(0x7f0000001380)) socket$inet6(0xa, 0x3, 0x9) 2m49.36003986s ago: executing program 1 (id=290): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x40, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4ec, &(0x7f0000000380)="$eJzs3UFrHG8ZAPBnJrtt06Zuqh5qwbbYSlK0m6SxbfBQFURPBbXea0y2IWSTLcmmbULRFD+AIKKCFz15EfwAgvQjiFDQu6gooq0ePFRHdnc2puluktLsrv/k94M3M+/M7D7vk2HfnXdm2Ang2LocEeMRkWVZdi0iSvnyNC+x1SqN7V69fDrXKElk2b2/JZHky9rvdTKfnslfdioivvbliG8mb8dd29hcmq1WK6t5faK+nLzOss3ri8uzC5WFysr09NStmdszN2cmDyXP0Yi488U//eC7P/vSnV99+vHv7/9l/FutBFt25nGYWqkXm/+LtkJErPYi2IAUmhm23BxwWwAA2FvjeP/DEfGJiLgWpRhqHs0BAAAAR0n2uZF4nbSu/wEAAABHUxoRI5Gk5fx+35FI03K5dQ/vR+N0Wq2t1T+VlbbPF4xGMX2wWK1M5vcOjEYxadSn8nts2/Ubu+rTEXEuIr5fGm7Wy3O16vxAz3wAAADA8XFm1/j/n6XW+B8AAAA4YkYH3QAAAACg54z/AQAA4Ogz/gcAAIAj7St37zZK1n7+9fyjjfWl2qPr85W1pfLy+lx5rrb6sLxQqy00f7Nveb/3q9ZqDz8TK+tPJuqVtfrE2sbm/eXa+kr9/uIbj8AGAAAA+ujcpee/SyJi67PDaURkyY51xYhsaOfGhf63D+id9F02/mPv2gH039CgGwAMjEN6OL6Kg24AMHD79QNdb9759eG3BQAA6I2xj21f/2+WhhP5uktZlg20cUBP5df/k2TQDQH6zvV/OL5c/4Pjq7jXEYBBARx56QE+6u9//d+5RAAAGLSRZknScj4OGIk0LZcjzjYfC1BMHixWK5MR8aGI+G2peLJRn2q+MnF6AAAAAAAAAAAAAAAAAAAAAAAAAAAOKMuSyLoY3t4GAAAA+CCLSP+c5M//GitdHdl9fuBE8q9ScxoRj39874dPZuv11anG8r9vL6//KF9+o99nLwAAAIBO2uP09jgeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7Tq5dP59qln3H/+oWIGO0UvxCnmtNTUYyI0/9IorDjdUlEDB1C/K1nEXG+U/yk0awYzVuxO34aEcMDjn/mEOLDcfa80f98vtPnL43LzWnnz18hL++re/+Xbvd/Q136v7Od3jB9e9GFF7+Y6Br/WcSFQuf+px0/6RL/ygFz/MbXNze7rct+GjHW8fsneSPWRFJ4OLG2sXl9cXl2obJQWZmenro1c3vm5szkxIPFaiX/2zHG9z7+y//slf/pLvFH98n/6gHz//eLJy8/0pot7lpVjJ9k2fiVzvv/fJf47e++T+a7u1Efa89vteZ3uvjz31y8tEf+813y32//jx8w/2tf/c4fDrgpANAHaxubS7PVamXVjJmezQxHH4POxl7btA9i+9Ceb+eh/i92wTvPDLBTAgAAeuJ/B/2DbgkAAAAAAAAAAAAAAAAAAAAcX/v9DFgcws+J7Y65NZhUAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD29N8AAAD//5yOzl8=") openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002600)='./file1\x00', 0x105042, 0x0) unlink(&(0x7f0000000180)='./file1\x00') open_tree(0xffffffffffffff9c, 0x0, 0x89901) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) 2m47.792679892s ago: executing program 1 (id=293): r0 = syz_open_dev$MSR(&(0x7f0000000700), 0x1, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000740)=[0x9f, 0x9, 0x3, 0x6, 0x3, 0xfffffab8, 0x2, 0x3d66]) 2m46.893894324s ago: executing program 1 (id=297): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@noload}, {@dioread_nolock}, {@grpquota}]}, 0x1, 0x4ee, &(0x7f0000000740)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f00000000c0)='./control\x00', 0x0) inotify_init() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) close(r0) syz_open_dev$loop(&(0x7f0000000100), 0xff, 0x80000) 2m44.438448608s ago: executing program 1 (id=302): read(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x46000200) 2m28.047876176s ago: executing program 34 (id=302): read(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x46000200) 1m48.81736203s ago: executing program 3 (id=380): r0 = io_uring_setup(0x503e, &(0x7f0000000f40)={0x0, 0x698c, 0x100, 0x2, 0xfffffffe}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, 0x0, 0x0) poll(&(0x7f0000000080)=[{}], 0x1, 0x100) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 1m48.542465634s ago: executing program 7 (id=330): open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) readlink(&(0x7f0000000100)='./file0\x00', 0x0, 0xfff1) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f00000001c0)={0x1fc, 0xffffffffffffffff, 0xfd2f, 0x2, 0x7ffb}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="120000"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r5], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r5, 0x0, &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000680)='5~v', 0x3}], 0x1, &(0x7f0000000b40)=ANY=[], 0x108}}], 0x2, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) 1m47.638398686s ago: executing program 3 (id=384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_emit_vhci(0x0, 0x14) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) prlimit64(r1, 0xf, 0x0, &(0x7f0000000040)) gettid() socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rmdir(0x0) getpriority(0x2, r1) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) 1m47.495584638s ago: executing program 7 (id=385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_emit_vhci(0x0, 0x14) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpgrp(0xffffffffffffffff) prlimit64(r1, 0xf, 0x0, &(0x7f0000000040)) gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rmdir(0x0) getpriority(0x2, r1) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) 1m45.18856634s ago: executing program 3 (id=387): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = getpgrp(0x0) syz_pidfd_open(r6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r4, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x8000, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) 1m45.166236801s ago: executing program 7 (id=388): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x1208000, 0x0, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x0, 0x1, 0x8, 0x6, 0x1000, 0x7, {0x1, 0x0, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x7, 0x7fff, 0x7, 0x4000, 0xb, 0x0, 0xee00, 0x4, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x5, 0x0, @private=0xa010101, @private=0xa010100, {[@timestamp_addr={0x44, 0x4, 0x5, 0x3}, @ssrr={0x89, 0x7, 0xce, [@multicast2]}, @generic={0x83, 0x2}]}}, {{0x0, 0xfffe, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket(0x840000000002, 0x3, 0xff) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb}) r7 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x3, 0x2c7}) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000900)=[r6], 0x1) inotify_init() chown(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 1m43.06433922s ago: executing program 3 (id=389): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, 0x0, 0x0, 0xc002a0, 0x0) 1m43.06368457s ago: executing program 7 (id=390): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRESDEC=0x0, @ANYRES32=r0], 0x1, 0x9ce, &(0x7f0000001740)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=@gettaction={0x28, 0x32, 0x301, 0x0, 0x2, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x28}}, 0x4000000) 1m42.151850502s ago: executing program 6 (id=394): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002300)={0x7, {"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", 0x1000}}, 0x1006) 1m41.400994053s ago: executing program 3 (id=396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) setrlimit(0x5, &(0x7f0000000000)={0x8465, 0xfff}) capset(0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") 1m41.060006548s ago: executing program 6 (id=398): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x1) prlimit64(0x0, 0xc, 0x0, 0x0) flock(0xffffffffffffffff, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r3, &(0x7f00000013c0)=""/208, 0xd0, 0x800) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x0, 0x1, 0x2, 0x8001, 0xffffffffffffffff}, {}, 0x0, 0x1, 0x1}, {{@in6=@private2, 0x4d6, 0x3c}, 0x2, @in6=@private0, 0x0, 0x1}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1m40.370146987s ago: executing program 3 (id=399): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r1, 0x0, 0x14, 0x0, &(0x7f00000000c0)) 1m37.732974354s ago: executing program 6 (id=400): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = getpgrp(0x0) syz_pidfd_open(r5, 0x0) ioprio_get$uid(0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r4, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x8000, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) 1m34.447702249s ago: executing program 6 (id=408): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000040)=0x8000, 0x4) 1m33.896613497s ago: executing program 6 (id=409): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) setrlimit(0x5, &(0x7f0000000000)={0x8465, 0xfff}) capset(0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") 1m32.813768752s ago: executing program 6 (id=410): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x8040, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x274, &(0x7f0000000000)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f00000004c0)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x98}}, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r7}, @call={0x85, 0x0, 0x0, 0x1f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000200)="9e36d448b388dd", 0x0, 0x2f00, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000040)={0xb, 0x0, 0x0, 0x3}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) r10 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x8) fcntl$setstatus(r10, 0x4, 0x2c00) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x800, 0x8) r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="377aa5a21ec2cb198e569d4e6c9443eb027db18b90e433e59e8ababf621011bd14f06a7a51ac4595b805ccb6389816d520873fbeb3d68615d43b3225840717a27eb920638c8288c65676bfa686c068f263b83b2927307641bf5893e3d01369478f6a94d2d7a3931491e0a9ca7279a8d963d6a8417da1b1b131ea324ad985c7d46fa98a6aaf95d0f70427b09c80afcb08418e5602d7f4a50e09e917d8cdffbb2fb839a1b568603ae8e4555aa7656bc35d5f7aca3027f070c7a2f0407eed65d64a3480a03c5b53aee9ed49f1df90f33f955176812ac2f858870b8f24bf5e1afd4a0127d97b644cd1169376a43dd68b2dc2", @ANYRES64=r2, @ANYRES64=r11, @ANYRES64], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m26.791163346s ago: executing program 35 (id=390): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRESDEC=0x0, @ANYRES32=r0], 0x1, 0x9ce, &(0x7f0000001740)="$eJzs3c1vXOW9B/Dv8Uvia6IQIJebi4BMwg0YyHVsp4RGbJrY42SoXyrbkYiqilCSVFGsUkErAeoilaquitpF1QXdsewKiQ1squzav6CLShX/Auoq6qJTnTPj2Ik9Hsf1G+HzsY7nvPzO8/wen+PzyMcz5wlfZ81ms5o2uXzpjzuZLHvP+YkvP/n0o3L6xa3sS29eKT5PBpLUkr4kR5L+8Ym52ekuBd1MriS5nRRJ9qf1uiFXUvwmB5aXb6f4Q1lv5dImG8aGNPlG2+3zDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qJifGJkZLTIVGPm0hu1zqohwDtt7Fku74tq1O/ii671JkU5ZWBgaajvI4eXNz9Zfjuep1tLT1cDkmcgHz7y5KHXnujrWdp/nYQfxL/agyE/8I7vffDhzbcWF6+9u0WJfN1cqM805mcb0+cu1GuN+dna2TNnRk5dnJyvTTam6vOX5xfq07Xxufq5hdm52tD4i7XRs2dP1+rDl2cvzVyYGJ6qL6189f/HRkbO1F4f/l793Nz87Myp14fnxy82pqYaMxeqmHJzGfNqeSJ+t7FQW6ifm67Vrt9YvHb6nozWOCXKoNFuLSmDxroFjY2MjY2Ojo2Nnnnl7Cuvjoz0La/oTbVi5D5ZtcvdkzYHslXnL7vv456NRm7xFRw2r6fd/2cqjczkUt5Ibc2v8UxkLrOZ7rC9ban/P3Gqvm69K/v/pV7+yPLmp1L1/8+2lp7t1P93yGXnvt7LB/kwN/NWFrOYa3n3nq37N1Fis7n7rdr414XUM5NG5jObRqZzrlpTa6+p5WzO5ExG8mYuZjLzqWUyjUylnvlcznwWUq/OqPHMpZ5zWegrD3QtQxnPi6llNGdzNqdTSz3DuZzZXMpMLmQi56pSrudG9XM/vU6Od4NGNxI0tk7QOv1/e8UD9P98Q23DVRw2p9nu//d1Dx0a34mEAAAAgC33v3/JwcOP//nvSX+eqe6xAwAAAA+b6u16T5cv/eXcMykmG1P1kd1OCwAAANhCRfUZuyLJYI625pY+CeUmAAAAADwkqv//P1u+DJZzR1P4+x8AAAAeNt2fsd81ojiZWm6Vm2pXW5FX2xHt5/wOTjam6sPjs1Ovjeb56ikD1ScNVpXWm0NJ9fGDl3KsFXVssPU6eG+JA2XU6PBroxnI8XZDhp4rX54bWiNyrIx8KS+0Il9YihzIqsjTZSQAPOyOr9Mfb7T/fyknWxEnn6oe39731Bp98IieFQD2iu5j7HSNKL61NPxPh7//e3P9aOstBcN5O+9kMVdzsvq0QfWOg3apuV1kudTBFW9DONnlbsDgihFeTi7dDzh6YM37AYMrBno5ueqOQKfY02v+7IotPxoAsDOOr+qH1+n/m83W3Kr7/+v//T/oLYUAsKfcHcF+G2fur7N/d5oKALR17qXX0buNCQEAAAAAAAAAAAAAAAAAAAAAAAAAAMBDYDuf/9+TZHtHFvgPZm4l2QNpmNnemYEdGeHigx/s28On+uZmdvvKBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwE4okt611vck+5O+kSSndj6r7XNrtxPYZcWd3Mn7ObjbeQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPGzaz//vSev1kdaq9PUkJ5JcSfL93c5xK93Z7QR22Yrn/5fHPM0ifa3DnqJ/fGJudro8/Nlfbv/yk08/KqfN1FMWUNZwz+AS7Ro67/VYtdfgxLX3bv70nZ/UJs5XSZ5fmJyamL4w953lwCeLz5JaWtOSpXx/XrTP4ntb/lnZ0u71lrVMVvVOrK73f9ba+269J/70285tW7acxo3Fa2NlTQv1NxZ+9uMb768IejzHkueGkqF7a/pROXWo6Vj616u3+Kr4VXEwv8+V6viXaRTNojxEj1bt/6/rNxavDb/9zuLVDjkdytEkV5OBjed0dPWRWFKddT39Za0jVVD57XCX8tb1SO/BZrNV4miHNjxWnTKDD9SGWuc2VLr83NttPN0hoyfy/AMf6ee71Nj2z2ZLa6n4qvhbcTF/zS9XjP/RUx7/E9nIb2cZU0WuOFM6t/nEcsvHVm548/7Ijr+VbINf54f59t3j37Pi+t8+VjtzPVpR47b9XhStXqitmj98X4/Uvvp0yrKd5+FWVIc8/zsvr96vS54vd7mibNHv/72Kr4qPi6H8I7eM/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOx9RdK71vqe5ESSQ0keLZdrSXMr6usZLLaimA3at2rNrR2sfe/ouTtX3MmdvJ+Du5oOAAAAAAAAAFvm/MSXn3z6UTlV/4/vzf8VnycDrf/09yU5VPyuf3xibna6S0H9yZUkt8v5gQfLodwvB5aXb5dLRx68LQDAxvw7AAD//+nEdEo=") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=@gettaction={0x28, 0x32, 0x301, 0x0, 0x2, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x28}}, 0x4000000) 1m25.098300139s ago: executing program 36 (id=399): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r1, 0x0, 0x14, 0x0, &(0x7f00000000c0)) 1m17.710729182s ago: executing program 37 (id=410): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x8040, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x274, &(0x7f0000000000)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f00000004c0)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x98}}, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r7}, @call={0x85, 0x0, 0x0, 0x1f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000200)="9e36d448b388dd", 0x0, 0x2f00, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000040)={0xb, 0x0, 0x0, 0x3}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) r10 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x8) fcntl$setstatus(r10, 0x4, 0x2c00) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x800, 0x8) r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="377aa5a21ec2cb198e569d4e6c9443eb027db18b90e433e59e8ababf621011bd14f06a7a51ac4595b805ccb6389816d520873fbeb3d68615d43b3225840717a27eb920638c8288c65676bfa686c068f263b83b2927307641bf5893e3d01369478f6a94d2d7a3931491e0a9ca7279a8d963d6a8417da1b1b131ea324ad985c7d46fa98a6aaf95d0f70427b09c80afcb08418e5602d7f4a50e09e917d8cdffbb2fb839a1b568603ae8e4555aa7656bc35d5f7aca3027f070c7a2f0407eed65d64a3480a03c5b53aee9ed49f1df90f33f955176812ac2f858870b8f24bf5e1afd4a0127d97b644cd1169376a43dd68b2dc2", @ANYRES64=r2, @ANYRES64=r11, @ANYRES64], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 27.581531657s ago: executing program 9 (id=420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) setrlimit(0x5, &(0x7f0000000000)={0x8465, 0xfff}) capset(0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") 26.212697826s ago: executing program 9 (id=498): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x1208000, 0x0, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x0, 0x1, 0x8, 0x6, 0x1000, 0x7, {0x1, 0x0, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x7, 0x7fff, 0x7, 0x4000, 0xb, 0x0, 0xee00, 0x4, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x5, 0x0, @private=0xa010101, @private=0xa010100, {[@timestamp_addr={0x44, 0x4, 0x5, 0x3}, @ssrr={0x89, 0x7, 0xce, [@multicast2]}, @generic={0x83, 0x2}]}}, {{0x0, 0xfffe, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket(0x840000000002, 0x3, 0xff) r7 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x3, 0x2c7}) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000900)=[r6], 0x1) symlink(&(0x7f0000000340)='.\x00', &(0x7f0000000000)='./file0\x00') inotify_init() chown(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 25.392660308s ago: executing program 2 (id=431): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$udf(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x800048, &(0x7f00000001c0)=ANY=[], 0x1, 0x4b1, &(0x7f0000000740)="$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") chdir(&(0x7f0000000a40)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r5, 0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring) connect$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) 16.877755946s ago: executing program 0 (id=512): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240), 0x22, 0x4d5, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa00"], 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close_range(r3, 0xffffffffffffffff, 0x2) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x1) 11.468359811s ago: executing program 8 (id=516): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r2}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x711, @private1, 0x206}, {0xa, 0x4e20, 0x0, @mcast2, 0x10001}, r2, 0x403}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r2, 0x5}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0xa0) 10.974929988s ago: executing program 38 (id=498): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x1208000, 0x0, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x0, 0x1, 0x8, 0x6, 0x1000, 0x7, {0x1, 0x0, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x7, 0x7fff, 0x7, 0x4000, 0xb, 0x0, 0xee00, 0x4, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x5, 0x0, @private=0xa010101, @private=0xa010100, {[@timestamp_addr={0x44, 0x4, 0x5, 0x3}, @ssrr={0x89, 0x7, 0xce, [@multicast2]}, @generic={0x83, 0x2}]}}, {{0x0, 0xfffe, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket(0x840000000002, 0x3, 0xff) r7 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x3, 0x2c7}) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000900)=[r6], 0x1) symlink(&(0x7f0000000340)='.