last executing test programs: 19m44.987376713s ago: executing program 0 (id=873): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@bridge_newneigh={0x58, 0x1c, 0x4, 0x70bd25, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x40, 0x4d, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, @NDA_LLADDR={0xa}, @NDA_LINK_NETNSID={0x8, 0xa, 0xffff}, @NDA_DST_MAC={0xa, 0x1, @local}, @NDA_MASTER={0x8, 0x9, 0x7}, @NDA_PROBES={0x8, 0x4, 0x10001}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r4, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 19m43.90002876s ago: executing program 0 (id=878): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x108) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x14c0348, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) 19m43.69194851s ago: executing program 0 (id=881): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x664, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = dup(r0) read$FUSE(r1, 0x0, 0x0) 19m43.406964788s ago: executing program 0 (id=882): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$eJzs3Au0jtXWOPA511oPm8Sb5L7mmg9vclkkSS4JiSRJjiS5JSRJkoTEJrckJCH3JPeQ3EJyv99yT5IjSZKQkGT9h079nXM63+l83znn842z52+MZ+w19/vO+c5nz733+zxrjL2/7jCoSr2qleowM/xT8E8fUgEgBQD6AkAWAIgAoGTWklkBh0IGjan/3IuIf60Hpl7pDsSVJPNP22T+aZvMP22T+adtMv+0Teaftsn80zaZvxBp2dZpua6RI+0e/3v7/yD7///nyPv/f5DDRUd/vr7odR3/Gyky/7RN5p+2yfzTNpl/2ibzT9tk/v/hIoCKf+dhmX/aJvMXIi270vvPclzZ40p//wkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESBvOhcsMAPy6vtJ9CSGEEEIIIYQQ4l8npP/zKN2Va0QIIYQQQgghhBD/RggKNBiIIB2khxTIABnhKsgEV0NmyAIJuAaywrWQDa6D7JADckIuyA15IC9YIHDAEEM+yA9JuB4KwA1QEApBYSgCHopCMbgRisNNUAJuhpJwC5SCW6E0lIGyUA5ug/JwO1SAilAJ7oDKcCdUgapwF1SDu6E63AM14F6oCfdBLbgfasMfoA48AHXhQagHD0F9eBgaQENoBI2hyf8o/3noAi9AV+gGqdAdesCL0BN6QW/oA33hJegHL0N/eAUGwEAYBK/CYHgNhsDrMBSGwXB4A0bASBgFo2EMjIVx8CaMh7dgArwNE2ESTIYpMBWmwXR4B2bATJgF78JseA/mwFyYB/NhAbwPC2ERLIYPYAl8CEthGSyHFbASVsFqWANrYR2shw2wETbBZtgCW+Ej2AbbYQfshF2wG/bAx7AXPoF98Cnsh8/+Oj/L388/+1f5HREQUKFCgwbTYTpMwRTMiBkxE2bCzJgZE5jArJgVs2E2zI7ZMSfmxNyYG/NiXiQkZGTMh/kwiUksgAWwIBbEwlgYPXoshsWwON6EJbAElsSSWApLYWksg2WwHJbD8lgeK2AFrISVsDJWxipYBe/Cu/BurI7VsQbWwJpYE2thLayNtbEO1sG6WBfrYT2sj/WxATbARtgIm2ATbIpNsRk2wxbYAltiS2yFrbA1tsY22AbbYltsh+2wPbbHDtgBO2In7ITP4/P4Ar6A3bCy6o49sAf2xJ7YG/tgH3wJ++HL+DK+ggNwIA7CV/FVfA2H4BkcisNwOA7H8mokjsLRyGosjsNxOB7H4wScgBNxEk7CKTgVp+F0nI4zcCbOxHdxNr6H7+FcnIvzcQEuwIW4CBfjYlyCZ3EpLsPluAJX4ipciWtwLa7B9bgB1+Mm3IRbcAt+hB/hdtyOO3En7sbd+DF+jJ/gJzgA9+N+PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPIfn8Dyexwv4bO4v6+4utG4AqEuMMiqdSqdSVIrKqDKqTCqTyqwyq4RKqKwqq8qmsqnsKrvKqXKq3Cq3yqvyKlKkWMUqn8qnkiqpCqgCqqAqqAqrwsorr4qpYqq4Kq5KqBKqpLpFlVK3qtKqjGruy6lyqrxq4SuoiqqSqqQqqztVFVVVVVXVVDVVXVVXNVQNVVPVVLXU/aq26o698QF1aTL11ECsrwZhA9VQNVKN1Wv4iGqqhmAz1Vy1UI+pYTgUW6mmvrV6UrVRo7CtelqNxmdUezUWO6jnVEfVSXVWz6suqpnv+ut2p5qCPVUv1Vv1UTPwTnVpYlXUK2qAGqgGqVfVfHxNDVGvq6FqmBqu3lAj1Eg1So1WY9RYNU69qcart9QE9baaqCapyWqKmqqmqenqHTVDzVSz1LtqtnpPzVFz1Tw1Xy1Q76uFapFarD5QS9SHaqlapparFWqlWqVWqzVqrVqn1qsNaqPapDarLWqr+khtU9vVDrVT7VK71R71sdqrPlH71Kdqv/pMHVB/VAfV5+qQ+kIdVl+qI+ordVR9rY6pb9Rx9a06oU6qU+o7dVp9r86os+qc+kGdVz+qC+ondVEFBRq10lobHel0Or1O0Rl0Rn2VBn21zqyz6IS+RmfV1+ps+jqdXefQOXUunVvn0Xm11aSdZh3rfDq/TurrdQF9gy6oC+nCuoj2uqgupm/UxfVNuoS+WZfUt+hS+lZdWpfRZXU5fZsur2/XFXRFXUnfoSvrO3UVXVXfpavpu3V1fY+uoe/VNfV9upa+X9fWf9B19AO6rn5Q19MP6fr6Yd1AN9SNdGPdRD+im+pHdTPdXLfQj+mW+nHdSj+hW+sndRv9lG6rn9bt9DO6vX5Wd9DP6Y66k+6sf9IXddBddTedqrvrHvpF3VP30r11H91Xv6T76Zd1f/2KHqAH6kH6VT1Yv6aH6Nf1UD1MD9dv6BF6pB6lR+sxeqwep9/U4/VbeoJ+W0/Uk/RkPUVP1dN0718qzfoH8t/6G/n9f371LXqr/khv09v1Dr1T79K79R69R+/Ve/U+vU/v1/v1AX1AH9QH9SF9SB/Wh/URfUQf1Uf1MX1MH9fH9Ql9Uv+gv9On9ff6jD6rz+of9Hl9Xl/45WsABo0y2hgTmXQmvUkxGUxGc5XJZK42mU0WkzDXmKzmWpPNXGeymxwmp8llcps8Jq+xhowzbGKTz+Q3SXO9KWBuMAVNIVPYFDHeFDXFzI3/dP7v9dfENDFNTVPTzDQzLUwL09K0NK1MK9PatDZtTBvT1rQ17Uw70960Nx1MB9PRdDSdTWfTxXQxXU1Xk2pSTQ/zoulpepnepo/pa14y/Uw/09/0NwPMADPIDDKDzWAzxAwxQ81QM9wMNyPMCDPKjDJjzBgzzowz4814M8FMMBPNRDPZTDZTzVQz3Uw3M8wMM8vMMrPNbDPHzDHzzDyzwCwwC81Cs9gsNkvMErPULDPLzAqzwqwyq8was8asM+vMBrPBbDKbzFKz1Ww128w2s8PsMLvMLrPH7DF7zV6zz+wz+81+c8AcMAfNQXPIHDKHzWFzxBwxR81Rc8wcM8fNcXPCnDCnzClz2pw2Z8wZc86cM+fNeXPBXDAXzcVLl32RilRkIhOli9JFKVFKlDHKGGWKMkWZo8xRIkpEWaOsUbbouih7lCPKGeWKckd5olSwEUUu4iiO8kX5o2R0fVQguiEqGBWKCkdFIh8VjYpFN0bFo5uiEtHNUcnolqhUdGtUOioTlY3KRbdF5aPbowpRxahSdEdUObozqhJVje6KqkV3R9Wje6Ia0b1Rzei+qFZ0f1Q7+kNUJ3ogqhs9GNWLHorqRw9HDaKGUaOocdTkX1o/hDM5HvVdbTebarvbHvZF29P2sr1tH9vXvmT72Zdtf/uKHWAH2kH2VTvYvmaH2NftUDvMDrdv2BF2pB1lR9sxdqwdZ9+04+1bdoJ92060k+xkO8VOtdPsdPuOnWFn2ln2XTvbvmfn2Ll2np1vF9j37UK7yC62H9gl9kO71C6zy+0Ku9KusqvtGrvWrrPr7Qa70W6ym+0Wu9V+ZLfZ7XaH3Wl32d12j/3Y7rWf2H32U7vffmYP2D/ag/Zze8h+YQ/bL+0R+5U9ar+2x+w39rj91p6wJ+0p+509bb+3Z+xZe87+YM/bH+0F+5O9aMOli/tLb+9kyFA6SkcplEIZKSNlokyUmTJTghKUlbJSNspG2Sk75aSclJtyU17KS5cwMeWjfJSkJBWgAlSQClJhKkyePBWjYlScilMJKkElqSSVolJUmkpTWSpLt9FtdDvdThWpIt1Bd9CddCdVpapUjapRdapONagG1aSaVItqUW2qTXWoDtWlulSP6lF9qk8NqAE1okbUhJpQU2pKzagZtaAW1JJaUitqRa2pNbWhNtSW2lI7akftqT11oA7UkTpSZ+pMXagLdaWulEqp1IN6UE/qSb2pN/WlvtSP+lF/6k8DaAANokE0mAbTEBpCQ2kYDac3aASNpFE0msbQWBpH42g8jacJNIEm0kSaTJNpKk2l6TSdZtAMmkWzaDbNpjk0h+bRPFpAC2ghLaTFtJiW0BJaSktpOS2nlbSSVtNqWktraT2tp420kTbTZtpKW2kbbaMdtIN20S7aQ3toL+2lfbSP9tN+OkAH6CAdpEN0iA7TYTpCR+goHaVjdIyO03E6QSfoFJ2i03SaztAZOkfn6Dz9SBfoJ7pIgVKcgozuKpfJXe0yuywuxWVwl+IIAC7FOV0ul9vlcXmdddldjr+IyTlX0BVyhV0R511RV8zd+Ju4tCvjyrpy7jZX3t3uKvwmrubudtXdPa6Gu9dVdXf9RVzT3edquYdcbfewq+MaurqusavnHnL13cOugWvoGrnGrqV73LVyT7jW7knXxj31m3ihW+TWunVuvdvg9rpP3Dn3gzvqvnbn3Y+uq+vm+rqXXD/3suvvXnED3MDfxMPdG26EG+lGudFujBv7m3iym+KmumluunvHzXAzfxMvcO+72W6xm+Pmunlu/s/xpZ4Wuw/cEvehW+qWueVuhVvpVrnVbs3/73WF2+Q2uy1uj/vYbXPb3Q630+1yu3+OL53HPvep2+8+c0fcV+6g+9wdcsfcYfflz/Gl8zvmvnHH3bfuhDvpTrnv3Gn3vTvjzv58/pfO/Tv3k7voggNGVqzZcMTpOD2ncAbOyFdxJr6aM3MWTvA1nJWv5Wx8HWfnHJyTc3FuzsN52TKxY+aY83F+TvL1XIBv4IJciAtzEfZclIvxjVycb+ISfDOX5Fu4FN/KpbkMl+VyfBuX59u5AlfkSnwHVw6Bq3BVvour8d1cne/hGnwv1+T7uBbfz7X5D1yHH+C6/CDX44e4Pj/MDbghN+LG3IQf4ab8KDfj5tyCH+OW/Di34ie4NT/JbfgpbstPczt+htvzs9yBn+OO3Ik78/PchV/grtyNU7k79+AXuSf34t7ch/vyS9yPX+b+/AoP4IE8iF/lwfwaD+HXeSgP4+H8Bo/gkTyKR/MYHsvj+E0ez2/xBH6bJ/IknsxTeCpP4+n8Ds/gmTyL3+XZ/B7P4bk8j+fzAn6fF/IiXswf8BL+kJfyMl7OK3glr+LVvIbX8jpezxt4I2/izbyFt/JHvI238w7eybt4N+/hj3kvf8L7+FPez5/xAf4jH+TP+RB/wYf5Sz7CX/FR/pqP8Td8nL/lE3yST/F3fJq/5zN8ls/xD3yef+QL/BNf5MAQY6xiHZs4itPF6eOUOEOcMb4qzhRfHWeOs8SJ+Jo4a3xtnC2+Ls4e54hzxrni3HGeOG9sY4pdzHEc54vzx8n4+rhAfENcMC4UF46LxD4uGheLb4yLxzfFJeKb45LxLXGp+NYYUsvED91bLr4tLh/fHleIK8aV4jviyvGdcZW4anxXXC2+O64e3xPXiO+NS8T3xbXi++Pa8R/iOvEDcd34wbhe/FBcP344bhA3jBvFjeMm8SNx0/jRuFncPG4RPxa3jB+PW8VPxK3jJ+M28VO/+3hq3D3uEb8YvxiHcI/65T4xuTC5KLk4+UFySfLD5NLksuTy5IrkyuSq5OrkmuTa5Lrk+uSG5MbkpuTm5JZkCFXTg0evvPbGRz6dT+9TfAaf0V/lM/mrfWafxSf8NT6rv9Zn89f57D6Hz+lz+dw+j8/rrSfvPPvY5/P5fdJf7wv4G3xBX8gX9kW890V9Md/YN/FNfFP/qG/mm/sW/jH/mH/cP+6f8E/4J30b/5Rv65/27fwzvr1/1j/rn/MdfSff2T/vu/gXfFffzaf6VN/D9/A9fU/f2/f2fX1f38/38/19fz/AD/CD/CA/2A/2Q/wQP9QP9cP9cD/Cj/Cj/Cg/xo/x4/w4P96P9xP8BD/RT/ST/WQ/1U/10/10P8PP8LP8LD+74Gw/x8/x8/w8v8Av8Av9Qr/YL/ZL/BK/1C/1y/1yv9Kv9Kv9ar/Wr/Xr/Xq/0W/0m/1mv9Vv9dv8Nr/D7/C7/C6/x+/xe/1ev8/v8/v9fn/AH/AH/UF/yH/hD/sv/RH/lT/qv/bH/Df+uP/Wn/An/Sn/nT/tv/dn/Fl/zv/gz/sf/QX/k7/ogx+XeDMxPvFWYkLi7cTExKTE5MSUxNTEtMT0xDuJGYmZiVmJdxOzE+8l5iTmJuYl5icWJN5PLEwsSixOfJBYkvgwsTSxLLE8sSKxMrEqEUKebXHIF/KHZLg+FAg3hIKhUCgcigQfioZi4cZQPNwUSoSbQ8lwSygVbg2lQ5lQNjwcGoSGoVFoHJqER0LT8GhoFpqHFuGx0DI8HlqFJ0Lr8GRoE54KbcPToV14JrQPz4YO4bnQMXQKncPzoUt4IXQN3UJq6B56hBdDz9Ar9A59Qt/wUugXXg79wythQBgYBoVXw+DwWhgSXg9Dw7AwPLwRRoSRYVQYHcaEsWFceDOMD2+FCeHtMDFMCpPDlDA1TAvTwzthRpgZZoV3w+zwXpgT5oZ5YX5YEN4PC8OisDh8EJaED8PSsCwsDyvCyrAqrA5rwtqwLqwPG8LGsClsDlvC1vBR2Ba2hx1hZ9gVdoc94eOwN3wS9oVPw/7wWTgQ/hgOhs/DofBFOBy+DEfCV+Fo+DocC9+E4+HbcCKcDKfCd+F0+D6cCWfDufBDOB9+DBfCT+Gi/M2aEEIIIcQ/RP/O493/xufSAcCvt0Q9AODq7bkO/3XNjdn/tO6lcrdMAMCT3To88OtRuXJqauovz12qIco/FwASf1n/13gZtIDHoTU0h+J/s79eqtN5/p36yVsAMv5ZTgpcji/Xv+m/qP/IY8MXlorPZf079ecCFMx/OScDXI4v1y/xX9TP0fR3+s/w+TiAZn+Wkwkux5frF4NH4Slo/RfPFEIIIYQQQggh/qSXKtvu9+6fL92f5zaXc9LD5fj37s+FEEIIIYQQQghx5T3TqfMTj7Ru3bzdP7bAX/YF/ntZspDFf84iwy8/Ov9X+vk3La7kbyUhhBBCCCHEv8Pli/4r3YkQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCJF2/W/8O7ErfY5CCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHElfb/AgAA//+wBDLo") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc13, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 19m42.410058346s ago: executing program 0 (id=885): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x2f, 0x0, @void}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0x10) 19m41.910530505s ago: executing program 0 (id=887): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xfff1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 19m41.46622717s ago: executing program 32 (id=887): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xfff1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 19m26.458259678s ago: executing program 3 (id=977): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x118, 0x1170, 0x1170, 0x0, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="30000000110001002dbd700000000000080000000900000008000000ffffffff080013"], 0x30}], 0x1}, 0x400c014) r5 = socket$inet6(0xa, 0x2, 0x0) fcntl$lock(r5, 0x24, &(0x7f0000000000)={0x2, 0x3, 0xfff, 0xf344, r2}) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) shutdown(r5, 0x1) getxattr(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)=@known='user.incfs.metadata\x00', &(0x7f0000000100)=""/109, 0x6d) 19m25.287977183s ago: executing program 3 (id=980): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0xc000) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 19m24.519703339s ago: executing program 3 (id=988): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)={0x40, 0x17, 0xe, "f0a8939b15a39be20090291073ee"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x4b, 0x2, 0x0, 0x7f, 0x9, 0x800, 0x402, 0x3, 0x2, 0x7f, 0x9, 0x4ac7}}, 0x0, &(0x7f0000000400)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0xcd0f}, &(0x7f0000000480)={0x20, 0x89, 0x2}}) 19m21.401381366s ago: executing program 3 (id=1004): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) 19m20.415913193s ago: executing program 3 (id=1011): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x50}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 19m19.74003622s ago: executing program 3 (id=1018): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000300), 0xa0141, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000500)={0x2, "fa02c84b9aaf0100dd031dd7504fe58066f3c100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1b, "8a6035ceeae3ecc42317afad0100000000000800", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00f30000000000000000080000000000e400000000004100", r2, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", r5}) 19m19.412118632s ago: executing program 33 (id=1018): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000300), 0xa0141, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000500)={0x2, "fa02c84b9aaf0100dd031dd7504fe58066f3c100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1b, "8a6035ceeae3ecc42317afad0100000000000800", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00f30000000000000000080000000000e400000000004100", r2, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", r5}) 4m25.487657208s ago: executing program 4 (id=6129): openat$comedi(0xffffffffffffff9c, 0x0, 0x181001, 0x0) socket(0x8, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000000380)=""/102392, 