\x00', &(0x7f0000000000)='./file0\x00') inotify_init() chown(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 10.958992628s ago: executing program 0 (id=518): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0xa08000, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0xee, 0x97, 0x8a, 0x40, 0x16ca, 0x1502, 0xa925, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7e, 0x24, 0x5}}]}}]}}, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfeeb, 0x0, 0x7fffffff}, 0x0, 0x0) syz_io_uring_setup(0x6aa2, 0x0, &(0x7f0000000000), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES16=r1], 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x33}, 0x4000a100) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB], 0x8) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x0, '\x00', @ptr}}) socket$nl_netfilter(0x10, 0x3, 0xc) 9.981851921s ago: executing program 39 (id=431): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$udf(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x800048, &(0x7f00000001c0)=ANY=[], 0x1, 0x4b1, &(0x7f0000000740)="$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") chdir(&(0x7f0000000a40)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r5, 0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring) connect$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) 8.227156136s ago: executing program 8 (id=522): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000340)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x40) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)) 7.659264933s ago: executing program 0 (id=523): r0 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000340)=0x8, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000000)={0x0, 0xfff, 0x6, 0x1, 0x8fff, 0x8, 0x1000, 0x7, 0x0, 0x1, 0x8, 0x4}) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, 0x0, &(0x7f0000001380)) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0xffff133a, 0x3], [{0x0, 0xffffffff, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x100000c}, {0xffffffff}, {0x0, 0x4}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8}, {0x0, 0x82}, {0x1000000, 0x6}, {0x1, 0xffffffff}, {0x3}], 0xc}) socket$inet6(0xa, 0x3, 0x9) 6.542847189s ago: executing program 0 (id=524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0xfffffffc) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000440000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000005680)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRES16=0x0, @ANYRESOCT, @ANYBLOB="2bb2f21ada6760c20313047b8112908bcb0e8451be2ebd1d29445b029da7a2f9ccf6297a109fb2e6de985bf353bd642f9cbf06f090e3f42035e3fd20ef229e56213246f7282faf18c733df472dbd67db3f663c49170aa72527767bd9022d8b07daaa10c75028abf2f11cbb00885ec0734b923a8c5d3d06c7bea5b94b4ecd4b93972bd2ddb2289efa41ede4223c54a452aa19617b36c69a7b8eba813185ec5a5ce1a935747e29cfcf0c01b18ef82da33e65b898843ffc", @ANYRESHEX, @ANYRESOCT, @ANYRES8=0x0], 0x11, 0x6e3, &(0x7f00000057c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) close(0xffffffffffffffff) io_setup(0x3, &(0x7f0000000180)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 4.755424514s ago: executing program 0 (id=525): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r2}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x5, r2, 0x10, 0x1, @in={0x2, 0x4e23, @loopback}}}, 0xa0) 4.755000144s ago: executing program 8 (id=526): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r2}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x711, @remote, 0xbf}, {0xa, 0x4e20, 0xfffffffe, @mcast2, 0x10001}, r2, 0x403}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r2, 0x5}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x1, 0x8, "4ca4625e00b5aa95a443d782d859cb2df816a3bc9bd3bf1d11d8b4a7ba9fc6dfb72a8a253215874b349abc806123fd11b1d23eb79cf0385a4cd7b494621f0b26b593bbccdfdf13dbc79be9e9f18b5fb46b9d5a74d7a6dd151c0f37b9e89825f2f99217fb0091568ce14c98b5b462555908260a0e7c7c33fc1ba12df6d0d8fc11847c4b29bd4752fa53802767e26e11475a905215a4d1cfb8a8cc88d605e68145d97c3c2836b7935b66b3583d6633efe51a9cb5426092d85d47a8ca52fe5b7c2083596186c5b4e98f1052759d2233c3fb1e62e4333f0898f89b770b6abe57c92ba6f0e1c64a714686c6f22f7c8f6f79ee56c56d09e95001654229a197d0462e6f", 0x0, 0x4, 0x5, 0xf, 0xd, 0x0, 0x6, 0x1}, r2}}, 0x120) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000600)={0x8, 0x120, 0xfa00, {0x0, {0x2, 0x9, "a5e07979b722fa25defd17b7871673c450d21e678bf99dda61ef51fc036f614c85a424f2707f6194e6ff71e51e35f11e2a2e03b6e8ed06000000000067f77430a1b41359a003000006000000008140af72ba1f2b0e8e776c1b0cf274402b0d57454f515bf3403a3bf9a6348feffd0000010061df63dbe243a473f9e03a20393d563cf67086f12b309bbe4381e74b1c35841418746bb5dd508a924a55fe3f7d4ea727b72d1108000000000000006d1f9d7a7aaa29c78780d01dc13fc032fdb09f4ff0d1a869c6e38965b5d25c58db75b585000000000000000000000000e7ffffff00", 0x8, 0x4, 0x43, 0x0, 0x4, 0x7, 0x5, 0x1}, r2}}, 0x128) 4.179964902s ago: executing program 5 (id=527): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r1, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @bcast}, 0x1c) connect$rose(r1, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40) syz_genetlink_get_family_id$tipc2(&(0x7f00000061c0), r1) 3.739564568s ago: executing program 8 (id=528): open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) readlink(&(0x7f0000000100)='./file0\x00', 0x0, 0xfff1) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f00000001c0)={0x1fc, 0xffffffffffffffff, 0xfd2f, 0x2, 0x7ffb}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="120000"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r5], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r5, 0x0, &(0x7f00000004c0)=@tcp6=r1}, 0x20) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) 2.661110083s ago: executing program 5 (id=529): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@noload}, {@dioread_nolock}, {@grpquota}]}, 0x1, 0x4ee, &(0x7f0000000740)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f00000000c0)='./control\x00', 0x0) inotify_init() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) close(r0) syz_open_dev$loop(&(0x7f0000000100), 0xff, 0x80000) 2.640179633s ago: executing program 8 (id=530): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 2.392481987s ago: executing program 8 (id=531): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0xa08000, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0xee, 0x97, 0x8a, 0x40, 0x16ca, 0x1502, 0xa925, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7e, 0x24, 0x5}}]}}]}}, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfeeb, 0x0, 0x7fffffff}, 0x0, 0x0) syz_io_uring_setup(0x6aa2, 0x0, &(0x7f0000000000), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES16=r1], 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x33}, 0x4000a100) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB], 0x8) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x0, '\x00', @ptr}}) socket$nl_netfilter(0x10, 0x3, 0xc) 1.649118717s ago: executing program 0 (id=532): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x800}]}}]}, 0x38}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x110) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r7, r6, 0x0, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xfc, 0x0, 0x1, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 697.50351ms ago: executing program 5 (id=533): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@any, 0x4, 0x81, "78d048", 0xff, 0x3}]}}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@any, 0x1}}}, 0xa) 549.793792ms ago: executing program 5 (id=534): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x90, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x700000000000000, 0x0}) 352.150745ms ago: executing program 5 (id=535): mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00'], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x10000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x3000000, &(0x7f00000001c0)={[{@inlinecrypt}, {@discard}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") 0s ago: executing program 5 (id=536): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): unmounting filesystem. [ 236.059311][ T4317] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.239819][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.284490][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.423186][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.435897][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.442935][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.871032][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.984065][ T5690] loop3: detected capacity change from 0 to 512 [ 238.045066][ T5589] device hsr_slave_0 entered promiscuous mode [ 238.052129][ T5589] device hsr_slave_1 entered promiscuous mode [ 238.067627][ T5589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.095641][ T5589] Cannot create hsr debugfs directory [ 238.176300][ T5690] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 238.187924][ T5690] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.279777][ T5690] loop3: detected capacity change from 512 to 64 [ 238.501239][ T4264] EXT4-fs (loop3): unmounting filesystem. [ 238.838116][ T5703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.303'. [ 238.848266][ T5703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'. [ 239.412965][ T5589] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 239.497305][ T5589] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 239.595275][ T5589] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 239.619822][ T5589] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 239.656233][ T5709] loop3: detected capacity change from 0 to 256 [ 239.780025][ T5709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.306'. [ 239.817917][ T5709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.306'. [ 240.140590][ T5717] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 240.149918][ T5717] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 240.336499][ T5719] vivid-000: disconnect [ 240.900129][ T27] kauditd_printk_skb: 79 callbacks suppressed [ 240.900146][ T27] audit: type=1326 audit(1746833229.809:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.0.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf078e969 code=0x7fc00000 [ 240.969547][ T5713] vivid-000: reconnect [ 240.976362][ T27] audit: type=1326 audit(1746833229.839:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.0.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1cf078e969 code=0x7fc00000 [ 240.998992][ T27] audit: type=1326 audit(1746833229.839:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.0.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf078e969 code=0x7fc00000 [ 241.021907][ T27] audit: type=1326 audit(1746833229.839:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.0.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf078e969 code=0x7fc00000 [ 241.046921][ T27] audit: type=1326 audit(1746833229.839:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.0.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf078e969 code=0x7fc00000 [ 241.069578][ T27] audit: type=1326 audit(1746833229.839:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.0.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf078e969 code=0x7fc00000 [ 241.092682][ T27] audit: type=1326 audit(1746833229.839:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.0.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf078e969 code=0x7fc00000 [ 241.115695][ T27] audit: type=1326 audit(1746833229.839:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.0.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf078e969 code=0x7fc00000 [ 241.138998][ T27] audit: type=1326 audit(1746833229.839:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.0.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf078e969 code=0x7fc00000 [ 241.162586][ T27] audit: type=1326 audit(1746833229.839:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.0.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf078e969 code=0x7fc00000 [ 241.492141][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.555954][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.576166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.585022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.602934][ T5723] loop0: detected capacity change from 0 to 1024 [ 241.637740][ T5723] EXT4-fs: Ignoring removed nobh option [ 241.815292][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.852798][ T5723] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #11: comm syz.0.310: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 241.992958][ T5723] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.310: couldn't read orphan inode 11 (err -117) [ 242.293242][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.304748][ T5723] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 242.442207][ T4680] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.450524][ T4680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.498508][ T5733] input: syz0 as /devices/virtual/input/input8 [ 242.515592][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.551042][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.589241][ T4680] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.596409][ T4680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.696747][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.711794][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.742714][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.775051][ T4317] device hsr_slave_0 left promiscuous mode [ 242.809072][ T4317] device hsr_slave_1 left promiscuous mode [ 242.869562][ T4317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.881163][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.315'. [ 242.890255][ T5741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'. [ 243.408302][ T4317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.423448][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 243.454029][ T4317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.487253][ T4317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.495515][ T4317] device bridge_slave_1 left promiscuous mode [ 243.528471][ T4317] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.555479][ T4317] device bridge_slave_0 left promiscuous mode [ 243.572697][ T4317] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.616700][ T4317] device veth1_macvtap left promiscuous mode [ 243.644159][ T4317] device veth0_macvtap left promiscuous mode [ 243.661568][ T4317] device veth1_vlan left promiscuous mode [ 243.682886][ T4317] device veth0_vlan left promiscuous mode [ 243.745236][ T5748] loop3: detected capacity change from 0 to 4096 [ 243.756764][ T5750] loop5: detected capacity change from 0 to 256 [ 243.784481][ T5750] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 243.797254][ T5748] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 243.806403][ T5750] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 244.842562][ T5759] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 244.852089][ T5759] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 244.982558][ T5760] vivid-000: disconnect [ 245.602302][ T5757] vivid-000: reconnect [ 245.738526][ T4264] EXT4-fs (loop3): unmounting filesystem. [ 247.516483][ T4317] team0 (unregistering): Port device team_slave_1 removed [ 247.589585][ T4317] team0 (unregistering): Port device team_slave_0 removed [ 248.452374][ T4317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.546264][ T5779] loop3: detected capacity change from 0 to 1024 [ 248.553751][ T5779] EXT4-fs: Ignoring removed nobh option [ 248.573980][ T4317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.586272][ T5779] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz.3.326: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 248.619676][ T5779] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.326: couldn't read orphan inode 11 (err -117) [ 248.637724][ T5779] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 249.177335][ T4311] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 249.390945][ T4311] usb 6-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25 [ 249.429258][ T4311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.478063][ T4311] usb 6-1: Product: syz [ 249.499981][ T4311] usb 6-1: Manufacturer: syz [ 249.520790][ T4311] usb 6-1: SerialNumber: syz [ 249.564107][ T4311] usb 6-1: config 0 descriptor?? [ 249.787225][ T5785] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 249.796318][ T5785] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 250.069302][ T5787] vivid-000: disconnect [ 251.339720][ T4317] bond0 (unregistering): Released all slaves [ 251.821640][ T27] kauditd_printk_skb: 59 callbacks suppressed [ 251.821657][ T27] audit: type=1326 audit(1746833240.729:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5783 comm="syz.5.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb481d8e969 code=0x7fc00000 [ 251.854041][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 251.881500][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.893838][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 251.903579][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.916118][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 251.925610][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.934559][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 251.953111][ T5589] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.011769][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 252.015667][ T4299] usb 6-1: USB disconnect, device number 2 [ 252.035713][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 252.044302][ T5783] vivid-000: reconnect [ 252.056134][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.081127][ T4264] EXT4-fs (loop3): unmounting filesystem. [ 252.180695][ T5791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.327'. [ 252.354208][ T5791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 252.569146][ T5799] netlink: 36 bytes leftover after parsing attributes in process `syz.5.329'. [ 255.103049][ T5811] loop5: detected capacity change from 0 to 512 [ 255.239370][ T5811] EXT4-fs: Mount option(s) incompatible with ext3 [ 255.563345][ T27] audit: type=1326 audit(1746833244.469:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 255.667482][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.674939][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.063431][ T27] audit: type=1326 audit(1746833244.469:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 256.143511][ T27] audit: type=1326 audit(1746833244.469:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 256.804225][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 256.853872][ T27] audit: type=1326 audit(1746833244.469:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 256.880327][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 256.964285][ T27] audit: type=1326 audit(1746833244.469:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 256.996981][ T27] audit: type=1326 audit(1746833244.469:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb481d8d2d0 code=0x7ffc0000 [ 257.024533][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.032110][ T27] audit: type=1326 audit(1746833244.469:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb481d90197 code=0x7ffc0000 [ 257.075565][ T4262] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.080068][ T4262] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.471149][ T4262] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.576635][ T4262] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.589310][ T4262] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 259.612643][ T4262] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 259.696988][ T26] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 259.724068][ T5237] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.815091][ T27] audit: type=1326 audit(1746833244.469:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 259.904596][ T26] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25 [ 259.953490][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.019378][ T26] usb 4-1: Product: syz [ 260.046320][ T27] audit: type=1326 audit(1746833244.469:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb481d90197 code=0x7ffc0000 [ 260.079364][ T26] usb 4-1: Manufacturer: syz [ 260.119173][ T26] usb 4-1: SerialNumber: syz [ 261.142427][ T26] usb 4-1: config 0 descriptor?? [ 261.487525][ T27] audit: type=1326 audit(1746833244.469:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb481d8d5ca code=0x7ffc0000 [ 261.600309][ T26] usb 4-1: can't set config #0, error -71 [ 261.611978][ T27] audit: type=1326 audit(1746833244.469:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 261.637456][ T26] usb 4-1: USB disconnect, device number 5 [ 261.674195][ T5237] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.685087][ T4263] Bluetooth: hci0: command 0x0409 tx timeout [ 261.685324][ T27] audit: type=1326 audit(1746833244.469:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 261.842822][ T27] audit: type=1326 audit(1746833244.469:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 261.891387][ T5836] loop3: detected capacity change from 0 to 1024 [ 261.926516][ T27] audit: type=1326 audit(1746833244.469:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 261.932821][ T5237] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.986882][ T27] audit: type=1326 audit(1746833244.469:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 262.042206][ T27] audit: type=1326 audit(1746833244.469:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 262.122479][ T27] audit: type=1326 audit(1746833244.469:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 262.218136][ T27] audit: type=1326 audit(1746833244.469:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 262.242366][ T27] audit: type=1326 audit(1746833244.469:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 262.265135][ T27] audit: type=1326 audit(1746833244.469:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb481d8d2d0 code=0x7ffc0000 [ 262.359896][ T27] audit: type=1326 audit(1746833244.469:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 263.286784][ T5237] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.311680][ T27] audit: type=1326 audit(1746833244.469:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 264.048800][ T4263] Bluetooth: hci0: command 0x041b tx timeout [ 264.229961][ T5856] loop5: detected capacity change from 0 to 1024 [ 264.248216][ T5856] EXT4-fs: Ignoring removed nobh option [ 264.251541][ T5245] hfsplus: b-tree write err: -5, ino 4 [ 264.286530][ T5856] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #11: comm syz.5.337: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 264.336707][ T5856] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.337: couldn't read orphan inode 11 (err -117) [ 264.356042][ T5856] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 264.371123][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 264.396734][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 264.412155][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 264.453451][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 264.463643][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 264.476055][ T5589] device veth0_vlan entered promiscuous mode [ 264.499169][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 264.515700][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 264.613465][ T5589] device veth1_vlan entered promiscuous mode [ 264.621024][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.628930][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.637760][ T5822] device bridge_slave_0 entered promiscuous mode [ 264.647237][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.655511][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.666150][ T5822] device bridge_slave_1 entered promiscuous mode [ 264.734747][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.764030][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.801053][ T5822] team0: Port device team_slave_0 added [ 264.809715][ T5822] team0: Port device team_slave_1 added [ 264.901260][ T5589] device veth0_macvtap entered promiscuous mode [ 264.920544][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 264.948225][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 264.959299][ T4448] EXT4-fs (loop5): unmounting filesystem. [ 265.026527][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 265.114299][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 265.290372][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.322503][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.650417][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.076908][ T4263] Bluetooth: hci0: command 0x040f tx timeout [ 266.087023][ T4353] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 266.293024][ T4353] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25 [ 266.336784][ T4353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.447250][ T4353] usb 4-1: Product: syz [ 266.490456][ T4353] usb 4-1: Manufacturer: syz [ 266.533574][ T4353] usb 4-1: SerialNumber: syz [ 266.595553][ T4353] usb 4-1: config 0 descriptor?? [ 266.835064][ T5880] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 266.844308][ T5880] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 267.112276][ T5888] vivid-001: disconnect [ 267.360686][ T5889] netlink: 4 bytes leftover after parsing attributes in process `syz.5.347'. [ 267.530745][ T5889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.347'. [ 267.724105][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 267.808531][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.857098][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.156910][ T4263] Bluetooth: hci0: command 0x0419 tx timeout [ 268.505574][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.074245][ T5589] device veth1_macvtap entered promiscuous mode [ 269.234957][ T5589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.253501][ T5589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.278783][ T5589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.309111][ T5589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.335758][ T5589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.365342][ T5589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.393609][ T5589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.424390][ T5589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.508967][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.602646][ T5822] device hsr_slave_0 entered promiscuous mode [ 269.621468][ T5822] device hsr_slave_1 entered promiscuous mode [ 269.653073][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 269.671323][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 269.684720][ T5589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.230453][ T27] audit: type=1326 audit(1746833259.139:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5877 comm="syz.3.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5238e969 code=0x7fc00000 [ 270.331458][ T5589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.362114][ T4353] usb 4-1: USB disconnect, device number 6 [ 270.373798][ T5884] vivid-001: reconnect [ 270.383189][ T5589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.394390][ T5589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.405206][ T5589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.417130][ T5589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.431688][ T5589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.443261][ T5589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.456618][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.539098][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 270.555039][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.120981][ T5589] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.242353][ T5903] loop0: detected capacity change from 0 to 1764 [ 272.252106][ T5589] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.260931][ T5589] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.269979][ T5589] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.937423][ T5242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.945659][ T5242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.113843][ T5242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 273.131079][ T5242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.171060][ T5909] loop0: detected capacity change from 0 to 1024 [ 273.190965][ T5909] hfsplus: invalid btree flag [ 273.195906][ T5909] hfsplus: failed to load attributes file [ 273.204159][ T5237] device hsr_slave_0 left promiscuous mode [ 273.216912][ T5242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.227742][ T5237] device hsr_slave_1 left promiscuous mode [ 273.237127][ T5237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.244620][ T5237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.278144][ T5237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.296086][ T5237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.304234][ T5237] device bridge_slave_1 left promiscuous mode [ 273.320949][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.338752][ T5237] device bridge_slave_0 left promiscuous mode [ 273.357641][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.726755][ T5237] device veth1_macvtap left promiscuous mode [ 274.752742][ T5237] device veth0_macvtap left promiscuous mode [ 274.763631][ T5237] device veth1_vlan left promiscuous mode [ 274.775131][ T5237] device veth0_vlan left promiscuous mode [ 275.027446][ T5913] loop5: detected capacity change from 0 to 2048 [ 275.065507][ T5913] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.175782][ T5916] loop3: detected capacity change from 0 to 1024 [ 275.183643][ T5916] EXT4-fs: Ignoring removed nobh option [ 275.243109][ T5916] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz.3.353: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 275.270549][ T5916] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.353: couldn't read orphan inode 11 (err -117) [ 275.319140][ T5916] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 277.035289][ T5237] team0 (unregistering): Port device team_slave_1 removed [ 277.096128][ T5237] team0 (unregistering): Port device team_slave_0 removed [ 277.134647][ T5931] loop0: detected capacity change from 0 to 2048 [ 277.153239][ T5931] EXT4-fs: Ignoring removed nomblk_io_submit option [ 277.163203][ T5931] EXT4-fs: Ignoring removed nobh option [ 277.170322][ T5237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.216537][ T5931] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 277.242262][ T5237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.556618][ T27] audit: type=1326 audit(1746833266.459:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 277.649605][ T27] audit: type=1326 audit(1746833266.499:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 277.764056][ T27] audit: type=1326 audit(1746833266.519:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 277.869233][ T27] audit: type=1326 audit(1746833266.529:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 277.954780][ T27] audit: type=1326 audit(1746833266.629:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 277.985132][ T27] audit: type=1326 audit(1746833266.649:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 278.275252][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 281.065065][ T5918] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 281.434075][ T5237] bond0 (unregistering): Released all slaves [ 281.560258][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 281.770441][ T5822] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 281.827486][ T5822] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 281.838938][ T4264] EXT4-fs (loop3): unmounting filesystem. [ 281.870125][ T5822] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 281.963129][ T5822] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 282.706602][ T27] audit: type=1326 audit(1746833271.609:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5954 comm="syz.6.