0x18ff8) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f00000004c0)=0x7d, 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000019440)='westwood', 0x8) getpeername$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x10) bind$inet6(r1, 0x0, 0x0) 4m24.448268501s ago: executing program 4 (id=6123): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) 4m19.863092193s ago: executing program 4 (id=6141): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in6=@remote, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff, 0xfffffff9}}, 0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg(r2, &(0x7f0000000180), 0x400000000000077, 0x7600) 4m17.934510773s ago: executing program 4 (id=6147): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000580)='./file1\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x2, 0x238, &(0x7f0000000800)="$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") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x220901, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1000) 4m17.808556756s ago: executing program 4 (id=6148): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) 4m17.379647478s ago: executing program 4 (id=6151): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 4m16.088704985s ago: executing program 34 (id=6151): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 4m2.55741607s ago: executing program 1 (id=6185): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x1e8, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffff, 0xd}}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x194, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x17c, 0x1, [@m_vlan={0x178, 0x9, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xaa2}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc70}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffff9, 0x8, 0x2000000e, 0x3, 0x40}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x3, 0x10000000, 0x5, 0x9}, 0x2}}]}, {0xf9, 0x6, "986ec045006365b68b08d0c39134b4087ab54a2a5d35d886b99a60d4553985bfaac53e110787b47af4df44b6ebd96f384f85d972e512a03edb3ca84857986ff96be9127fd7eb6d2df60f4be3a79bde32ed489e7b21550c31626e5afc84bbfdecc943876141653b52e4f33fe7689b726345a93f2e981865e47278358122f2d0125fc43fa1051cbd344fc9b4a169c010c3bc75b4c117d53ec3f42f75a4da3786cc852aba45f48da01cfb69db2d22bf4a1bcedce3d8f732201b0876b5842c7c646422ae6336f65d7ae8ce080a1533ec748164ece26fd949603480e9a631bced4b26e5a8d84d2fbd544c4b4e55416ba108e2c93bd17b40"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 4m2.423490403s ago: executing program 1 (id=6187): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x4, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0x9, 0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x8001, 0x7, 0x9223, 0x3}, {0x5, 0x2, 0xc, 0x2, 0x401, 0xe}, 0x2, 0x3, 0x19e8}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x3e2e3c6fc38a2b0f}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m1.088675765s ago: executing program 1 (id=6191): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0x1000d0ffc2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000000)={0xc0f0f000, 0x101, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x9, 0x9977, 0x100000, 0x7, 0x4, 0x1, 0x20000, 0x7, [0x3, 0x0, 0x13, 0x2]}) 3m59.766678506s ago: executing program 1 (id=6193): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000580)='./file1\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x2, 0x238, &(0x7f0000000800)="$eJzsmL9rFEEUx78zu7feiUhsUthYGDCiucvtoaQ5NIJgJULir0oPs4aYTU4uK5iAJMHGRjsLIY2F/4BFCisLO/8BQQsVBAuvsLCxGZkfeze3w+ZySzrfpxi+M/Nm3743b1+xIAjiv+X7tz9fn1+amT8L4AgmcMis//QAxrRmW337L68enXnZvLzz9vObD6tHn7zLPk8eEWJwobyHfx/A+1kPiZpx+/RfKSbMZB68p6+D47TRN8FQNfouOG4YHYHhttEPLN2W9tXq/aU4qt5rxwtSTMuhLodQDo3s+3W3GRbMXAghmLW/tr6x3IrjqGMJ3+xZW5vI2Iwies6Wx538lRCgO8vRtN5PZvHWs6fbcp7mZtrKXx0cdRNEAwxzZn0GO2ludEqs+I/7qKQuvIH4MdaKM9FKwUwxAMOCLGvR/F0gNXuLY1PFjk/KcC66W2OFbhGDp0rob8lM5h7PK6/RSkcJP3s7rrhgLrSAr6vZKMSm8wEo8UKW0IHfsisKRZGK8S776G790ILn1rNgw12w/ddPeb/vnH6IZsUfvUQrkHH1VnzvYO4C+LSr+4d4zXDK6k++1T9qycrD2tr6xtTSSmsxWoxWw7BxngFb58KaakR6dPpevz9XVH86bNqTfH4pxzbgAR63kqRT12PAAlSQJJ1QzUPrs5nbbf+6Y44luALgpJ7Ilhb0nug5PligbbiylWrSNSIIgiAIgiAIgiAIgiAIgijECTD1F3QI4TVl/S8AAP//CkpUTQ==") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x220901, 0x0) setpgid(0x0, r0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1000) 3m59.396684512s ago: executing program 1 (id=6194): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 3m58.804089251s ago: executing program 1 (id=6195): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x1e8, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffff, 0xd}}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x194, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x17c, 0x1, [@m_vlan={0x178, 0x9, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xaa2}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc70}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffff9, 0x8, 0x2000000e, 0x3, 0x40}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x3, 0x10000000, 0x5, 0x9}, 0x2}}]}, {0xf9, 0x6, "986ec045006365b68b08d0c39134b4087ab54a2a5d35d886b99a60d4553985bfaac53e110787b47af4df44b6ebd96f384f85d972e512a03edb3ca84857986ff96be9127fd7eb6d2df60f4be3a79bde32ed489e7b21550c31626e5afc84bbfdecc943876141653b52e4f33fe7689b726345a93f2e981865e47278358122f2d0125fc43fa1051cbd344fc9b4a169c010c3bc75b4c117d53ec3f42f75a4da3786cc852aba45f48da01cfb69db2d22bf4a1bcedce3d8f732201b0876b5842c7c646422ae6336f65d7ae8ce080a1533ec748164ece26fd949603480e9a631bced4b26e5a8d84d2fbd544c4b4e55416ba108e2c93bd17b40"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 3m58.241618976s ago: executing program 35 (id=6195): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x1e8, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffff, 0xd}}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x194, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x17c, 0x1, [@m_vlan={0x178, 0x9, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xaa2}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc70}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffff9, 0x8, 0x2000000e, 0x3, 0x40}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x3, 0x10000000, 0x5, 0x9}, 0x2}}]}, {0xf9, 0x6, "986ec045006365b68b08d0c39134b4087ab54a2a5d35d886b99a60d4553985bfaac53e110787b47af4df44b6ebd96f384f85d972e512a03edb3ca84857986ff96be9127fd7eb6d2df60f4be3a79bde32ed489e7b21550c31626e5afc84bbfdecc943876141653b52e4f33fe7689b726345a93f2e981865e47278358122f2d0125fc43fa1051cbd344fc9b4a169c010c3bc75b4c117d53ec3f42f75a4da3786cc852aba45f48da01cfb69db2d22bf4a1bcedce3d8f732201b0876b5842c7c646422ae6336f65d7ae8ce080a1533ec748164ece26fd949603480e9a631bced4b26e5a8d84d2fbd544c4b4e55416ba108e2c93bd17b40"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m9.033916829s ago: executing program 7 (id=6647): openat$comedi(0xffffffffffffff9c, 0x0, 0x181001, 0x0) socket(0x8, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000000380)=""/102392, 0x18ff8) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f00000004c0)=0x7d, 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000019440)='westwood', 0x8) getpeername$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x10) bind$inet6(r1, 0x0, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) 1m7.090680801s ago: executing program 7 (id=6650): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) readv(r0, 0x0, 0x0) tkill(r1, 0xb) 1m6.316164118s ago: executing program 7 (id=6654): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000180)}], 0x1) socket(0x28, 0x805, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m6.195980149s ago: executing program 7 (id=6655): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000580)='./file1\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x2, 0x238, &(0x7f0000000800)="$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") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x220901, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) setpgid(0x0, r0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1000) 1m5.89110102s ago: executing program 7 (id=6658): openat$comedi(0xffffffffffffff9c, 0x0, 0x181001, 0x0) socket(0x8, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000000380)=""/102392, 0x18ff8) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f00000004c0)=0x7d, 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000019440)='westwood', 0x8) getpeername$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x10) bind$inet6(r1, 0x0, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) 1m5.261404501s ago: executing program 7 (id=6661): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m3.950822941s ago: executing program 36 (id=6661): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 13.369649501s ago: executing program 6 (id=6780): openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x404000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x14, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xe}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xffffffb4) syz_emit_ethernet(0x0, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000180)='GPL\x00'}, 0x94) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff) madvise(&(0x7f000018a000/0x2000)=nil, 0x2000, 0x12) close(r0) 12.187573398s ago: executing program 8 (id=6783): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000019200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, 0x0, 0x0, 0x480e0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 11.421792483s ago: executing program 8 (id=6785): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x4, 0x800, 0x2, 0x0, 0x0, 0xff}, {0x0, 0x7ff, 0x913d, 0x0, 0x6, 0x800000000f42, 0x7}, {0x0, 0x0, 0x100000400000000, 0xfffefffffffffffe}, 0x0, 0x6e6bbf, 0x1, 0x0, 0x4, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc, 0x33}, 0x0, @in6=@empty, 0xfffffffd, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1}}, 0xe8) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x89100) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r7, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_map={0x30, 0x10c, 0x3, {{0x0}, 0x0}}, @mask_cswp={0x58, 0x114, 0x9, {{0x9}, &(0x7f0000000300), &(0x7f0000000240)=0x8, 0x7, 0x4, 0x81, 0x5, 0x22, 0x8}}], 0x88, 0x4001}, 0x0) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r8 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000140)={0x100, r9}, 0x0) openat2(r6, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)={0x18900, 0x100, 0x25}, 0x18) 8.876036775s ago: executing program 6 (id=6787): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socket(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) io_setup(0x1000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x40008c1, 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff9500000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0x0, 0x0}, 0x10) 7.580063372s ago: executing program 6 (id=6789): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32], 0x20}}, 0x0) 7.449098305s ago: executing program 8 (id=6790): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYBLOB="23341129bfb4fcc388a80c49b4f4d96254cb9356759776b03b581050240d2d9a5cf3440e76c886f1e5c860656a3648101223fc288fc5274f0e609cfed0fc738d84eb544791dd1cb959421db9fbcb634df876aa2133fd62e245fb6b1ead07ca04772d78564af8f42015e5be557ab3bd60824768691005cbd3d295402693d934226595deeba1ff748b7dde9c617749aa38096ef667700a6b3668cb7296b024fbcf9f74e50bf0f834159f51737baac184f94dd13a9793b76946208f290637d8def94e5f56f1181da3eed500440f", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES16], 