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50898e969 code=0x7ffc0000 [ 282.718343][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.822297][ T27] audit: type=1326 audit(1746833271.649:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5954 comm="syz.6.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa50898d2d0 code=0x7ffc0000 [ 283.822635][ T5962] loop5: detected capacity change from 0 to 16 [ 283.939336][ T27] audit: type=1326 audit(1746833271.649:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5954 comm="syz.6.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa508990197 code=0x7ffc0000 [ 284.067079][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 284.117936][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.127592][ T5965] loop3: detected capacity change from 0 to 8 [ 284.134450][ T5965] squashfs: Unknown parameter 'threads' [ 284.136900][ T27] audit: type=1326 audit(1746833271.649:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5954 comm="syz.6.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa50898e969 code=0x7ffc0000 [ 284.171757][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.706889][ T27] audit: type=1326 audit(1746833271.649:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5954 comm="syz.6.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa508990197 code=0x7ffc0000 [ 285.760978][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.780001][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.800450][ T27] audit: type=1326 audit(1746833271.649:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5954 comm="syz.6.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa50898d5ca code=0x7ffc0000 [ 285.837213][ T4377] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.844376][ T4377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.873961][ T27] audit: type=1326 audit(1746833271.649:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5954 comm="syz.6.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50898e969 code=0x7ffc0000 [ 285.877497][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.928044][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.946921][ T27] audit: type=1326 audit(1746833271.649:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5954 comm="syz.6.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50898e969 code=0x7ffc0000 [ 285.970721][ T4377] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.977905][ T4377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.999247][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 286.021391][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 286.036935][ T27] audit: type=1326 audit(1746833271.659:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5954 comm="syz.6.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa50898e969 code=0x7ffc0000 [ 286.078829][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 287.527828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 287.555884][ T27] audit: type=1326 audit(1746833271.659:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5954 comm="syz.6.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50898e969 code=0x7ffc0000 [ 287.581323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 287.617811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 287.659384][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 287.707459][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 287.738815][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 287.767930][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 287.800637][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 287.826504][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 287.856281][ T5822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 287.939608][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.364'. [ 287.978185][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'. [ 288.354752][ T5979] loop6: detected capacity change from 0 to 2048 [ 288.410867][ T5979] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 288.938984][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 288.946689][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 288.985252][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.139980][ T27] kauditd_printk_skb: 29 callbacks suppressed [ 289.177398][ T27] audit: type=1326 audit(1746833278.049:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5238e969 code=0x7ffc0000 [ 291.060270][ T27] audit: type=1326 audit(1746833278.049:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5238e969 code=0x7ffc0000 [ 291.087136][ T27] audit: type=1326 audit(1746833278.049:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f5f5238e969 code=0x7ffc0000 [ 291.119913][ T27] audit: type=1326 audit(1746833278.049:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5238e969 code=0x7ffc0000 [ 291.248965][ T27] audit: type=1326 audit(1746833278.049:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5238e969 code=0x7ffc0000 [ 291.338485][ T27] audit: type=1326 audit(1746833278.059:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f5f5238e969 code=0x7ffc0000 [ 291.923732][ T27] audit: type=1326 audit(1746833278.069:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5238e969 code=0x7ffc0000 [ 291.987048][ T4311] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 292.042473][ T27] audit: type=1326 audit(1746833278.069:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5238e969 code=0x7ffc0000 [ 292.100275][ T27] audit: type=1326 audit(1746833278.079:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f5f5238e969 code=0x7ffc0000 [ 292.131998][ T27] audit: type=1326 audit(1746833278.109:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5238e969 code=0x7ffc0000 [ 292.186971][ T4311] usb 6-1: Using ep0 maxpacket: 8 [ 292.198196][ T4311] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 292.255045][ T4311] usb 6-1: config 179 has no interface number 0 [ 292.272137][ T4311] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 292.294092][ T4311] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 292.326406][ T4311] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 292.347069][ T4311] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 292.367089][ T4311] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 292.390837][ T4311] usb 6-1: config 179 interface 65 has no altsetting 0 [ 292.411145][ T4311] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 292.427656][ T4311] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.464894][ T4311] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input9 [ 292.514061][ T6000] loop3: detected capacity change from 0 to 512 [ 292.622689][ T6000] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.376: casefold flag without casefold feature [ 292.706170][ T6000] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.376: couldn't read orphan inode 15 (err -117) [ 292.757360][ T6000] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 292.792414][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 292.819276][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 292.893174][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 292.910595][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 292.930521][ T5822] device veth0_vlan entered promiscuous mode [ 292.940556][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 292.949664][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 292.964619][ T5822] device veth1_vlan entered promiscuous mode [ 293.026537][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 293.037316][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 293.045665][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 293.060629][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 293.079678][ T5822] device veth0_macvtap entered promiscuous mode [ 293.087212][ T6019] loop6: detected capacity change from 0 to 1024 [ 293.106335][ T5822] device veth1_macvtap entered promiscuous mode [ 293.107955][ T6019] EXT4-fs: Ignoring removed nobh option [ 293.163604][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.185802][ T6019] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #11: comm syz.6.374: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 293.200255][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.217225][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.229509][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.240471][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.251248][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.255224][ T6019] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.374: couldn't read orphan inode 11 (err -117) [ 293.261361][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.261383][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.263156][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.304512][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 293.323481][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 293.331898][ T6022] loop0: detected capacity change from 0 to 512 [ 293.348135][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 293.357807][ T6019] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 293.382784][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 293.403419][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.428934][ T6022] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #16: comm syz.0.379: corrupted inode contents [ 293.451658][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.471323][ T6022] EXT4-fs error (device loop0): ext4_dirty_inode:6118: inode #16: comm syz.0.379: mark_inode_dirty error [ 293.482776][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.493605][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.503608][ T6022] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #16: comm syz.0.379: corrupted inode contents [ 293.515763][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.526460][ T6022] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.379: mark_inode_dirty error [ 293.538126][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.548889][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.549899][ T6022] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #16: comm syz.0.379: corrupted inode contents [ 293.559697][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.562111][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.592375][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 293.602735][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 293.612893][ T6022] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 293.615294][ T5822] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.629405][ T6022] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #16: comm syz.0.379: corrupted inode contents [ 293.641387][ T5822] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.653749][ T5822] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.658512][ T6022] EXT4-fs error (device loop0): ext4_truncate:4312: inode #16: comm syz.0.379: mark_inode_dirty error [ 293.662872][ T5822] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.696682][ T6022] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 293.722049][ T6022] EXT4-fs (loop0): 1 truncate cleaned up [ 293.730677][ T6022] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 293.744108][ T6022] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.768329][ T5241] EXT4-fs error (device loop0): ext4_release_dquot:6838: comm kworker/u4:25: Failed to release dquot type 1 [ 293.802912][ T4264] EXT4-fs (loop3): unmounting filesystem. [ 293.847234][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.884304][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.915335][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 293.929776][ T5247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.939162][ T5247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.951868][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 294.217927][ T5589] EXT4-fs (loop6): unmounting filesystem. [ 294.309925][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 294.314553][ T4311] usb 6-1: USB disconnect, device number 3 [ 294.338559][ T4311] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 294.971975][ T6038] loop6: detected capacity change from 0 to 512 [ 295.153451][ T6038] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 295.177992][ T6038] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.513261][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 295.513315][ T27] audit: type=1326 audit(1746833284.399:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.7.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146218e969 code=0x7ffc0000 [ 297.054226][ T27] audit: type=1326 audit(1746833284.509:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.7.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146218e969 code=0x7ffc0000 [ 297.134437][ T27] audit: type=1326 audit(1746833284.569:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.7.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f146218e969 code=0x7ffc0000 [ 297.166965][ T27] audit: type=1326 audit(1746833285.859:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.7.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146218e969 code=0x7ffc0000 [ 297.206702][ T27] audit: type=1800 audit(1746833285.879:721): pid=6038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.381" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 297.268818][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.386'. [ 297.278647][ T6011] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 297.292846][ T27] audit: type=1326 audit(1746833285.879:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.7.