0x11, 0x2d2, &(0x7f0000000bc0)="$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") writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x22000c0, &(0x7f0000000780)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303166662c696f636861727365743d6370313235312c009cf844a4f7a7c81096ca2048b7a1a293e41e623421755a4c2f698477bf0daab2f043e08d7d8082e1f993303ac8ab7bb28f4c1db6d7a10fd5e93cd5e34fc5b724d3"], 0x4, 0x335, &(0x7f0000000880)="$eJzs3U1r1E4cB/DvJNnd7L+l/9hWCp6kWvBU2npQvFikePENeJBibbdQGitoBS2I1bOIN0Hw6M2z6FvQi/gG9NSDeNJL8WBkJpPN7DqTfehDWvb7AXdjMg+/STLJzC7bgIgG1pWFr2/O78h/ogLAB3AJ8ACEQADgJCbC+xubHQvym0sCaU7xT5rljYYtawidIy8pQIBhYx0dkCRJkm8dU/08lFioPMLswQYPqOneqbaHhx7ZwdhO2zVYjCMsdrGLBxgpMxwiIiqfqKm7g6fvEsN6/O55wJQehx/3+3/L+Ga3vDiOhOb930v/nwi5f/5Xm+R8b20zbqykUzh59L1slmgry3pOJPnuriI9s/whY8hl1GKnYvHqq2txY3pbFfAUlzUj2bh6XUHWEMUVbTV9m7TMTQsUtb3YkGpDRbZhzhH/WFGN1gnwh+94aa9u8VMXMYmP4rNYFBFeYaU5/gsSIXeO2j9RW1dJ459xl6haGaWpWlqZh39CVXIqOwLv3+atrLv2a2ifkUAfR9E+fo+yOF9U3bkwitaPFdLWzbpbp3KNAYFQswYz11wz0W9rrvH2uuqrlbgxvXwndp30+8u6/8RzcV1M4gfeYcEY/3sy9RTcPbOllwuVUp8Zhe0JVMqoi2hVB77dU88k5aqzo7g9wy1cxMi9h1vrS3HcuFv+QtZV+sx+ep/jSU9EfTrKNfLdSINQLlQA7Fulf5IksW4K0HuBPnoNo6KaeuF13uSt9SWhr3l7a6C8crZtmncnBjAPQK/Jrgj91P64mauWF9hV9l/yaKs19hMyi+oQOkhWVcsmH7Wuekq9j0qvPVpfijteQY7xVIAy+UHHxI2yg6EyyHGXSOd/xnxlRl115EtUMP9JOhVulDjrmAGNqtf/upvBNYt1jhOHsoUOc64z54CzbTV6yGp80l5spOPEUfxWsvevMsQCvuAmP/8nIiIiIiIiIiIiIiIiIiIiIiIiIjpuev01Qj8/J2itcWcA//AGEREREREREREREREREREREREREREREdHeGM//BXz1xJiq7fm/RU9qUvz0gQDh3p//i8jv4vm/YruHVhKRzd8AAAD//+GuXfk=") prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0xfd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000040)=ANY=[], 0x1, 0x185, &(0x7f0000000500)="$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") mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000280), 0x9, 0x537, &(0x7f0000000fc0)="$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") rmdir(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000001000000000000000400010000000000080000000000000020"], 0x24, 0x0) r2 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) shmat(r2, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/251) 7.209329439s ago: executing program 6 (id=6791): syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x62, 0xa1, 0xb, 0x40, 0xc45, 0x1010, 0xe6fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x1, 0x97, 0x40, 0xa4, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x3ff, 0x0, 0x7e}}]}}]}}]}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 7.133329326s ago: executing program 2 (id=6792): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000019200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, 0x0, 0x0, 0x480e0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6.935661276s ago: executing program 5 (id=6793): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, 0x0, 0x0, 0x480e0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5.585738349s ago: executing program 2 (id=6794): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4000000000004}, 0x18) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0x83d, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e8, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0xffffffff, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x0, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0x2, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x8, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x80002, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x78, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x3ff, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00\b', @ANYBLOB='\x00'/26], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) 5.449330902s ago: executing program 5 (id=6795): r0 = socket(0x10, 0x803, 0x0) getgroups(0x0, 0x0) syz_pidfd_open(0x0, 0x0) fstat(r0, &(0x7f0000000440)) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r1, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) 4.440139952s ago: executing program 5 (id=6796): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x300c056, &(0x7f0000000d80)={[{@noload}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLKMJh1rHbhduBtvZAgiDsR7vfdy+A/4Vwx0MGQUvfAmctKTLluTNuuypprPB05533NO8p435zxvn5M3IQEMrYnsTyHixYj4Kok4HBFJvm008o0Ta/utPrw+my1JNBof/5E098vqredqPe5gXnkhIn75IuJkYWO7teWVhVK5nC7m9cl65cpkbXnl1KVKaT6dTy9Pz8yceXNm+p233+pbX187/9e3H919/8yXx1e/+en+kdtJnI1D+bb2fjyDG+2ViZjIX5OxOPvEjlN9aGw3SQZ9AGzLSB7nY5GNAYdjJI964L/v84hoAEMqEf8wpFp5QOvefvP74P/vUFaycx68t3YDtLH/o2vvjcS+5r3RgdXksTuj7H53vA/tZ238/Pud29kS/XsfAmBLN25GxOnR0Y3jX5KPf9t3uvPqfe2VJ9sw/sHOuZvlP693yn8K6/lPdMh/DnaI3e3YOv4L9/vQTFdZ/vdux/x3fdJqfCSv/a+Z840lFy+V09N5NnwixvZm9c3mc86s3mt029ae/2VL1n4rF8yP4/7o3scfM1eql56lz+0e3Ix4qWP+m6yf/6TD+c9ej/M9tnEsvfNKt21b9//5avwQ8WrH8/9oRivZfH5ysnk9TLauio3+vHXs127tD7r/2fk/sHn/x5P2+dra07fx/b6/027bHut/9H7970k+aZb35Ouuler1xamIPcmHG9dPP3psq97aP+v/ieObj3+drv/9EfFpj/2/dfTHl3vq/4DO/9xTnf+nL9z74LPvurXf2/j3RrN0Il/Ty/jX6wE+y2sHAAAAAAAAu00hIg5FUiiulwuFYnHt8x1H40ChXK3VT16sLl2ei+Z3ZcdjrNCa6T7c9nmIqfzzsK369BP1mYg4EhFfj+xv1ouz1fLcoDsPAAAAAAAAAAAAAAAAAAAAu8TBLt//z/w2MuijA547P/kNw2vL+O/HLz0Bu5L//zC8xD8ML/EPw0v8w/AS/zC8xD8ML/EPw0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQF+dP3cuWxqrD6/PZvW5q8tLC9Wrp+bS2kKxsjRbnK0uXinOV6vz5bQ4W61s9XzlavXK1HQsXZusp7X6ZG155UKlunS5fuFSpTSfXkjHdqRXAAAAAAAAAAAAAAAAAAAA8O9SW15ZKJXL6aKCwrYKo7vjMBT6XBj0yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj/wTAAD//wQrN8c=") creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000000280)='B', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) syz_emit_ethernet(0x46, 0x0, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x60000000, 0x0, 0x1, 0x6}) 4.35904958s ago: executing program 2 (id=6797): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000001b00)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000e8700)={0xc0f2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0x7, "b25c23bce7e398"}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, 0x0) 4.271174868s ago: executing program 6 (id=6798): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x4, 0x800, 0x2, 0x0, 0x0, 0xff}, {0x0, 0x7ff, 0x913d, 0x0, 0x6, 0x800000000f42, 0x7}, {0x0, 0x0, 0x100000400000000, 0xfffefffffffffffe}, 0x0, 0x6e6bbf, 0x1, 0x0, 0x4, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc, 0x33}, 0x0, @in6=@empty, 0xfffffffd, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1}}, 0xe8) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x89100) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r7, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_map={0x30, 0x10c, 0x3, {{0x0}, 0x0}}, @mask_cswp={0x58, 0x114, 0x9, {{0x9}, &(0x7f0000000300), &(0x7f0000000240)=0x8, 0x7, 0x4, 0x81, 0x5, 0x22, 0x8}}], 0x88, 0x4001}, 0x0) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r8 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000140)={0x100, r9}, 0x0) openat2(r6, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)={0x18900, 0x100, 0x25}, 0x18) 3.33959577s ago: executing program 2 (id=6799): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32], 0x20}}, 0x0) 3.04329672s ago: executing program 8 (id=6800): socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000280)={[], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@fsname={'fsname', 0x3d, 'bcachefs\x00'}}, {@audit}, {@appraise}, {@fowner_lt}, {@smackfshat={'smackfshat', 0x3d, 'bcachefs\x00'}}, {@obj_type={'obj_type', 0x3d, '}^&{'}}]}, 0x80, 0x63c, &(0x7f0000001bc0)="$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") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 2.930648641s ago: executing program 2 (id=6801): r0 = socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$vcsa(0x0, 0x1, 0x1a1300) unshare(0x22020600) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) acct(0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sendmmsg(r0, 0x0, 0x0, 0x4000000) r3 = syz_open_procfs(0x0, 0x0) pread64(r3, &(0x7f0000000780)=""/185, 0xb9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002080), 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x30, 0xf5, 0x53, 0xfffff018}]}, 0x10) 2.838920899s ago: executing program 5 (id=6802): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000019200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, 0x0, 0x0, 0x480e0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.600321882s ago: executing program 5 (id=6803): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000000) socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffa) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) semtimedop(0x0, 0x0, 0x0, 0x0) 1.296045642s ago: executing program 5 (id=6804): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000240)='./file7\x00', 0xc03, &(0x7f0000000740)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRES32], 0x2, 0x5fbf, &(0x7f0000002080)="$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") syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) truncate(&(0x7f0000000040)='./file1\x00', 0x40006) 1.207060171s ago: executing program 6 (id=6805): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0xe5) mount$overlay(0x0, 0x0, 0x0, 0x4008, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20) 892.030772ms ago: executing program 2 (id=6806): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x0, 0xb4, 0x8c, 0xbb}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000940)={0x44, &(0x7f00000005c0)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x87, 0x2, 0x7f}, 0x0}) 300.13928ms ago: executing program 8 (id=6807): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000580)='./file1\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x2, 0x238, &(0x7f0000000800)="$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") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(0x0) setpgid(r0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x220901, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) setpgid(0x0, r0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1000) 0s ago: executing program 8 (id=6808): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYBLOB="23341129bfb4fcc388a80c49b4f4d96254cb9356759776b03b581050240d2d9a5cf3440e76c886f1e5c860656a3648101223fc288fc5274f0e609cfed0fc738d84eb544791dd1cb959421db9fbcb634df876aa2133fd62e245fb6b1ead07ca04772d78564af8f42015e5be557ab3bd60824768691005cbd3d295402693d934226595deeba1ff748b7dde9c617749aa38096ef667700a6b3668cb7296b024fbcf9f74e50bf0f834159f51737baac184f94dd13a9793b76946208f290637d8def94e5f56f1181da3eed500440f", @ANYRES32=0x0, @ANYBLOB="d18e1d15898e46c1af7faea3f9943526031b1dd54ddead7ad21a97a9cafdd81e1eb06254178c3310e5c9dea8281e57fea62cf11da57d95de159898bdddc6a2de4c5647f71f14e73f29c1c02f6511b75d2eb9f777b0ebd9fa53372731199a9764641ad585b83a548bdc08ffadc3b36c8ecbfd04cbea3e530c1ff45eb749849be84d1f8de4db6bf09b64f015e8d1785e962059ca47af1e370dcc39d08335a63b859cb25c2cc71a8f394162657f332cc3942b0ed5cdfca51f8c92a595253c2e9df3f10aa98237b0197e938d8c9529a4730477397afb99aec3d8e07443cebdbb2c072f74203a2f273d83ad06f76e438eeb1138b9d9ed9c540881bed747f663f1bc914c6f972d5b3eb46ea06c1697f100469e269b371c5cea9523e8d106bba3b61aff503ce5ccffc84cb05b5bea508d049a0abbd59c8c45e180ad6244baa07293d13ff57b3df4ab8a022efb870d8bf74b7db1ed71443e976257496cea8b291b6a6ecf4bcb3af13112b433c1d83827f02db1c2d751b5dd5a5b76a7190c19e3af6e5a1c11ce34023f4dc5c62380a4686c9e360a9bbca9b559d30dd0e80f6144fbb21a82a7c21fea3b8ef007fb1526d5a2a86ec8a641399ad38d2fc7d61be1c9122206e92c1d8bbc7ec7ac5f8733e6b87c9b877db869135e99674068c02d32ca38c2fced555d477870122b242b9ccc288817c9c1ef7e5fc0164f637e10fd1a33f06eae4dd748c59cc134ac64c657f3468dc3856814dab3ad9bde2aefbd8ff9f906de802ff42a5218d60e7cdb50326d05aab114140f9934d34d85d7e17dd037f2ad230279bc43865770e1be4ee1876ee4b98243e0db58e537a0a26cc666a6dbf2b69efd4f3f0a86cdccde2407c81a8d84bd509072ea69a187d0df8d864d59810225c94cd07339a6cc6a8e6b5c71f8b44102076c004803ebda7fd52cdb5ebc3d812e0f7d8260e3b3c8c940123792a93ec755b210483c9e39d0d61489443e2246406f3a0cd3e27bc6f1d428180bcfd6c8a47d7eb1d1e630e876fad2d4cb54e5eb303c1884d59d454defc98902a459d515044397591c4620a5f796a81ff85dfb2002cfc39d65744cab27daa588a5e0767d4d60b303d95cac15c142e0c03e095c7d30752bb77773be5dea5eb45cbd7d4925239d79e2f8696f25ecc699e65c5093012bc0d7b844882fd463fa8b0885e7753f7a8199353a32963022ac78627d26297dd1d676148f4f7386407655110d327d3dccf3fd3c24eb7726e3b861010cd8ced5313ad850e1aecf35a04f1c8fe8e138aa0e06c0d307a50fc6ebadea3bcda02b9827d4d347627c86f89665820327626c4735cdacc06af4a5214b2b218a7f221ed35a31c4825b1476906be28b484b1c764a376d21fde3249758214c4bd03117e9ba7813d79bc3a01b3228c4c098f84cf84d57ce73221f9146faa7c2d75aeab3bb1a10b75e1a01de660be08687af1b0d84d0c3aa3d8b43a6ade67eb40a6c5fc0c1408f6f669c2ff7e8699489ef404871ef14f9ccfca96fe0861cf6519e1d1ceab0145de69a673855b0e795fef2bd11f91cbc89428998a8c2e8f0eab25e09198301a92fe92fe70c83f732f15658dc29d4196f0b955bde286a0220211ea045ce9d2c7644aa732d314e3e8ffcf1343d523e45d480e24eed5f7ae2a3832626fe0db9192a573208398f4a2b6736cc6c391c550f0f52aa17b422ba61bd9839d14969ce3e5ffed3cbfc00747b73ed294f285299b0a290abc2376dc5b6fd604a701195a49e796f00b9f1701dca63c3afb8a74129cc2abd807fd8e3c68bf5b2fdf09cf7b48a7a7c674cf58303450fc4e8d40fed94f28270c3c7a656a01836e1f50fcbee3e54c440fdb7106dbf6d9fbba7cc163c358966bd0e2138835fe05e63665dba952d5c1f511250d246b52e75e680534277f200b457f53fb7ae59faa87e3e1eea1b0d1a1f8b4ce0ee0df46d0fcb903b03ea90004f09e3ec0943b899b975d21797e685514ae4364cd351e6c7ed7fd57b5ec317c25014bd8d6b96a1732a5696d8918de5407095579b93758f4f469e0e2fabe682f893abf167436b257a4e13ae2fe95f45d3e0e5c8bea7039640a234ee4bdf7be60b0b52fb0fefe7779a5e2b4f2b5c00216ee1dc69fba3e53cfa574d7dda59f3cd4ead7f2fd4c1977fe3b511adeb86486cc2f3ff91c7e2546abe225b350017fe63fcc0482828b6e92825913ae67254310b674db4344523bbcc3084196c3d5ae865888b3162fb9a3404188eec0677fe2d25f0017995a9e4d89e92082224ff55078d7bb4eec43470638cb0d537bddb3ef6320c116bb60f41961464db2e06ee39f89fddddc9c8d72395bbdaecc3d5fd9ac3abd090bf707f1b002b212d4264135f09d69a4b16e1dfbcb4d803be3e1df39848732c2037ae25c6c1478809284854ea8baaa1c9b31ff044555e803af9fc17482fe82b287cdbd873c663586ca56b8b58bd79b4de7541a6e71106b762c1d434197ca85c50b6c528413d250797505f8d7d9b45f6eec42b565b1ec8e07d7d737be8120df8a6df8768640cc3e719827de607db577c149d1745ea9db627575c2c7e69e53dc3fa931325292a649c12bb8a0fc5ede1aef8f8766bb2e871ca90cf897ed2fe86def78ceb546cb7ff68db3ea4aeb928fa50ad81f96e8dab6494450513c0f7099208f71b3abab773a99b74bd0cccc9d3e8b57dd4335c65e1ae4b45d03dd1dc774d631edb80d945e2025a969390ec39d04c128d9ee0a8027be18a85949f1fa88d65f5ec5d66b32671e24ee93e925f6a8a492784157765d31fbcef074847336ff7a5c92c15930efd38c36d4bca340001d92f37350b68e51c2c5f1cce3fbc0371de0fc39915c215f8ced9f436383d33f7313ff8710d4331bfe2b1505e2d29f11b63dbb68b455fbecceb6d0f7f8cac1f616b0aa0a49747cad48a8712fac7b166454dae3862dc5cbe4980dd595c46a70cfa50f14815f6a3020da0c5c3c762e6e70fe65bc28a62f41a51efe3c9170da9e372a04d345d2760acebeb9ab47988292af726eaed4f3f49dbc3f76a87ef7a052abf5b0652512044f1a3e0983ad65b3060fdd53b3569b11a561832113365b20e98b941ffd99580d61b0e4afb91479c0a8f1a5fc14e8b2348c480a10ee9adaa94f42736081ae4b191d617b221b885a71ad1559d975a933a25b8fbe883971e0d36802c0ed58293f5edb7a3b813af3121c7cfc3ada9bff6a58a84e6474e8d5f32521c0c48795ad97af57ec9d1d29733532bd57c6a5d602f1f320af2066bba79a781137cc505a469aa36a3142a6ba7087ba3f54e4997321c8070bb9137e3f3b766530a24bf028caea48343d050383f1b317ac189a2ad41ffdb1fe44033a85c1427ef648255dc4a87b6b94f391ad061468b8992f57f99f314e58fc4b9afd2b436f76f31064fa2ff8b66843379791fc2e31cf96f10fd1e01e664466d1b087cabf6616af54edf83332ee01dcd3f8afca102ef31e0974020f76580d442d20db2d6d0eb4bc3b714af6fd08591d670e53653efc06b8bfeb93f00361f6b4949c04e96769273e3a43e52142fc6978a99aa33c9685bdf12f87a72f35e14cf3299a613a943c20d01a00fbf375ed74d8d00c7d2d321fe51faa9723e65b73f2d1bf0ac1fbbd6c5b3965fc592e276a685062aaef57203c0dbf00a218f32bafcb833dcd798b7723d7ba5ce7e81cc3d85658ce7f054b1337469c5e933829ba270b97c12a9446e78586471f3c99b1e4f430cdfc7f18306893d180ac85e0c6890e775863ba6294fedf3abebfd00203d8b5bb0644e40c1cd7be85eb57eb48705dce725cdb456d37b088b29f3bf024633f88a67530de1cb430ddd487adba9a10e9622fb6fbc235314afacd2a481e4747e1ec52dc02e6dc22c5ff91642eaa202ffae196054cdda6c26cef5eb2be6050c90217a100f2ae2fb25f1a6f371b8df74bbc64a1dafbdaadd997c76f49954f8530774352fdd7c95385a464e512761615e4b5aa79cce2f0eb17f7eb6f37831b28d2217491545ce1164a563f0970833f720261c9b5f81eead461480394007ffe0a42327a7b35cecf087cad83a0d3f52783e7772c80a4bd4367db3e38590760d628d5c1597ef834de44177c1a32de0dc5129cb3d824dffe532acfcad0b5195d0cd037512c68b8ab1a74e32cb91e9f93495323cbefb17419b31347933cff38274814136a9602bf61dec96eeac824db2966d43450f186fa886b63de06bfd41cad0b8f429c44f7234898c849a9f383ec7241bd88963ae8ae6700121f924ce2b1c928ca28d66324ddaceed9c5042c764fb280406f3f568e72c17a68df1865c9b41503b13a29ce4175c3ab94ce088ae578bda75efb988497802ea2f6b08469112083c11d02ed0ec7d0cb36562a03fe941f13270b3c34182935f061da7da38d7d43c47850c50ecb425f82c2277ae705f4c388272d40238f7da4d02ff99ca8ce63cad4f12af9d4fbf560a12a6099fb235803ae84bc8459b43b2df2f6ca0173d74398ca56e339f72c38877aedba5afbc88fb5cb660ffbd72cafa6762495ec1704736b778b66170c22388fe32f0e267ed9d94dcb5f61ce3a763dc3e9f625b0e4610f4407b318b93881bf7369a0abdc71e83080a29dc2084103ad6addbb3dc718d4a233cc7445964e41412d82732cf9de18283a9d119917e758b000230a168a4db6bba24fd6e38fe7e5cbbf50de3ea9bceced777ebf24aaac49754d47f8ecefb8c5a52d9704ff30e7eb50aa670ac5bca025cd4fcab3e117f4731404ae61f8b30952a1427f63f00d53d5291bd41024299812b498d1cbb41d29a0964e2a20abbf42564f9a130d67a483768d456e33a5ae018de0e9d0fad5d0a44eb8e8518c4258855a5aeb1ed756ddf8eb18981f194110308d47d6d84c695503bd1457625f4ef25e9fd90fb3c5b8327652626e657e91437fb7d86892fb62ed439cc6e5c35afa4c6ed7e13a13e4353327b96e62923e1da1cb273f0d091a5fcc915d61adc6947066ad26f18d8d72c52334b9bc487542ae5a703764458d1fa811760fb55ae0a5bab026cd404f72a12503bdea1811eeec7901427281e509141b34716ed0542ab4ac355981099a730e01b0ffa37ccdd6104286e33cb2277f449d856bd089c7aa891a67f992d7966884dcc77b1950b0f37836fcef7fa263c2cfd32f53d257ea963cff4c8f51c6d99c9305ddeb7b1669e9ceeea43a27cf0d316208f0292af6abe864e43a0722ae74aafdfdb2ef6c1f741eb7b6465719797e022a039af6122118f9e986e49dbdd11c4f29016810461c971989da35f853536136e105ebc1e3f7429e6f1b4a01d372bd69bdf537d948fd781023e4f56fb6eb8fced0688ee762e761596c3f81791ec00963fc4456e8d9e4dc9b70ef7c3f3cecbcf38d7e9c5fd450327d1b3eb56ee392ebd0e336b433ae8fa889fedc3989f01b1baee47f6f79ebae021804ad6d6251b699a821dd53c630d249f4c6812e2d9a01ac28451642c49d0e5a7913d76b5b85707eabb4dadbc6bcfe1c4ac772f87021cd74a801acb4103b2973cb0a0284b3ab21e24ab64fbb152f81a8b8c4e6ac297cc94598c13da22750b85e62c6bea779ef5556022092f0db89c56db6be21945fd46269288c05e2360360cde6176abfa9086be8e2022767701f3df5391e031f075246a2d7f3463b08b68436c7b5391c8c37ed666e9e8599624f396576441d1cd7f2cd53a83f9e998682215ef4528c7a5fca91fa6715be617a0ffaf67aaa8c701ec0f59855cd414803fd21473bea733e0c084c9072bbcff4fec242c5b11e5eae7d375c35e733c07a510a9452f3843", @ANYRES16], 0x11, 0x2d2, &(0x7f0000000bc0)="$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") writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x22000c0, &(0x7f0000000780)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303166662c696f636861727365743d6370313235312c009cf844a4f7a7c81096ca2048b7a1a293e41e623421755a4c2f698477bf0daab2f043e08d7d8082e1f993303ac8ab7bb28f4c1db6d7a10fd5e93cd5e34fc5b724d3"], 0x4, 0x335, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0xfd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000040)=ANY=[], 0x1, 0x185, &(0x7f0000000500)="$eJzskrGO00AQhr+1neRAxwkkqmvuipOAAuL4ANFxZejpaLASEyIcIHEkSJTCCKEUFIiSJ8hrIPECUCAeIHWKiBoZ7e7YcsIjsF+xf+bf2dmdiZ9n46wF/Nkuelxg8Dnih1IEwImy3saz+ln0p+gnK3yXvEfivxc9zmbzpuSccs0aL+I0TSanwG/jVVb28J3HxpT6JYeeAkVRFODRB53OYZmzXfR8YFzlwHEA100TRZWjG9HBDaA9Hb1uZ7P57eEoHiSD5GXkn98P74bhvaj9bJgmoV1V7QppBa23gNaBGPGh2W8AH8S6zC6q9jTZV5d4Qlm7Wc7wSLGPVztbquJr9a4W5f8Fjy9AP+tNrmrumakSYFrqovAl6AS199m7DszGnd6rtL9EocpjK4KqRmdNowqienD+IOeKLbWUkmeiXdGV6Fr0ZO+TCXK9fpToZg5N3sbT6aSjh2R/NeTsJKq86GpeH5i+9Yu329w375/ZOhwOh8PhcDgcDsf/xt8AAAD//4Yhcvw=") sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000280), 0x9, 0x537, &(0x7f0000000fc0)="$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") rmdir(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000001000000000000000400010000000000080000000000000020"], 0x24, 0x0) r3 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) shmat(r3, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/251) kernel console output (not intermixed with test programs): connect (1)[c::]:6789 error -101 [ 1096.577097][ T5856] libceph: mon0 (1)[c::]:6789 connect error [ 1096.596502][ T5102] Bluetooth: hci0: command 0x0419 tx timeout [ 1096.868739][ T27] libceph: connect (1)[c::]:6789 error -101 [ 1096.880350][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 1097.325821][T24693] ceph: No mds server is up or the cluster is laggy [ 1097.843441][T24713] syzkaller0: entered promiscuous mode [ 1097.925697][T24713] syzkaller0: entered allmulticast mode [ 1098.262978][T24521] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1098.451608][T24728] loop5: detected capacity change from 0 to 40427 [ 1098.485846][T24521] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1098.499552][T24728] F2FS-fs (loop5): invalid crc value [ 1098.521090][T24728] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1098.555694][T24728] F2FS-fs (loop5): Start checkpoint disabled! [ 1098.586631][T24728] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1098.615259][ T27] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1098.615758][T24521] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1098.690357][ T5102] Bluetooth: hci0: command 0x0419 tx timeout [ 1098.815288][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 1098.844171][T24521] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1099.189804][ T27] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1099.205922][ T27] usb 3-1: config 0 has no interface number 0 [ 1099.212095][ T27] usb 3-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 1099.222692][ T27] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1099.232374][ T27] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1099.241879][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.250033][ T27] usb 3-1: Product: syz [ 1099.254566][ T27] usb 3-1: Manufacturer: syz [ 1099.259277][ T27] usb 3-1: SerialNumber: syz [ 1099.267822][ T27] usb 3-1: config 0 descriptor?? [ 1099.744497][ T27] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1099.755948][ T27] cx231xx 3-1:0.1: Failed to read PCB config [ 1099.762389][ T27] cx231xx: probe of 3-1:0.1 failed with error -71 [ 1099.792756][ T27] usb 3-1: USB disconnect, device number 97 [ 1100.054429][T24748] loop1: detected capacity change from 