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146218e969 code=0x7ffc0000 [ 297.306915][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.386'. [ 297.395990][ T27] audit: type=1326 audit(1746833285.969:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5238e969 code=0x7ffc0000 [ 297.472465][ T27] audit: type=1326 audit(1746833285.969:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5238e969 code=0x7ffc0000 [ 299.576694][ T5589] EXT4-fs (loop6): unmounting filesystem. [ 299.636634][ T6073] loop3: detected capacity change from 0 to 1024 [ 299.794526][ T6076] loop5: detected capacity change from 0 to 1024 [ 299.803454][ T6076] EXT4-fs: Ignoring removed nobh option [ 299.825724][ T6076] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #11: comm syz.5.391: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 299.857209][ T6076] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.391: couldn't read orphan inode 11 (err -117) [ 299.914427][ T6076] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 299.938576][ T6080] binder: 6077:6080 ioctl c0306201 0 returned -14 [ 300.043071][ T6073] EXT4-fs: Ignoring removed orlov option [ 300.054330][ T6073] EXT4-fs (loop3): Test dummy encryption mode enabled [ 300.148244][ T6073] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 300.901815][ T4448] EXT4-fs (loop5): unmounting filesystem. [ 301.163232][ T4264] EXT4-fs (loop3): unmounting filesystem. [ 301.320343][ T6093] loop5: detected capacity change from 0 to 1024 [ 301.464564][ T6093] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 301.873013][ T6098] loop3: detected capacity change from 0 to 512 [ 302.072907][ T6098] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 302.082434][ T6098] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 304.785554][ T4264] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /95/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 304.819782][ T4448] EXT4-fs (loop5): unmounting filesystem. [ 305.192791][ T6113] loop5: detected capacity change from 0 to 1024 [ 305.260823][ T6113] hfsplus: invalid btree flag [ 305.265988][ T6113] hfsplus: failed to load attributes file [ 307.049856][ T6119] loop0: detected capacity change from 0 to 512 [ 307.064326][ T6119] EXT4-fs: Mount option(s) incompatible with ext3 [ 307.213801][ T27] audit: type=1326 audit(1746833296.119:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf078e969 code=0x7ffc0000 [ 307.357828][ T27] audit: type=1326 audit(1746833296.119:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf078e969 code=0x7ffc0000 [ 308.000899][ T27] audit: type=1326 audit(1746833296.119:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1cf078e969 code=0x7ffc0000 [ 308.056925][ T27] audit: type=1326 audit(1746833296.119:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf078e969 code=0x7ffc0000 [ 308.146934][ T27] audit: type=1326 audit(1746833296.119:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf078e969 code=0x7ffc0000 [ 308.186928][ T27] audit: type=1326 audit(1746833296.149:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f1cf078e969 code=0x7ffc0000 [ 308.266908][ T27] audit: type=1326 audit(1746833296.149:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf078e969 code=0x7ffc0000 [ 308.324429][ T27] audit: type=1326 audit(1746833296.149:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1cf078d2d0 code=0x7ffc0000 [ 308.384474][ T27] audit: type=1326 audit(1746833296.149:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1cf0790197 code=0x7ffc0000 [ 308.445680][ T27] audit: type=1326 audit(1746833296.149:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1cf078e969 code=0x7ffc0000 [ 308.583621][ T6131] loop5: detected capacity change from 0 to 1024 [ 308.597897][ T6131] EXT4-fs: Ignoring removed nobh option [ 308.640929][ T6131] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #11: comm syz.5.405: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 308.673292][ T6131] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.405: couldn't read orphan inode 11 (err -117) [ 308.688930][ T6131] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 309.284723][ T6136] loop6: detected capacity change from 0 to 512 [ 309.550078][ T6136] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 309.564048][ T6136] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 309.657731][ T5589] EXT4-fs error (device loop6): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /12/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 309.751452][ T4448] EXT4-fs (loop5): unmounting filesystem. [ 310.926862][ T4301] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 311.130109][ T4301] usb 6-1: Using ep0 maxpacket: 16 [ 311.139577][ T4301] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.172830][ T4301] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.194777][ T4301] usb 6-1: config 0 interface 0 has no altsetting 0 [ 311.202355][ T4301] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 311.216078][ T4301] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.237605][ T4301] usb 6-1: config 0 descriptor?? [ 311.284531][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.412'. [ 311.314166][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.412'. [ 311.857090][ T4301] usb 6-1: USB disconnect, device number 4 [ 314.109601][ T6155] loop5: detected capacity change from 0 to 1024 [ 314.130240][ T6155] hfsplus: invalid btree flag [ 314.135178][ T6155] hfsplus: failed to load attributes file [ 316.628792][ T4262] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 316.639105][ T4262] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 316.657420][ T4262] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 316.666480][ T4262] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 316.675156][ T4262] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 316.682698][ T4262] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 317.041115][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.048128][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.740139][ T6161] chnl_net:caif_netlink_parms(): no params data found [ 317.751253][ T6170] loop5: detected capacity change from 0 to 128 [ 317.898757][ T6170] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 318.027136][ T6170] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.144983][ T4269] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 318.154718][ T4269] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 318.167607][ T4269] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 318.188857][ T4269] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 318.197766][ T4269] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 318.205220][ T4269] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 318.251985][ T6161] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.287007][ T6161] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.295314][ T6161] device bridge_slave_0 entered promiscuous mode [ 318.726977][ T4269] Bluetooth: hci2: command 0x0409 tx timeout [ 318.836047][ T4448] EXT4-fs (loop5): unmounting filesystem. [ 318.979254][ T6161] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.986492][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.004335][ T6161] device bridge_slave_1 entered promiscuous mode [ 319.108314][ T6183] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.115998][ T6183] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.124091][ T6183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.139891][ T6161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.293889][ T4377] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.378112][ T6161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.502933][ T6161] team0: Port device team_slave_0 added [ 319.606254][ T6191] loop0: detected capacity change from 0 to 1024 [ 319.625382][ T6191] hfsplus: invalid btree flag [ 319.630502][ T6191] hfsplus: failed to load attributes file [ 319.652829][ T4377] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.058913][ T4263] Bluetooth: hci2: command 0x041b tx timeout [ 321.065795][ T4269] Bluetooth: hci6: command 0x0409 tx timeout [ 321.104811][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.5.425'. [ 321.155358][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.425'. [ 321.297233][ T6161] team0: Port device team_slave_1 added [ 321.423821][ T4377] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.555976][ T6161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.593309][ T6161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.708022][ T6161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.776734][ T6161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.793899][ T6161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.901061][ T6161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.011188][ T4377] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.231498][ T6161] device hsr_slave_0 entered promiscuous mode [ 322.249603][ T4264] EXT4-fs (loop3): unmounting filesystem. [ 322.274403][ T6161] device hsr_slave_1 entered promiscuous mode [ 322.307231][ T6161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.315086][ T6161] Cannot create hsr debugfs directory [ 322.806380][ T6179] chnl_net:caif_netlink_parms(): no params data found [ 323.739140][ T4263] Bluetooth: hci2: command 0x040f tx timeout [ 323.739290][ T4269] Bluetooth: hci6: command 0x041b tx timeout [ 324.613823][ T6161] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 324.702600][ T6161] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 324.732312][ T6179] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.746996][ T6179] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.755485][ T6179] device bridge_slave_0 entered promiscuous mode [ 324.840926][ T6161] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 324.870041][ T6209] loop5: detected capacity change from 0 to 128 [ 324.887514][ T6179] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.894669][ T6179] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.924567][ T6179] device bridge_slave_1 entered promiscuous mode [ 324.931355][ T6209] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 324.988594][ T6209] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.042198][ T6161] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 325.139766][ T4448] EXT4-fs (loop5): unmounting filesystem. [ 325.260149][ T6179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.291300][ T6215] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.299991][ T6215] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.308502][ T6215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.324158][ T6179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.836675][ T4263] Bluetooth: hci6: command 0x040f tx timeout [ 327.842908][ T4269] Bluetooth: hci2: command 0x0419 tx timeout [ 328.457485][ T4262] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 328.468123][ T4262] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 328.476371][ T4262] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 328.492350][ T4262] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 328.500679][ T4262] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 328.510032][ T4262] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 329.104105][ T6179] team0: Port device team_slave_0 added [ 330.950205][ T4262] Bluetooth: hci4: command 0x0409 tx timeout [ 330.967971][ T4262] Bluetooth: hci6: command 0x0419 tx timeout [ 331.045311][ T6179] team0: Port device team_slave_1 added [ 331.071017][ T6161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.260488][ T6179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.284409][ T6179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.356986][ T6179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.329883][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 332.390927][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 332.565715][ T6179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.636928][ T6179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.677590][ T6179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.720659][ T4377] device hsr_slave_0 left promiscuous mode [ 332.757325][ T4377] device hsr_slave_1 left promiscuous mode [ 332.787155][ T4377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.794637][ T4377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.833735][ T5589] EXT4-fs (loop6): unmounting filesystem. [ 332.844790][ T4377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.877079][ T4377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.903794][ T4377] device bridge_slave_1 left promiscuous mode [ 332.927178][ T4377] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.936138][ T4377] device bridge_slave_0 left promiscuous mode [ 332.957288][ T4377] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.008098][ T4377] device veth1_macvtap left promiscuous mode [ 333.014190][ T4377] device veth0_macvtap left promiscuous mode [ 333.037814][ T4262] Bluetooth: hci4: command 0x041b tx timeout [ 333.044237][ T4377] device veth1_vlan left promiscuous mode [ 333.050162][ T4377] device veth0_vlan left promiscuous mode [ 333.149140][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.437'. [ 333.158880][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 333.388434][ T4262] Bluetooth: hci1: unexpected event 0x3e length: 301 > 260 [ 333.388470][ T4262] Bluetooth: hci1: unexpected subevent 0x0d length: 300 > 260 [ 333.403864][ T4262] Bluetooth: hci1: adv larger than maximum supported [ 333.403938][ T4262] Bluetooth: hci1: adv larger than maximum supported [ 333.705769][ T6255] loop0: detected capacity change from 0 to 512 [ 333.724602][ T6255] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 333.736402][ T6255] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 333.765317][ T6255] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 333.789421][ T6255] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 333.803126][ T6255] System zones: 0-2, 18-18, 34-34 [ 333.823167][ T6255] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 333.849909][ T6255] EXT4-fs (loop0): 1 truncate cleaned up [ 333.855803][ T6255] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 333.924790][ T6255] Bluetooth: MGMT ver 1.22 [ 334.082682][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 334.821269][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.5.446'. [ 334.830142][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.446'. [ 335.117360][ T4262] Bluetooth: hci4: command 0x040f tx timeout [ 335.204808][ T4377] team0 (unregistering): Port device team_slave_1 removed [ 335.302792][ T4377] team0 (unregistering): Port device team_slave_0 removed [ 335.365030][ T4377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.432690][ T4377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.707118][ T4262] Bluetooth: hci4: command 0x0419 tx timeout [ 337.728199][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.454'. [ 337.738057][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.454'. [ 337.749793][ T4377] bond0 (unregistering): Released all slaves [ 339.491745][ T6161] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.555755][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 339.564992][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 339.574119][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.581548][ T5239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.621032][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 339.647833][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 339.659062][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 339.674714][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.681950][ T5239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.697711][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 339.795262][ T6179] device hsr_slave_0 entered promiscuous mode [ 339.804140][ T6179] device hsr_slave_1 entered promiscuous mode [ 339.957695][ T6179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.965310][ T6179] Cannot create hsr debugfs directory [ 340.138406][ T4262] Bluetooth: hci4: command 0x0407 tx timeout [ 342.811030][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 342.840366][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.5.463'. [ 342.849341][ T6318] netlink: 8 bytes leftover after parsing attributes in process `syz.5.463'. [ 342.874007][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 342.889238][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 342.951145][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 342.964191][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 342.976690][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 342.990264][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 342.990873][ T6323] loop5: detected capacity change from 0 to 1024 [ 343.004576][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 343.005345][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 343.022442][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 343.062108][ T6323] hfsplus: invalid btree flag [ 343.067359][ T6161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 343.076279][ T6323] hfsplus: failed to load attributes file [ 344.690181][ T4377] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.728657][ T6220] chnl_net:caif_netlink_parms(): no params data found [ 344.816745][ T4377] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.506130][ T4377] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.697387][ T6161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.749864][ T4377] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.933451][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 347.115244][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 347.346090][ T6220] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.382554][ T6220] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.420721][ T6220] device bridge_slave_0 entered promiscuous mode [ 347.482327][ T6179] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 347.539418][ T6220] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.562822][ T6220] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.692836][ T6220] device bridge_slave_1 entered promiscuous mode [ 347.772153][ T6179] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 348.485806][ T6179] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 348.525330][ T6220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.574647][ T6179] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 348.620528][ T6220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.883205][ T6220] team0: Port device team_slave_0 added [ 348.924355][ T6220] team0: Port device team_slave_1 added [ 349.391450][ T6220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.422546][ T6220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.475625][ T6220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.678897][ T6220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.698929][ T6220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.870590][ T6220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.123767][ T6179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.458233][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 350.468678][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 350.500677][ T6220] device hsr_slave_0 entered promiscuous mode [ 350.532034][ T6220] device hsr_slave_1 entered promiscuous mode [ 350.558565][ T6220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.592810][ T6220] Cannot create hsr debugfs directory [ 350.604007][ T6179] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.647197][ T6360] loop0: detected capacity change from 0 to 1024 [ 350.661689][ T6360] hfsplus: invalid btree flag [ 350.667034][ T6360] hfsplus: failed to load attributes file [ 350.678290][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.472'. [ 350.688652][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.5.472'. [ 352.268273][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 352.305073][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 352.347575][ T4670] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.354756][ T4670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.386682][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 352.404934][ T6368] loop5: detected capacity change from 0 to 1024 [ 352.428489][ T6368] hfsplus: invalid btree flag [ 352.433414][ T6368] hfsplus: failed to load attributes file [ 352.488478][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 353.934790][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 353.967443][ T4606] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.974704][ T4606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.127143][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 354.136259][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 354.177386][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 354.208086][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 354.217830][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 354.258793][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 354.288274][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 354.305352][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 354.429533][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 354.514052][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 354.538297][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 354.557355][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 354.565948][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 354.591782][ T6161] device veth0_vlan entered promiscuous mode [ 354.681701][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 354.705527][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 354.714683][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 355.282459][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 356.482537][ T6161] device veth1_vlan entered promiscuous mode [ 356.663269][ T6379] loop5: detected capacity change from 0 to 32768 [ 356.686553][ T6379] (syz.5.476,6379,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 356.841661][ T6379] (syz.5.476,6379,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 357.765457][ T6161] device veth0_macvtap entered promiscuous mode [ 357.783817][ T6161] device veth1_macvtap entered promiscuous mode [ 357.890544][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.926303][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.966332][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.979534][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.989776][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.022477][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.057088][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.113366][ T6379] JBD2: Ignoring recovery information on journal [ 358.183219][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.302385][ T6161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.413865][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.486324][ T6379] JBD2: recovery failed [ 358.497112][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.510597][ T6379] (syz.5.476,6379,1):ocfs2_journal_load:1112 ERROR: Failed to load journal! [ 358.538346][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.548973][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.559165][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.570229][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.576871][ T6379] (syz.5.476,6379,1):ocfs2_check_volume:2430 ERROR: ocfs2 journal load failed! -5 [ 358.580088][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.599873][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.613076][ T6161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.637276][ T6379] (syz.5.476,6379,1):ocfs2_check_volume:2486 ERROR: status = -5 [ 358.649024][ T6379] (syz.5.476,6379,1):ocfs2_mount_volume:1821 ERROR: status = -5 [ 358.661391][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.480'. [ 358.670768][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.480'. [ 358.759331][ T6379] (syz.5.476,6379,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 358.845980][ T6405] loop0: detected capacity change from 0 to 1024 [ 358.877999][ T6405] hfsplus: invalid btree flag [ 358.882963][ T6405] hfsplus: failed to load attributes file [ 358.891166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 358.901447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 358.921450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 358.932945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 358.945394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 359.063430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 359.092208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 359.172224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 359.289016][ T6161] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.326862][ T6161] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.363333][ T6161] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.455692][ T6161] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.498863][ T6415] loop5: detected capacity change from 0 to 1024 [ 360.540575][ T6415] hfsplus: invalid btree flag [ 360.545602][ T6415] hfsplus: failed to load attributes file [ 362.482252][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 362.511514][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 362.553433][ T6179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.008429][ T4377] device hsr_slave_0 left promiscuous mode [ 363.020813][ T4377] device hsr_slave_1 left promiscuous mode [ 363.040133][ T4377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.057296][ T4377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.069521][ T4377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.087421][ T4377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.108622][ T4377] device bridge_slave_1 left promiscuous mode [ 363.114945][ T4377] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.089249][ T4377] device bridge_slave_0 left promiscuous mode [ 364.096402][ T4377] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.181472][ T4377] device veth1_macvtap left promiscuous mode [ 364.187764][ T4377] device veth0_macvtap left promiscuous mode [ 364.194103][ T4377] device veth1_vlan left promiscuous mode [ 364.201145][ T4377] device veth0_vlan left promiscuous mode [ 366.158593][ T4377] team0 (unregistering): Port device team_slave_1 removed [ 366.210275][ T4377] team0 (unregistering): Port device team_slave_0 removed [ 366.491795][ T4377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.725275][ T4377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.505217][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.5.488'. [ 367.514129][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.488'. [ 367.893465][ T4377] bond0 (unregistering): Released all slaves [ 368.050479][ T4881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.066941][ T4295] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 368.074573][ T4881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.101358][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 368.212051][ T6220] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 368.230904][ T6220] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 368.240558][ T4881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.260453][ T4881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.274366][ T6220] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 368.288859][ T4295] usb 6-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25 [ 368.310190][ T4295] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.326866][ T4295] usb 6-1: Product: syz [ 368.331176][ T4295] usb 6-1: Manufacturer: syz [ 368.335795][ T4295] usb 6-1: SerialNumber: syz [ 368.359000][ T4295] usb 6-1: config 0 descriptor?? [ 368.368636][ T6220] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 368.393561][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 368.513057][ T6435] infiniband syz1: set active [ 368.556263][ T6435] infiniband syz1: added syz_tun [ 368.567061][ T6469] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 368.576049][ T6469] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 368.606502][ T6435] rdma_rxe: unable to create cq [ 368.625304][ T6435] infiniband syz1: Couldn't create ib_mad CQ [ 368.663341][ T6435] infiniband syz1: Couldn't open port 1 [ 368.689714][ T6220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.712013][ T6480] loop8: detected capacity change from 0 to 512 [ 368.722865][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 368.741822][ T6483] vivid-000: disconnect [ 368.751766][ T6435] RDS/IB: syz1: added [ 368.755860][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 368.760954][ T6435] smc: adding ib device syz1 with port count 1 [ 368.781669][ T6480] EXT4-fs: Mount option(s) incompatible with ext3 [ 368.809839][ T6435] smc: ib device syz1 port 1 has pnetid [ 368.826605][ T6220] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.855740][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 368.875982][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 368.902718][ T4670] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.910128][ T4670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.987391][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 369.103631][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 369.138260][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 369.160295][ T4881] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.167541][ T4881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.209821][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 369.235252][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 369.235267][ T27] audit: type=1326 audit(1746833358.139:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.8.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad218e969 code=0x7ffc0000 [ 369.285728][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 369.325301][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 369.354846][ T27] audit: type=1326 audit(1746833358.139:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.8.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad218e969 code=0x7ffc0000 [ 369.388583][ T27] audit: type=1326 audit(1746833358.179:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.8.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ad218e969 code=0x7ffc0000 [ 369.397793][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 369.426341][ T27] audit: type=1326 audit(1746833358.179:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.8.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad218e969 code=0x7ffc0000 [ 369.458547][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 369.485939][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 369.520105][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 369.535349][ T27] audit: type=1326 audit(1746833358.179:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.8.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad218e969 code=0x7ffc0000 [ 369.584677][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 369.603645][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 369.622101][ T27] audit: type=1326 audit(1746833358.179:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.8.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f8ad218e969 code=0x7ffc0000 [ 369.682989][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 369.696578][ T27] audit: type=1326 audit(1746833358.179:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.8.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad218e969 code=0x7ffc0000 [ 369.710802][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 369.745883][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 369.764163][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 369.783353][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 369.806195][ T27] audit: type=1326 audit(1746833358.179:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.8.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad218e969 code=0x7ffc0000 [ 369.810050][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 369.842941][ T6220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 369.851487][ T6179] device veth0_vlan entered promiscuous mode [ 369.863226][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 369.869580][ T27] audit: type=1326 audit(1746833358.179:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.8.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ad218d2d0 code=0x7ffc0000 [ 369.894753][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 369.929273][ T6179] device veth1_vlan entered promiscuous mode [ 369.944670][ T27] audit: type=1326 audit(1746833358.179:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.8.