0 to 16 [ 1100.088750][ T2917] kworker/u4:8: attempt to access beyond end of device [ 1100.088750][ T2917] loop5: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 1100.094103][T24748] erofs: (device loop1): mounted with root inode @ nid 36. [ 1100.144531][T24521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1100.163411][ T2917] kworker/u4:8: attempt to access beyond end of device [ 1100.163411][ T2917] loop5: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 1100.204835][ T2917] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1100.217777][T24521] 8021q: adding VLAN 0 to HW filter on device team0 [ 1100.224609][ T2917] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1100.234082][ T2917] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1100.247354][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.254519][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1100.256216][ T2917] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1100.328957][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.336147][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1100.349699][T18905] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 46 [ 1100.367370][T18905] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 1100.397518][T18905] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 1100.445446][ T27] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1100.656074][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 1100.670141][ T27] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1100.688599][ T27] usb 3-1: config 0 has no interface number 0 [ 1100.699116][ T27] usb 3-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 1100.745870][ T27] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1100.755916][ T5102] Bluetooth: hci0: command 0x0419 tx timeout [ 1100.758927][ T27] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1100.787879][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.812502][ T27] usb 3-1: Product: syz [ 1100.832778][ T27] usb 3-1: Manufacturer: syz [ 1100.854147][ T27] usb 3-1: SerialNumber: syz [ 1100.894222][ T27] usb 3-1: config 0 descriptor?? [ 1101.040622][ T2917] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.145966][T24767] syzkaller0: entered promiscuous mode [ 1101.151493][T24767] syzkaller0: entered allmulticast mode [ 1101.179661][T24521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1101.258593][ T2917] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.278727][ T27] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1101.298222][ T27] cx231xx 3-1:0.1: bad scenario!!!!! [ 1101.298222][ T27] config_info=0 [ 1101.329192][ T27] cx231xx 3-1:0.1: Failed to read PCB config [ 1101.491925][ T2917] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.614270][ T5856] usb 3-1: USB disconnect, device number 98 [ 1101.703058][ T2917] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.878545][ T1185] libceph: connect (1)[c::]:6789 error -101 [ 1101.884609][ T1185] libceph: mon0 (1)[c::]:6789 connect error [ 1101.895831][ T1185] libceph: connect (1)[c::]:6789 error -101 [ 1101.901962][ T1185] libceph: mon0 (1)[c::]:6789 connect error [ 1102.058141][ T2917] tipc: Left network mode [ 1102.127336][T24454] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1102.142895][T24454] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1102.166943][ T1185] libceph: connect (1)[c::]:6789 error -101 [ 1102.173007][ T1185] libceph: mon0 (1)[c::]:6789 connect error [ 1102.179168][T24454] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1102.189233][T24454] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1102.214789][T24454] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1102.224622][T24454] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1102.236649][T24521] veth0_vlan: entered promiscuous mode [ 1102.262869][T24521] veth1_vlan: entered promiscuous mode [ 1102.363395][T24521] veth0_macvtap: entered promiscuous mode [ 1102.388611][T24521] veth1_macvtap: entered promiscuous mode [ 1102.480575][T24521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1102.524898][T24521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.534867][T24521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1102.550243][T24521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.560229][T24521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1102.570877][T24521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.678726][T24781] ceph: No mds server is up or the cluster is laggy [ 1102.814684][T24521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1103.192529][T24521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1103.198237][ T5857] libceph: connect (1)[c::]:6789 error -101 [ 1103.212300][ T5857] libceph: mon0 (1)[c::]:6789 connect error [ 1103.218426][T24521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.228456][T24521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1103.255446][T24521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.285700][T24521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1103.320942][T24521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.399666][T24521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1103.469543][T24521] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.525310][T24521] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.534142][T24521] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.575449][T24521] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.322195][ T5102] Bluetooth: hci2: command tx timeout [ 1104.843352][T24798] loop2: detected capacity change from 0 to 32768 [ 1104.937427][T24798] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1105.268939][T24798] XFS (loop2): Ending clean mount [ 1105.335074][T24833] syzkaller0: entered promiscuous mode [ 1105.346019][T20569] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1105.361968][T24833] syzkaller0: entered allmulticast mode [ 1105.377103][T24786] chnl_net:caif_netlink_parms(): no params data found [ 1105.542651][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1105.565138][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1105.893579][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1105.915430][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1105.993723][T24786] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.259366][T24786] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.379129][T24786] bridge_slave_0: entered allmulticast mode [ 1106.385522][ T5102] Bluetooth: hci2: command tx timeout [ 1106.526486][ T8] libceph: connect (1)[c::]:6789 error -101 [ 1106.549391][T24786] bridge_slave_0: entered promiscuous mode [ 1106.628547][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 1106.757155][T24786] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.764664][T24786] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.773604][T24786] bridge_slave_1: entered allmulticast mode [ 1106.780901][T24786] bridge_slave_1: entered promiscuous mode [ 1106.851871][ T2917] hsr_slave_0: left promiscuous mode [ 1106.867328][ T2917] hsr_slave_1: left promiscuous mode [ 1106.885008][ T2917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1106.893915][ T2917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1106.906692][ T8] libceph: connect (1)[c::]:6789 error -101 [ 1106.916698][ T2917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1106.924219][ T2917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1106.925599][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 1106.939923][ T2917] bridge_slave_1: left allmulticast mode [ 1106.945999][ T2917] bridge_slave_1: left promiscuous mode [ 1106.962989][ T2917] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.177266][ T2917] bridge_slave_0: left allmulticast mode [ 1107.183093][ T2917] bridge_slave_0: left promiscuous mode [ 1107.248839][T24848] ceph: No mds server is up or the cluster is laggy [ 1107.301364][ T2917] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.671002][ T2917] veth1_macvtap: left promiscuous mode [ 1107.685711][ T2917] veth0_macvtap: left promiscuous mode [ 1107.697005][ T2917] veth1_vlan: left promiscuous mode [ 1107.711173][ T2917] veth0_vlan: left promiscuous mode [ 1107.943573][ T2917] pimreg (unregistering): left allmulticast mode [ 1108.446680][ T5102] Bluetooth: hci2: command tx timeout [ 1108.903062][ T2917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1108.966564][ T2917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1109.497642][ T2917] bond0 (unregistering): Released all slaves [ 1109.616452][T24877] tipc: Enabling of bearer rejected, failed to enable media [ 1109.690118][T24786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1109.724067][T24786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1109.972619][T24786] team0: Port device team_slave_0 added [ 1110.038587][T11536] libceph: connect (1)[c::]:6789 error -101 [ 1110.052028][T24786] team0: Port device team_slave_1 added [ 1110.055324][T11536] libceph: mon0 (1)[c::]:6789 connect error [ 1110.155545][T24786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1110.165824][T24786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1110.209213][T24786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1110.243529][T24786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1110.268089][T24786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1110.316711][T11536] libceph: connect (1)[c::]:6789 error -101 [ 1110.323419][T11536] libceph: mon0 (1)[c::]:6789 connect error [ 1110.355619][T24786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1110.567988][ T5102] Bluetooth: hci2: command tx timeout [ 1110.819327][T24900] ceph: No mds server is up or the cluster is laggy [ 1110.877208][T11536] libceph: connect (1)[c::]:6789 error -101 [ 1110.885674][T11536] libceph: mon0 (1)[c::]:6789 connect error [ 1111.029482][T24786] hsr_slave_0: entered promiscuous mode [ 1111.104572][T24786] hsr_slave_1: entered promiscuous mode [ 1111.124262][T24895] loop5: detected capacity change from 0 to 32768 [ 1111.131892][T24786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1111.140924][T24786] Cannot create hsr debugfs directory [ 1111.202918][T24895] JBD2: Ignoring recovery information on journal [ 1111.391221][T24895] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1111.425312][ T8] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1111.480555][T24925] tipc: Started in network mode [ 1111.516978][T22092] ocfs2: Unmounting device (7,5) on (node local) [ 1111.523441][T24925] tipc: Node identity b2637e5cc0a, cluster identity 4711 [ 1111.548804][T24925] tipc: Enabled bearer , priority 0 [ 1111.579889][T24927] syzkaller0: entered promiscuous mode [ 1111.596199][T24927] syzkaller0: entered allmulticast mode [ 1111.616765][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 1111.634336][ T8] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1111.655482][ T8] usb 3-1: config 0 has no interface number 0 [ 1111.685481][ T8] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1111.709427][ T8] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1111.726033][T24925] tipc: Resetting bearer [ 1111.794787][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.826351][T24923] tipc: Resetting bearer [ 1111.835968][ T8] usb 3-1: config 0 descriptor?? [ 1111.891043][ T8] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1111.976343][T24923] tipc: Disabling bearer [ 1112.236234][T24786] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1112.239097][ T1185] libceph: connect (1)[c::]:6789 error -101 [ 1112.253167][ T1185] libceph: mon0 (1)[c::]:6789 connect error [ 1112.267352][T24786] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1112.288593][T24786] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1112.303381][T24786] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1112.497580][T24786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1112.516253][ T5828] libceph: connect (1)[c::]:6789 error -101 [ 1112.524889][ T5828] libceph: mon0 (1)[c::]:6789 connect error [ 1112.539836][T24786] 8021q: adding VLAN 0 to HW filter on device team0 [ 1112.563453][ T2917] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.570904][ T2917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1112.594138][ T2917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.601739][ T2917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1112.641720][ T1185] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1112.835326][ T1185] usb 6-1: Using ep0 maxpacket: 32 [ 1112.860254][ T1185] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1112.875608][ T1185] usb 6-1: config 0 has no interface number 0 [ 1112.881900][ T1185] usb 6-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 1112.908693][ T1185] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1112.922861][ T1185] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1112.949388][ T1185] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.958665][ T1185] usb 6-1: Product: syz [ 1112.965639][ T1185] usb 6-1: Manufacturer: syz [ 1112.975731][ T1185] usb 6-1: SerialNumber: syz [ 1112.998782][ T1185] usb 6-1: config 0 descriptor?? [ 1113.047548][ T5828] libceph: connect (1)[c::]:6789 error -101 [ 1113.058568][T24946] ceph: No mds server is up or the cluster is laggy [ 1113.069879][ T5828] libceph: mon0 (1)[c::]:6789 connect error [ 1113.097453][ T27] usb 3-1: USB disconnect, device number 99 [ 1113.189861][T24786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1113.241023][ T1185] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1113.285318][ T1185] cx231xx 6-1:0.1: Failed to read PCB config [ 1113.291402][ T1185] cx231xx: probe of 6-1:0.1 failed with error -71 [ 1113.337958][ T1185] usb 6-1: USB disconnect, device number 49 [ 1113.815328][ T1185] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1113.829417][T24786] veth0_vlan: entered promiscuous mode [ 1113.901515][T24786] veth1_vlan: entered promiscuous mode [ 1113.970508][T24786] veth0_macvtap: entered promiscuous mode [ 1113.981893][T24786] veth1_macvtap: entered promiscuous mode [ 1114.003838][T24786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.015862][T24786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.026119][ T1185] usb 6-1: Using ep0 maxpacket: 32 [ 1114.033292][ T1185] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1114.041561][T24786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.067876][T24786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.072568][ T1185] usb 6-1: config 0 has no interface number 0 [ 1114.094627][ T1185] usb 6-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 1114.094748][T24786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.118341][T24786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.132976][T24786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.139044][ T1185] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1114.150453][ T1185] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1114.162415][ T1185] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.175419][ T5172] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1114.184780][T24786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.196347][ T1185] usb 6-1: Product: syz [ 1114.200573][ T1185] usb 6-1: Manufacturer: syz [ 1114.206607][T24786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.220628][ T1185] usb 6-1: SerialNumber: syz [ 1114.226831][T24786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.241962][ T1185] usb 6-1: config 0 descriptor?? [ 1114.254154][T24786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.265042][T24786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.278134][T24786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.307302][T24786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.320445][T24786] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.331217][T24786] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.340509][T24786] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.350665][T24786] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.387727][ T5172] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1114.421773][ T5172] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1114.470631][ T5172] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1114.487008][ T1185] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1114.505493][ T5172] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1114.582759][ T5172] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1114.598075][ T1185] cx231xx 6-1:0.1: Failed to read PCB config [ 1114.605815][ T1185] cx231xx: probe of 6-1:0.1 failed with error -71 [ 1114.612909][ T5172] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1114.641324][ T5172] usb 7-1: Product: syz [ 1114.648456][ T1185] usb 6-1: USB disconnect, device number 50 [ 1114.664578][ T5172] usb 7-1: Manufacturer: syz [ 1114.697003][ T5172] cdc_wdm 7-1:1.0: skipping garbage [ 1114.702368][ T5172] cdc_wdm 7-1:1.0: skipping garbage [ 1114.753514][ T5172] cdc_wdm 7-1:1.0: skipping garbage [ 1114.759425][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.759444][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.803902][T23831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.821942][T23831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.830870][ T5172] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 1114.926297][ T1185] usb 7-1: USB disconnect, device number 2 [ 1115.395522][ T5172] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1115.559989][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.568237][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.605360][ T5172] usb 3-1: Using ep0 maxpacket: 8 [ 1115.798763][ T5172] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1115.967173][ T5172] usb 3-1: config 0 has no interface number 0 [ 1116.115614][ T5172] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1116.159404][ T5172] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1116.211327][ T5172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.250927][ T5172] usb 3-1: config 0 descriptor?? [ 1116.277238][ T5172] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1116.457054][T25068] loop5: detected capacity change from 0 to 1024 [ 1116.659378][T25068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1116.672373][T25068] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1117.376946][T22092] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1117.575680][T25080] loop7: detected capacity change from 0 to 1024 [ 1117.613545][T25080] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1117.705327][ T5828] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1117.809419][ T1185] usb 3-1: USB disconnect, device number 100 [ 1117.915312][ T5828] usb 7-1: Using ep0 maxpacket: 32 [ 1117.931407][ T5828] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1117.948807][ T5828] usb 7-1: config 0 has no interface number 0 [ 1117.955105][ T5828] usb 7-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 1117.971388][ T5828] usb 7-1: config 0 interface 1 has no altsetting 0 [ 1117.981077][ T5828] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1118.015247][ T5828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.042444][ T5828] usb 7-1: Product: syz [ 1118.070515][ T5828] usb 7-1: Manufacturer: syz [ 1118.097106][ T5828] usb 7-1: SerialNumber: syz [ 1118.147593][ T5828] usb 7-1: config 0 descriptor?? [ 1118.162035][T25096] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 0, id = 0 [ 1118.163111][T25094] IPVS: stopping backup sync thread 25096 ... [ 1118.781030][ T5828] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1118.848588][ T5828] cx231xx 7-1:0.1: Failed to read PCB config [ 1118.886245][ T5828] cx231xx: probe of 7-1:0.1 failed with error -71 [ 1119.316184][ T5828] usb 7-1: USB disconnect, device number 3 [ 1119.500123][T25113] loop2: detected capacity change from 0 to 16 [ 1119.515035][T25113] erofs: (device loop2): mounted with root inode @ nid 36. [ 1119.678768][T20569] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46 [ 1119.737348][T20569] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 1119.756558][ T5828] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1119.790330][T20569] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 1119.958652][T25126] loop2: detected capacity change from 0 to 1024 [ 1119.976883][T25126] ext4: Unknown parameter 'fsmagic' [ 1120.005421][ T5828] usb 7-1: Using ep0 maxpacket: 32 [ 1121.337487][ T5828] usb 7-1: device descriptor read/all, error -71 [ 1123.535547][ T5172] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1123.735336][ T5172] usb 6-1: Using ep0 maxpacket: 8 [ 1123.747763][ T5172] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1123.772705][ T5172] usb 6-1: config 0 has no interface number 0 [ 1123.800698][ T5172] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1123.834149][ T5172] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1123.884344][ T5172] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.930090][ T5172] usb 6-1: config 0 descriptor?? [ 1123.987514][ T5172] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1124.107243][T25167] loop2: detected capacity change from 0 to 16 [ 1124.190193][T25167] erofs: (device loop2): mounted with root inode @ nid 36. [ 1125.627694][T20569] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46 [ 1125.681350][T20569] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 1125.722003][T20569] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 1126.603284][ T8] usb 6-1: USB disconnect, device number 51 [ 1126.866757][T25200] loop2: detected capacity change from 0 to 1024 [ 1126.874066][T25200] ext4: Unknown parameter 'obj_user' [ 1126.948114][ T5102] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 1126.958809][ T5102] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1127.429504][T25180] loop6: detected capacity change from 0 to 32768 [ 1128.998597][ T5102] Bluetooth: hci4: command 0x0c1a tx timeout [ 1129.976118][T25217] loop7: detected capacity change from 0 to 32768 [ 1130.195129][ T28] audit: type=1800 audit(1760087421.521:404): pid=25217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6273" name="file1" dev="loop7" ino=7 res=0 errno=0 [ 1133.055029][T25280] binder: 25279:25280 ioctl c0306201 0 returned -14 [ 1133.279525][T25289] loop2: detected capacity change from 0 to 64 [ 1133.327807][T25291] loop7: detected capacity change from 0 to 1024 [ 1133.335974][T25261] loop6: detected capacity change from 0 to 32768 [ 1135.070086][ T28] audit: type=1800 audit(1760087426.411:405): pid=25323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6291" name="file1" dev="loop7" ino=2 res=0 errno=0 [ 1135.843308][T25308] loop5: detected capacity change from 0 to 32768 [ 1135.960209][T25308] JBD2: Ignoring recovery information on journal [ 1136.237071][T15894] hfsplus: bad catalog file entry [ 1136.239636][T25336] tipc: Enabling of bearer rejected, failed to enable media [ 1136.282883][T25336] syzkaller0: entered promiscuous mode [ 1136.285348][T15894] hfsplus: b-tree write err: -5, ino 3 [ 1136.295710][T25336] syzkaller0: entered allmulticast mode [ 1136.311989][T25308] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1136.455377][ T28] audit: type=1800 audit(1760087427.781:406): pid=25308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6294" name="file1" dev="loop5" ino=17058 res=0 errno=0 [ 1136.584304][T22092] ocfs2: Unmounting device (7,5) on (node local) [ 1136.584661][T25345] loop7: detected capacity change from 0 to 64 [ 1136.939082][T25353] loop6: detected capacity change from 0 to 128 [ 1138.463035][T25373] program syz.7.6306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1138.669759][T25342] loop2: detected capacity change from 0 to 32768 [ 1139.076843][ T8] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1139.316098][ T8] usb 8-1: Using ep0 maxpacket: 8 [ 1139.350409][ T8] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1139.389188][ T8] usb 8-1: config 0 has no interface number 0 [ 1139.465423][ T8] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1139.483031][ T8] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1139.494105][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.629512][ T8] usb 8-1: config 0 descriptor?? [ 1140.116904][ T8] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1140.205262][ T8] usb 8-1: USB disconnect, device number 2 [ 1140.411166][T25402] loop6: detected capacity change from 0 to 64 [ 1141.911258][T25422] program syz.6.6315 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1142.389254][T25401] loop2: detected capacity change from 0 to 32768 [ 1142.413333][T25396] loop5: detected capacity change from 0 to 32768 [ 1142.492782][T25401] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1142.500140][T25396] JBD2: Ignoring recovery information on journal [ 1142.595617][T25396] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1142.751397][ T28] audit: type=1800 audit(1760087434.091:407): pid=25396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6311" name="file1" dev="loop5" ino=17058 res=0 errno=0 [ 1142.754138][T25401] XFS (loop2): Ending clean mount [ 1142.888552][T22092] ocfs2: Unmounting device (7,5) on (node local) [ 1142.972993][T20569] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1143.200921][T25452] atomic_op ffff888068952198 conn xmit_atomic 0000000000000000 [ 1143.364759][T25441] loop7: detected capacity change from 0 to 32768 [ 1144.578683][T25465] loop2: detected capacity change from 0 to 64 [ 1144.690601][T25468] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6321'. [ 1144.735768][ T5102] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 1145.410625][T25471] syz.2.6319: attempt to access beyond end of device [ 1145.410625][T25471] loop2: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 1145.494189][T25471] Buffer I/O error on dev loop2, logical block 159, lost async page write [ 1145.651868][T25484] program syz.7.6324 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1145.883081][T25471] syz.2.6319: attempt to access beyond end of device [ 1145.883081][T25471] loop2: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 1146.001965][T25471] Buffer I/O error on dev loop2, logical block 160, lost async page write [ 1146.041325][T25471] syz.2.6319: attempt to access beyond end of device [ 1146.041325][T25471] loop2: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 1146.279658][T25486] loop7: detected capacity change from 0 to 40427 [ 1146.288115][T25471] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 1146.296747][T25471] syz.2.6319: attempt to access beyond end of device [ 1146.296747][T25471] loop2: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 1146.335412][T25486] F2FS-fs (loop7): invalid crc value [ 1146.342737][T25486] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1146.364058][T25471] Buffer I/O error on dev loop2, logical block 162, lost async page write [ 1146.379678][T25471] syz.2.6319: attempt to access beyond end of device [ 1146.379678][T25471] loop2: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 1146.393177][T25486] F2FS-fs (loop7): Start checkpoint disabled! [ 1146.400754][T25471] Buffer I/O error on dev loop2, logical block 163, lost async page write [ 1146.410133][T25486] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1146.425509][T25471] syz.2.6319: attempt to access beyond end of device [ 1146.425509][T25471] loop2: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 1146.440576][T25471] Buffer I/O error on dev loop2, logical block 167, lost async page write [ 1146.449512][T25471] syz.2.6319: attempt to access beyond end of device [ 1146.449512][T25471] loop2: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 1146.466009][T25471] Buffer I/O error on dev loop2, logical block 169, lost async page write [ 1146.475561][T25471] syz.2.6319: attempt to access beyond end of device [ 1146.475561][T25471] loop2: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 1146.652094][T25471] Buffer I/O error on dev loop2, logical block 171, lost async page write [ 1146.815034][T25471] syz.2.6319: attempt to access beyond end of device [ 1146.815034][T25471] loop2: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 1146.927363][T25471] Buffer I/O error on dev loop2, logical block 172, lost async page write [ 1146.936300][T25471] syz.2.6319: attempt to access beyond end of device [ 1146.936300][T25471] loop2: rw=2049, sector=173, nr_sectors = 1 limit=64 [ 1146.955434][T25471] Buffer I/O error on dev loop2, logical block 173, lost async page write [ 1147.541203][T25506] loop6: detected capacity change from 0 to 40427 [ 1147.581980][T25506] F2FS-fs (loop6): invalid crc value [ 1147.607633][T25506] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1147.630851][ T2116] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1147.643629][T25506] F2FS-fs (loop6): Start checkpoint disabled! [ 1147.667149][T25506] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1147.718235][ T2116] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1147.826273][ T2116] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1147.973608][ T2116] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1148.663415][T25516] kernel profiling enabled (shift: 3) [ 1149.764920][ T2116] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1149.810126][ T2116] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1149.845348][ T2116] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1149.858246][T25504] loop2: detected capacity change from 0 to 32768 [ 1149.867146][ T2116] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1150.006004][T25504] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1150.295023][T25504] XFS (loop2): Ending clean mount [ 1150.416153][T20569] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1151.195373][T25529] loop7: detected capacity change from 0 to 32768 [ 1151.205935][T25547] input: syz0 as /devices/virtual/input/input58 [ 1151.632614][T25556] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6332'. [ 1151.682299][ T5102] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 1153.125701][T25575] program syz.5.6341 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1154.022643][T25591] tipc: Enabled bearer , priority 0 [ 1154.035083][T25591] syzkaller0: entered promiscuous mode [ 1154.051359][T25591] syzkaller0: entered allmulticast mode [ 1154.101772][T25591] tipc: Resetting bearer [ 1154.137184][T25590] tipc: Resetting bearer [ 1154.224895][T25590] tipc: Disabling bearer [ 1154.461680][T25603] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6348'. [ 1154.505312][ T5102] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 1154.662527][ T28] audit: type=1326 audit(1760087445.991:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25606 comm="syz.7.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1155.100401][ T28] audit: type=1326 audit(1760087445.991:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25606 comm="syz.7.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1155.531569][ T28] audit: type=1326 audit(1760087445.991:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25606 comm="syz.7.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1155.566792][ T28] audit: type=1326 audit(1760087445.991:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25606 comm="syz.7.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1155.590166][ T28] audit: type=1326 audit(1760087445.991:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25606 comm="syz.7.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1155.612973][ T28] audit: type=1326 audit(1760087445.991:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25606 comm="syz.7.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1155.640986][ T28] audit: type=1326 audit(1760087445.991:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25606 comm="syz.7.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1155.665526][ T28] audit: type=1326 audit(1760087446.001:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25606 comm="syz.7.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1155.688369][ T28] audit: type=1326 audit(1760087446.001:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25606 comm="syz.7.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1155.714107][ T28] audit: type=1326 audit(1760087446.001:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25606 comm="syz.7.