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8ad2190197 code=0x7ffc0000 [ 370.026001][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 370.043139][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 370.070806][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 370.099683][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 370.135364][ T6179] device veth0_macvtap entered promiscuous mode [ 370.176061][ T6179] device veth1_macvtap entered promiscuous mode [ 370.272823][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.304046][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.321432][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.335236][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.362870][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.384705][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.405287][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.427185][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.458824][ T6179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.496400][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 370.515557][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 370.562534][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.594659][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.625528][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.660546][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.693917][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.726737][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.795944][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.819169][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.851113][ T6179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.885372][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 370.943248][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 370.947762][ T952] usb 6-1: USB disconnect, device number 5 [ 370.967487][ T6481] vivid-000: reconnect [ 370.984726][ T6179] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.017946][ T6179] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.039972][ T6179] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.062780][ T6179] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.095485][ T6509] loop8: detected capacity change from 0 to 1024 [ 371.123395][ T6509] hfsplus: invalid btree flag [ 371.129215][ T6509] hfsplus: failed to load attributes file [ 371.215440][ T6220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.269979][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 371.282994][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 372.067781][ T6220] device veth0_vlan entered promiscuous mode [ 372.145360][ T6220] device veth1_vlan entered promiscuous mode [ 373.014787][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 373.051526][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 373.319205][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 373.329177][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 373.338100][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 373.346577][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 373.377948][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 373.403750][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 373.433516][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 373.452987][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 373.485180][ T6220] device veth0_macvtap entered promiscuous mode [ 373.569900][ T6220] device veth1_macvtap entered promiscuous mode [ 373.610401][ T5232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.634870][ T5232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.665865][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.726880][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.756885][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.786879][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.817121][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.843793][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.876937][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.906841][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.939032][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.957203][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.997500][ T6220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.054372][ T5245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.065306][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 374.090133][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 374.153871][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 374.177059][ T5245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.240345][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 374.292802][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 374.304002][ T6529] loop0: detected capacity change from 0 to 512 [ 374.315554][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.356931][ T6529] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 374.372032][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.409159][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.455176][ T6529] EXT4-fs (loop0): 1 truncate cleaned up [ 374.456920][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.471122][ T6529] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 374.536822][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.585505][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.601977][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.626896][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.666991][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.686856][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.718623][ T6220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.737288][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 374.767778][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 374.811022][ T6220] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.831215][ T6220] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.863156][ T6220] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.883109][ T6220] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.275410][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.395582][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.701951][ T6546] loop9: detected capacity change from 0 to 512 [ 375.961174][ T6546] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 375.970275][ T6546] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 376.034263][ T6179] EXT4-fs error (device loop9): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /0/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 376.119458][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.161552][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.576242][ T6534] loop5: detected capacity change from 0 to 32768 [ 376.734955][ T6534] XFS (loop5): Mounting V5 Filesystem [ 376.957442][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 376.985978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 377.023922][ T6534] XFS (loop5): Ending clean mount [ 377.090292][ T6534] XFS (loop5): Quotacheck needed: Please wait. [ 377.239454][ T6534] XFS (loop5): Quotacheck: Done. [ 377.562131][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 377.665645][ T6564] loop2: detected capacity change from 0 to 128 [ 377.707965][ T6564] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 377.736133][ T6564] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 378.323931][ T6568] loop0: detected capacity change from 0 to 512 [ 378.377101][ T6568] EXT4-fs: Mount option(s) incompatible with ext3 [ 378.508341][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.514830][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.777423][ T4448] XFS (loop5): Unmounting Filesystem [ 378.784625][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 378.784641][ T27] audit: type=1326 audit(1746833367.689:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf078e969 code=0x7ffc0000 [ 378.846865][ T27] audit: type=1326 audit(1746833367.689:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf078e969 code=0x7ffc0000 [ 378.887082][ T27] audit: type=1326 audit(1746833367.699:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1cf078e969 code=0x7ffc0000 [ 379.098077][ T27] audit: type=1326 audit(1746833367.699:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf078e969 code=0x7ffc0000 [ 379.147336][ T6577] loop8: detected capacity change from 0 to 512 [ 379.183569][ T6577] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 379.209974][ T6577] EXT4-fs (loop8): invalid journal inode [ 379.215871][ T6577] EXT4-fs (loop8): can't get journal size [ 379.224458][ T27] audit: type=1326 audit(1746833367.699:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf078e969 code=0x7ffc0000 [ 379.273274][ T27] audit: type=1326 audit(1746833367.699:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f1cf078e969 code=0x7ffc0000 [ 379.277780][ T6577] EXT4-fs (loop8): 1 truncate cleaned up [ 379.322416][ T27] audit: type=1326 audit(1746833367.699:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf078e969 code=0x7ffc0000 [ 379.436945][ T6577] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 379.464420][ T27] audit: type=1326 audit(1746833367.699:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf078e969 code=0x7ffc0000 [ 379.551476][ T6577] EXT4-fs warning (device loop8): verify_group_input:151: Cannot add at group 1701670771 (only 1 groups) [ 379.576998][ T27] audit: type=1326 audit(1746833367.699:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1cf078d2d0 code=0x7ffc0000 [ 379.659287][ T27] audit: type=1326 audit(1746833367.699:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1cf0790197 code=0x7ffc0000 [ 379.748873][ T6161] EXT4-fs (loop8): unmounting filesystem. [ 379.934094][ T6586] loop8: detected capacity change from 0 to 1024 [ 379.947113][ T6586] hfsplus: invalid btree flag [ 379.952300][ T6586] hfsplus: failed to load attributes file [ 380.167154][ T4353] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 380.881328][ T4353] usb 6-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25 [ 380.911808][ T4353] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.962597][ T4353] usb 6-1: Product: syz [ 380.987021][ T4353] usb 6-1: Manufacturer: syz [ 381.006983][ T4353] usb 6-1: SerialNumber: syz [ 381.038375][ T4353] usb 6-1: config 0 descriptor?? [ 382.280084][ T6584] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 382.289042][ T6584] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 382.477010][ T6601] vivid-000: disconnect [ 383.859880][ T4297] usb 6-1: USB disconnect, device number 6 [ 383.882222][ T6601] vivid-000: reconnect [ 384.860931][ T6620] loop8: detected capacity change from 0 to 32768 [ 384.934450][ T6620] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by syz.8.507 (6620) [ 384.979694][ T6609] loop0: detected capacity change from 0 to 65536 [ 385.023543][ T6620] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 385.034696][ T6620] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 385.050306][ T6620] BTRFS info (device loop8): setting nodatacow, compression disabled [ 385.066450][ T6620] BTRFS info (device loop8): setting datacow [ 385.076371][ T6620] BTRFS info (device loop8): doing ref verification [ 385.089067][ T6620] BTRFS info (device loop8): force clearing of disk cache [ 385.096344][ T6620] BTRFS info (device loop8): turning off barriers [ 385.103420][ T6620] BTRFS info (device loop8): enabling ssd optimizations [ 385.113087][ T6620] BTRFS info (device loop8): max_inline at 7 [ 385.122696][ T6609] XFS (loop0): Mounting V5 Filesystem [ 385.126251][ T6620] BTRFS info (device loop8): using free space tree [ 385.202922][ T6609] XFS (loop0): Ending clean mount [ 385.238903][ T6609] XFS (loop0): Quotacheck needed: Please wait. [ 385.300408][ T6609] XFS (loop0): Quotacheck: Done. [ 385.424828][ T6620] BTRFS info (device loop8): rebuilding free space tree [ 385.437283][ T22] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 385.651663][ T22] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 385.677674][ T4262] Bluetooth: hci0: command 0x0406 tx timeout [ 385.693858][ T22] usb 6-1: config 0 interface 0 has no altsetting 0 [ 385.715925][ T22] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 385.736296][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.748661][ T22] usb 6-1: Product: syz [ 385.758476][ T22] usb 6-1: Manufacturer: syz [ 385.763175][ T22] usb 6-1: SerialNumber: syz [ 385.787866][ T22] usb 6-1: config 0 descriptor?? [ 385.807321][ T4254] XFS (loop0): Unmounting Filesystem [ 385.812905][ T22] usb 6-1: selecting invalid altsetting 0 [ 386.017493][ T4295] usb 6-1: USB disconnect, device number 7 [ 386.712179][ T6687] loop5: detected capacity change from 0 to 1024 [ 386.714837][ T4670] BTRFS info (device loop8): space_info DATA+METADATA has 40960 free, is full [ 386.729350][ T4670] BTRFS info (device loop8): space_info total=11534336, used=9945088, pinned=0, reserved=4096, may_use=1544192, readonly=0 zone_unusable=0 [ 386.729439][ T6687] hfsplus: invalid btree flag [ 386.744063][ T4670] BTRFS info (device loop8): global_block_rsv: size 1441792 reserved 1437696 [ 386.748800][ T6687] hfsplus: failed to load attributes file [ 386.757872][ T4670] BTRFS info (device loop8): trans_block_rsv: size 0 reserved 0 [ 386.757905][ T4670] BTRFS info (device loop8): chunk_block_rsv: size 0 reserved 0 [ 386.779211][ T4670] BTRFS info (device loop8): delayed_block_rsv: size 0 reserved 0 [ 386.787103][ T4670] BTRFS info (device loop8): delayed_refs_rsv: size 262144 reserved 0 [ 386.855336][ T4670] BTRFS info (device loop8): space_info DATA+METADATA has 40960 free, is full [ 386.864825][ T4670] BTRFS info (device loop8): space_info total=11534336, used=9945088, pinned=0, reserved=8192, may_use=1540096, readonly=0 zone_unusable=0 [ 386.879196][ T4670] BTRFS info (device loop8): global_block_rsv: size 1441792 reserved 1433600 [ 386.888733][ T4670] BTRFS info (device loop8): trans_block_rsv: size 0 reserved 0 [ 386.896586][ T4670] BTRFS info (device loop8): chunk_block_rsv: size 0 reserved 0 [ 386.904505][ T4670] BTRFS info (device loop8): delayed_block_rsv: size 0 reserved 0 [ 386.912530][ T4670] BTRFS info (device loop8): delayed_refs_rsv: size 524288 reserved 0 [ 387.074580][ T4670] BTRFS info (device loop8): space_info DATA+METADATA has 40960 free, is full [ 387.083758][ T4670] BTRFS info (device loop8): space_info total=11534336, used=9945088, pinned=0, reserved=4096, may_use=1544192, readonly=0 zone_unusable=0 [ 387.098285][ T4670] BTRFS info (device loop8): global_block_rsv: size 1441792 reserved 1437696 [ 387.107292][ T4670] BTRFS info (device loop8): trans_block_rsv: size 0 reserved 0 [ 387.114960][ T4670] BTRFS info (device loop8): chunk_block_rsv: size 0 reserved 0 [ 387.122688][ T4670] BTRFS info (device loop8): delayed_block_rsv: size 0 reserved 0 [ 387.130597][ T4670] BTRFS info (device loop8): delayed_refs_rsv: size 262144 reserved 0 [ 388.900222][ T6161] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 389.616052][ T6709] loop0: detected capacity change from 0 to 512 [ 389.779701][ T6709] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 389.837594][ T6709] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.698384][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 391.772904][ T6723] loop5: detected capacity change from 0 to 512 [ 391.827326][ T6723] EXT4-fs: Mount option(s) incompatible with ext3 [ 392.278534][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 392.278550][ T27] audit: type=1326 audit(1746833381.189:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.5.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 392.425516][ T27] audit: type=1326 audit(1746833381.189:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.5.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 392.628367][ T6734] rdma_rxe: rxe_register_device failed with error -23 [ 392.636109][ T6734] rdma_rxe: failed to add syz_tun [ 392.656886][ T27] audit: type=1326 audit(1746833381.189:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.5.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 392.712891][ T5245] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.756893][ T27] audit: type=1326 audit(1746833381.189:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.5.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 392.876860][ T27] audit: type=1326 audit(1746833381.189:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.5.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 392.900026][ T27] audit: type=1326 audit(1746833381.189:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.5.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 392.924581][ T4262] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 392.935577][ T4262] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 392.944609][ T4262] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 392.952845][ T4262] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 392.959409][ T5245] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.971157][ T4262] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 392.979495][ T4262] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 393.082404][ T27] audit: type=1326 audit(1746833381.189:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.5.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 393.186465][ T27] audit: type=1326 audit(1746833381.189:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.5.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 393.262270][ T27] audit: type=1326 audit(1746833381.189:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.5.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb481d8d2d0 code=0x7ffc0000 [ 393.290146][ T5245] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.390502][ T27] audit: type=1326 audit(1746833381.189:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.5.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb481d90197 code=0x7ffc0000 [ 393.499276][ T5245] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.862362][ T4262] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 393.873451][ T4262] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 393.884116][ T4262] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 393.892270][ T4262] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 393.901511][ T4262] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 393.916882][ T4269] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 394.525851][ T6179] EXT4-fs (loop9): unmounting filesystem. [ 394.603257][ T6737] chnl_net:caif_netlink_parms(): no params data found [ 395.037144][ T4263] Bluetooth: hci5: command 0x0409 tx timeout [ 395.145165][ T6737] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.152588][ T6737] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.161278][ T6737] device bridge_slave_0 entered promiscuous mode [ 395.170738][ T6737] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.178787][ T6737] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.187324][ T6737] device bridge_slave_1 entered promiscuous mode [ 395.252276][ T6756] loop5: detected capacity change from 0 to 32768 [ 395.261613][ T6756] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.521 (6756) [ 395.855110][ T6737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.912598][ T6737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.002141][ T4269] Bluetooth: hci6: command 0x0409 tx timeout [ 396.028247][ T6756] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 396.053252][ T6783] loop0: detected capacity change from 0 to 1024 [ 396.062147][ T6756] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 396.072668][ T6783] hfsplus: invalid btree flag [ 396.077859][ T6783] hfsplus: failed to load attributes file [ 396.100892][ T6756] BTRFS info (device loop5): turning on flush-on-commit [ 396.111461][ T6756] BTRFS info (device loop5): doing ref verification [ 396.121736][ T6756] BTRFS info (device loop5): doing ref verification [ 396.128608][ T6756] BTRFS info (device loop5): force clearing of disk cache [ 396.136044][ T6756] BTRFS info (device loop5): enabling disk space caching [ 396.266956][ T6756] BTRFS info (device loop5): enabling free space tree [ 396.277788][ T6756] BTRFS info (device loop5): enabling ssd optimizations [ 396.305977][ T6756] BTRFS info (device loop5): using spread ssd allocation scheme [ 396.538657][ T6737] team0: Port device team_slave_0 added [ 396.557386][ T4262] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 396.634169][ T6737] team0: Port device team_slave_1 added [ 397.605322][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.617803][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.619776][ T4262] Bluetooth: hci5: command 0x041b tx timeout [ 397.645794][ T6756] BTRFS info (device loop5): max_inline at 4096 [ 397.667136][ T6737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.687683][ T6756] BTRFS info (device loop5): using free space tree [ 397.801083][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.837581][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.896538][ T6756] BTRFS error (device loop5): open_ctree failed: -12 [ 397.919557][ T6805] rdma_rxe: rxe_register_device failed with error -23 [ 397.967166][ T6805] rdma_rxe: failed to add syz_tun [ 397.971063][ T6737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.076857][ T4262] Bluetooth: hci6: command 0x041b tx timeout [ 398.395428][ T6745] chnl_net:caif_netlink_parms(): no params data found [ 398.549924][ T6737] device hsr_slave_0 entered promiscuous mode [ 398.611338][ T6737] device hsr_slave_1 entered promiscuous mode [ 398.655490][ T6737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.686962][ T6737] Cannot create hsr debugfs directory [ 398.980788][ T6827] rdma_rxe: already configured on syz_tun [ 399.041371][ T6820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.095502][ T6820] bond0: (slave rose0): Enslaving as an active interface with an up link [ 399.121772][ T5245] device hsr_slave_0 left promiscuous mode [ 399.190237][ T5245] device hsr_slave_1 left promiscuous mode [ 399.229557][ T5245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.787022][ T5245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.837851][ T5245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.845341][ T5245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.897811][ T4262] Bluetooth: hci5: command 0x040f tx timeout [ 399.914111][ T5245] device bridge_slave_1 left promiscuous mode [ 399.936956][ T5245] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.961762][ T5245] device bridge_slave_0 left promiscuous mode [ 399.977532][ T5245] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.033065][ T6836] loop5: detected capacity change from 0 to 512 [ 400.057073][ T5245] device veth1_macvtap left promiscuous mode [ 400.063266][ T5245] device veth0_macvtap left promiscuous mode [ 400.080707][ T6836] EXT4-fs: Mount option(s) incompatible with ext3 [ 400.087808][ T5245] device veth1_vlan left promiscuous mode [ 400.093691][ T5245] device veth0_vlan left promiscuous mode [ 400.165956][ T4262] Bluetooth: hci6: command 0x040f tx timeout [ 400.478023][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 400.478039][ T27] audit: type=1326 audit(1746833389.389:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.5.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 400.552210][ T27] audit: type=1326 audit(1746833389.389:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.5.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 400.608849][ T27] audit: type=1326 audit(1746833389.419:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.5.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 400.641568][ T27] audit: type=1326 audit(1746833389.419:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.5.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 400.746211][ T952] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 400.766470][ T27] audit: type=1326 audit(1746833389.419:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.5.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 400.889283][ T27] audit: type=1326 audit(1746833389.419:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.5.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 400.950867][ T952] usb 9-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25 [ 400.961590][ T27] audit: type=1326 audit(1746833389.419:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.5.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 400.994295][ T952] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.012669][ T952] usb 9-1: Product: syz [ 401.017816][ T952] usb 9-1: Manufacturer: syz [ 401.022652][ T952] usb 9-1: SerialNumber: syz [ 401.027602][ T27] audit: type=1326 audit(1746833389.419:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.5.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb481d8e969 code=0x7ffc0000 [ 401.052432][ T952] usb 9-1: config 0 descriptor?? [ 401.098637][ T27] audit: type=1326 audit(1746833389.419:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.5.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb481d8d2d0 code=0x7ffc0000 [ 401.187260][ T27] audit: type=1326 audit(1746833389.419:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.5.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb481d90197 code=0x7ffc0000 [ 401.275306][ T6841] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 401.284658][ T6841] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 401.417502][ T6857] vivid-001: disconnect [ 401.917277][ T4262] Bluetooth: hci5: command 0x0419 tx timeout [ 402.083707][ T6869] binder_alloc: 6868: pid 6868 spamming oneway? 1 buffers allocated for a total size of 5888 [ 402.099772][ T5245] team0 (unregistering): Port device team_slave_1 removed [ 402.222917][ T5245] team0 (unregistering): Port device team_slave_0 removed [ 402.237029][ T4262] Bluetooth: hci6: command 0x0419 tx timeout [ 402.255501][ T6872] 9pnet_fd: Insufficient options for proto=fd [ 402.286146][ T6872] loop5: detected capacity change from 0 to 512 [ 402.325104][ T6872] EXT4-fs: inline encryption not supported [ 402.346108][ T5245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.364605][ T6872] EXT4-fs (loop5): 1 orphan inode deleted [ 402.384375][ T5237] EXT4-fs error (device loop5): ext4_release_dquot:6838: comm kworker/u4:23: Failed to release dquot type 1 [ 402.397569][ T6872] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 402.419594][ T6872] ext4 filesystem being mounted at /144/file0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.471526][ T5245] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.557155][ T4448] EXT4-fs (loop5): unmounting filesystem. [ 402.706132][ T6884] loop5: detected capacity change from 0 to 128 [ 402.714651][ T6884] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 402.745164][ T6884] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) Connection to 10.128.10.27 closed by remote host. [ 403.277672][ T14] usb 9-1: USB disconnect, device number 2 [ 403.502704][ T6840] vivid-001: reconnect [ 403.904140][ T5245] bond0 (unregistering): Released all slaves [ 404.015425][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 404.689204][ T6854] infiniband syz1: set down [ 404.754590][ T5239] smc: removing ib device syz1 [ 404.765478][ T4297] infiniband syz1: ib_query_port failed (-19) [ 405.304116][ T5245] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.356223][ T5239] ------------[ cut here ]------------ [ 405.362610][ T5239] GID entry ref leak for dev syz1 index 2 ref=1 [ 405.377353][ T5239] WARNING: CPU: 0 PID: 5239 at drivers/infiniband/core/cache.c:809 gid_table_release_one+0x30f/0x490 [ 405.388351][ T5239] Modules linked in: [ 405.392341][ T5239] CPU: 0 PID: 5239 Comm: kworker/u4:24 Not tainted 6.1.138-syzkaller #0 [ 405.400769][ T5239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 405.411116][ T5239] Workqueue: ib-unreg-wq ib_unregister_work [ 405.417099][ T5239] RIP: 0010:gid_table_release_one+0x30f/0x490 [ 405.423233][ T5239] Code: 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 3c 41 8b 0e 48 c7 c7 a0 82 4c 8b 48 8b 74 24 20 44 89 fa e8 b1 8b e9 f9 <0f> 0b e9 14 ff ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 1a ff [ 405.443235][ T5239] RSP: 0018:ffffc900057bfae8 EFLAGS: 00010246 [ 405.449347][ T5239] RAX: 506c1436f7c44600 RBX: ffff88807984d4d8 RCX: ffff88807e399dc0 [ 405.457392][ T5239] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 405.465454][ T5239] RBP: 1ffff1100f309a80 R08: dffffc0000000000 R09: fffff52000af7eed [ 405.473552][ T5239] R10: fffff52000af7eed R11: 1ffff92000af7eec R12: 1ffff1100f309a9b [ 405.481566][ T5239] R13: ffff88807984d400 R14: ffff888147fdc700 R15: 0000000000000002 [ 405.489756][ T5239] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 405.498731][ T5239] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 405.505559][ T5239] CR2: 000055b6197bffb8 CR3: 000000000c68e000 CR4: 00000000003506f0 [ 405.513694][ T5239] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 405.522064][ T5239] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 405.530176][ T5239] Call Trace: [ 405.533462][ T5239] [ 405.536400][ T5239] ib_device_release+0xce/0x1b0 [ 405.541303][ T5239] ? ib_device_uevent+0xa0/0xa0 [ 405.546190][ T5239] device_release+0x92/0x1c0 [ 405.550847][ T5239] kobject_put+0x21d/0x460 [ 405.555386][ T5239] ? process_one_work+0x7a1/0x1160 [ 405.560552][ T5239] process_one_work+0x898/0x1160 [ 405.565525][ T5239] ? worker_detach_from_pool+0x240/0x240 [ 405.571229][ T5239] ? _raw_spin_lock_irq+0xab/0xe0 [ 405.576362][ T5239] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 405.581862][ T5239] ? kthread_data+0x4b/0xc0 [ 405.586382][ T5239] worker_thread+0xaa2/0x1250 [ 405.591113][ T5239] kthread+0x29d/0x330 [ 405.595208][ T5239] ? worker_clr_flags+0x1a0/0x1a0 [ 405.600282][ T5239] ? kthread_blkcg+0xd0/0xd0 [ 405.604991][ T5239] ret_from_fork+0x1f/0x30 [ 405.609467][ T5239] [ 405.612503][ T5239] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 405.619885][ T5239] CPU: 0 PID: 5239 Comm: kworker/u4:24 Not tainted 6.1.138-syzkaller #0 [ 405.628305][ T5239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 405.638453][ T5239] Workqueue: ib-unreg-wq ib_unregister_work [ 405.644356][ T5239] Call Trace: [ 405.647656][ T5239] [ 405.650585][ T5239] dump_stack_lvl+0x168/0x22e [ 405.655296][ T5239] ? memcpy+0x3c/0x60 [ 405.659290][ T5239] ? show_regs_print_info+0x12/0x12 [ 405.664590][ T5239] ? load_image+0x3b0/0x3b0 [ 405.669113][ T5239] panic+0x2c9/0x710 [ 405.673030][ T5239] ? bpf_jit_dump+0xd0/0xd0 [ 405.677560][ T5239] ? ret_from_fork+0x1f/0x30 [ 405.682285][ T5239] __warn+0x2f8/0x4f0 [ 405.686282][ T5239] ? gid_table_release_one+0x30f/0x490 [ 405.691760][ T5239] ? gid_table_release_one+0x30f/0x490 [ 405.697237][ T5239] report_bug+0x2ba/0x4f0 [ 405.701585][ T5239] ? gid_table_release_one+0x30f/0x490 [ 405.707247][ T5239] handle_bug+0x3a/0x70 [ 405.711429][ T5239] exc_invalid_op+0x16/0x40 [ 405.715952][ T5239] asm_exc_invalid_op+0x16/0x20 [ 405.720821][ T5239] RIP: 0010:gid_table_release_one+0x30f/0x490 [ 405.726902][ T5239] Code: 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 3c 41 8b 0e 48 c7 c7 a0 82 4c 8b 48 8b 74 24 20 44 89 fa e8 b1 8b e9 f9 <0f> 0b e9 14 ff ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 1a ff [ 405.746515][ T5239] RSP: 0018:ffffc900057bfae8 EFLAGS: 00010246 [ 405.752594][ T5239] RAX: 506c1436f7c44600 RBX: ffff88807984d4d8 RCX: ffff88807e399dc0 [ 405.760745][ T5239] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 405.768726][ T5239] RBP: 1ffff1100f309a80 R08: dffffc0000000000 R09: fffff52000af7eed [ 405.777058][ T5239] R10: fffff52000af7eed R11: 1ffff92000af7eec R12: 1ffff1100f309a9b [ 405.785040][ T5239] R13: ffff88807984d400 R14: ffff888147fdc700 R15: 0000000000000002 [ 405.793123][ T5239] ? gid_table_release_one+0x30f/0x490 [ 405.798620][ T5239] ib_device_release+0xce/0x1b0 [ 405.803496][ T5239] ? ib_device_uevent+0xa0/0xa0 [ 405.808356][ T5239] device_release+0x92/0x1c0 [ 405.812963][ T5239] kobject_put+0x21d/0x460 [ 405.817410][ T5239] ? process_one_work+0x7a1/0x1160 [ 405.822569][ T5239] process_one_work+0x898/0x1160 [ 405.827960][ T5239] ? worker_detach_from_pool+0x240/0x240 [ 405.833612][ T5239] ? _raw_spin_lock_irq+0xab/0xe0 [ 405.838650][ T5239] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 405.844083][ T5239] ? kthread_data+0x4b/0xc0 [ 405.848604][ T5239] worker_thread+0xaa2/0x1250 [ 405.853320][ T5239] kthread+0x29d/0x330 [ 405.857401][ T5239] ? worker_clr_flags+0x1a0/0x1a0 [ 405.862432][ T5239] ? kthread_blkcg+0xd0/0xd0 [ 405.867126][ T5239] ret_from_fork+0x1f/0x30 [ 405.871563][ T5239] [ 405.874857][ T5239] Kernel Offset: disabled [ 405.879255][ T5239] Rebooting in 86400 seconds..