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1155.727383][T25583] loop6: detected capacity change from 0 to 32768 [ 1155.863692][T25583] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1156.497474][T25583] XFS (loop6): Ending clean mount [ 1156.513667][T25623] program syz.7.6351 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1156.611482][T25597] loop2: detected capacity change from 0 to 32768 [ 1156.719968][T24521] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1156.746902][T25638] loop7: detected capacity change from 0 to 16 [ 1156.781335][T25638] erofs: (device loop7): mounted with root inode @ nid 36. [ 1156.889262][T25639] erofs: (device loop7): z_erofs_fill_inode_lazy: unknown HEAD1 format 5 for nid 36, please upgrade kernel [ 1156.910596][T25639] erofs: (device loop7): z_erofs_fill_inode_lazy: unknown HEAD1 format 5 for nid 36, please upgrade kernel [ 1156.946147][T25639] erofs: (device loop7): z_erofs_read_folio: read error -95 @ 0 of nid 36 [ 1156.958452][T25639] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1157.637911][ T8] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1157.875363][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 1158.556153][ T8] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1158.565136][ T8] usb 7-1: config 0 has no interface number 0 [ 1158.591382][ T8] usb 7-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 1158.622811][ T8] usb 7-1: config 0 interface 1 has no altsetting 0 [ 1158.661308][ T8] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1158.684645][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.718075][ T8] usb 7-1: Product: syz [ 1158.732482][T25663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1158.758654][ T8] usb 7-1: Manufacturer: syz [ 1158.834146][ T8] usb 7-1: SerialNumber: syz [ 1158.858130][T25665] bond_slave_0: entered promiscuous mode [ 1158.864682][T25665] bond_slave_1: entered promiscuous mode [ 1158.867599][ T8] usb 7-1: config 0 descriptor?? [ 1158.892833][T25665] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1158.914331][T25665] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1159.054684][T25672] program syz.7.6361 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1159.117836][ T8] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1159.162910][ T8] cx231xx 7-1:0.1: Failed to read PCB config [ 1159.177917][ T8] cx231xx: probe of 7-1:0.1 failed with error -71 [ 1159.206477][ T8] usb 7-1: USB disconnect, device number 6 [ 1159.572527][T25674] loop7: detected capacity change from 0 to 32768 [ 1159.649626][T25686] loop2: detected capacity change from 0 to 16 [ 1159.660336][T25674] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1159.665563][T25686] erofs: (device loop2): mounted with root inode @ nid 36. [ 1159.676276][ T8] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1159.794906][T25674] XFS (loop7): Ending clean mount [ 1159.806553][T25691] erofs: (device loop2): z_erofs_fill_inode_lazy: unknown HEAD1 format 5 for nid 36, please upgrade kernel [ 1159.819188][T25691] erofs: (device loop2): z_erofs_fill_inode_lazy: unknown HEAD1 format 5 for nid 36, please upgrade kernel [ 1159.834721][T25691] erofs: (device loop2): z_erofs_read_folio: read error -95 @ 0 of nid 36 [ 1159.844708][T25691] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1159.855276][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 1159.863253][ T8] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1159.875119][ T8] usb 7-1: config 0 has no interface number 0 [ 1159.881893][ T8] usb 7-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 1159.931599][ T8] usb 7-1: config 0 interface 1 has no altsetting 0 [ 1159.944441][ T8] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1159.957688][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.966231][ T8] usb 7-1: Product: syz [ 1159.971784][ T8] usb 7-1: Manufacturer: syz [ 1159.978396][ T8] usb 7-1: SerialNumber: syz [ 1159.992892][ T8] usb 7-1: config 0 descriptor?? [ 1159.994342][T24786] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1160.247246][ T8] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1160.306856][ T8] cx231xx 7-1:0.1: Failed to read PCB config [ 1160.328509][ T8] cx231xx: probe of 7-1:0.1 failed with error -71 [ 1160.371126][ T8] usb 7-1: USB disconnect, device number 7 [ 1162.103984][T25724] program syz.2.6370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1163.383564][T25743] tipc: Started in network mode [ 1163.394907][T25743] tipc: Node identity 2ae596d02515, cluster identity 4711 [ 1163.414758][T25743] tipc: Enabled bearer , priority 0 [ 1163.430030][T25743] syzkaller0: entered promiscuous mode [ 1163.445937][T25743] syzkaller0: entered allmulticast mode [ 1163.529122][T25743] tipc: Resetting bearer [ 1163.552075][T25742] tipc: Resetting bearer [ 1163.621906][T25742] tipc: Disabling bearer [ 1163.984627][T25741] loop5: detected capacity change from 0 to 32768 [ 1164.065103][T25741] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1164.238263][T25765] loop7: detected capacity change from 0 to 16 [ 1164.248274][T25765] erofs: (device loop7): mounted with root inode @ nid 36. [ 1165.231313][T25771] erofs: (device loop7): z_erofs_fill_inode_lazy: unknown HEAD1 format 5 for nid 36, please upgrade kernel [ 1165.245447][T25771] erofs: (device loop7): z_erofs_fill_inode_lazy: unknown HEAD1 format 5 for nid 36, please upgrade kernel [ 1165.257230][T25771] erofs: (device loop7): z_erofs_read_folio: read error -95 @ 0 of nid 36 [ 1165.265986][T25771] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1165.355530][T11536] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1165.400874][T25741] XFS (loop5): Ending clean mount [ 1165.557510][T11536] usb 3-1: Using ep0 maxpacket: 32 [ 1165.577387][T11536] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1165.611263][T22092] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1165.630716][T25776] program syz.6.6381 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1165.677566][T11536] usb 3-1: config 0 has no interface number 0 [ 1165.716573][T11536] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1165.787206][T11536] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1165.810514][T11536] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.862749][T11536] usb 3-1: Product: syz [ 1165.872733][T11536] usb 3-1: Manufacturer: syz [ 1165.898897][T11536] usb 3-1: SerialNumber: syz [ 1165.924334][T11536] usb 3-1: config 0 descriptor?? [ 1165.942875][T11536] f81534 3-1:0.12: required endpoints missing [ 1167.794080][T25798] tipc: Enabled bearer , priority 0 [ 1167.830311][T25798] syzkaller0: entered promiscuous mode [ 1167.853514][T25798] syzkaller0: entered allmulticast mode [ 1167.953536][T25801] tipc: Resetting bearer [ 1167.972485][ T1185] usb 3-1: USB disconnect, device number 101 [ 1168.026759][T25797] tipc: Resetting bearer [ 1168.162761][T25797] tipc: Disabling bearer [ 1170.578772][T25827] program syz.7.6391 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1170.781823][T25833] fuse: Bad value for 'user_id' [ 1172.196160][T25820] loop6: detected capacity change from 0 to 32768 [ 1172.386343][T25820] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/loop6": -EINTR [ 1172.494050][T25865] tipc: Enabled bearer , priority 0 [ 1173.513700][T25868] syzkaller0: entered promiscuous mode [ 1173.545266][T25868] syzkaller0: entered allmulticast mode [ 1173.615788][ T5828] tipc: Node number set to 1658688642 [ 1173.677286][T25880] program syz.6.6402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1173.733391][T25868] tipc: Resetting bearer [ 1173.834384][T25864] tipc: Resetting bearer [ 1173.980778][T25864] tipc: Disabling bearer [ 1175.029330][T25890] loop6: detected capacity change from 0 to 32768 [ 1175.051000][T25890] JBD2: Ignoring recovery information on journal [ 1175.129600][T25890] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1175.354504][T24521] ocfs2: Unmounting device (7,6) on (node local) [ 1176.362032][T25926] program syz.7.6412 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1176.762311][T25934] loop2: detected capacity change from 0 to 40427 [ 1176.917192][T25934] F2FS-fs (loop2): invalid crc value [ 1176.925970][T25934] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1176.954389][T25934] F2FS-fs (loop2): Start checkpoint disabled! [ 1176.977893][T25934] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1177.003508][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.015318][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.732561][ T155] bio_check_eod: 11 callbacks suppressed [ 1178.732576][ T155] kworker/u4:5: attempt to access beyond end of device [ 1178.732576][ T155] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 1178.779037][ T155] kworker/u4:5: attempt to access beyond end of device [ 1178.779037][ T155] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 1178.824491][ T155] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1178.845285][ T155] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1178.871220][ T155] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1178.897234][ T155] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1179.712534][T25971] fuse: Bad value for 'fd' [ 1179.961400][T25955] loop7: detected capacity change from 0 to 32768 [ 1180.080477][T25955] JBD2: Ignoring recovery information on journal [ 1180.152913][T25955] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1180.312314][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 1180.312329][ T28] audit: type=1800 audit(1760087471.651:438): pid=25955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6417" name="file1" dev="loop7" ino=17058 res=0 errno=0 [ 1180.850112][T24786] ocfs2: Unmounting device (7,7) on (node local) [ 1182.591260][T26002] loop5: detected capacity change from 0 to 40427 [ 1182.672559][T26002] F2FS-fs (loop5): invalid crc value [ 1182.697343][T26002] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1182.726867][T26002] F2FS-fs (loop5): Start checkpoint disabled! [ 1182.765682][T26002] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1183.602316][T26011] program syz.7.6423 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1183.685750][T26008] loop6: detected capacity change from 0 to 32768 [ 1183.765335][T26008] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.6427 (26008) [ 1183.947908][T26014] fuse: Bad value for 'fd' [ 1183.957273][T26008] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1183.973246][ T2917] kworker/u4:8: attempt to access beyond end of device [ 1183.973246][ T2917] loop5: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 1184.005407][T26008] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 1184.024118][T26008] BTRFS info (device loop6): setting nodatacow, compression disabled [ 1184.063421][ T2917] kworker/u4:8: attempt to access beyond end of device [ 1184.063421][ T2917] loop5: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 1184.077848][T26008] BTRFS info (device loop6): enabling auto defrag [ 1184.084337][T26008] BTRFS info (device loop6): max_inline at 0 [ 1184.111678][ T27] libceph: connect (1)[c::]:6789 error -101 [ 1184.123204][ T2917] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1184.136294][T26008] BTRFS info (device loop6): using free space tree [ 1184.177408][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 1184.185224][ T2917] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1184.195252][T26018] ceph: No mds server is up or the cluster is laggy [ 1184.204062][ T2917] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1184.248630][ T2917] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1185.020330][T26008] BTRFS info (device loop6): auto enabling async discard [ 1185.184600][T26055] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6434'. [ 1185.246252][T26055] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6434'. [ 1185.303024][T26055] netlink: 'syz.7.6434': attribute type 15 has an invalid length. [ 1185.606798][ T5856] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1185.875335][ T5856] usb 8-1: Using ep0 maxpacket: 32 [ 1185.926647][ T5856] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1185.985267][ T5856] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1186.033693][ T5856] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1186.297984][T26068] loop2: detected capacity change from 0 to 40427 [ 1186.315568][ T5856] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1186.335316][ T5856] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1186.358607][T26068] F2FS-fs (loop2): invalid crc value [ 1186.367525][T26068] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1186.396889][T26068] F2FS-fs (loop2): Start checkpoint disabled! [ 1186.415372][T26068] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1186.423450][ T5856] usb 8-1: Product: syz [ 1186.455522][ T5856] usb 8-1: Manufacturer: syz [ 1186.460171][ T5856] usb 8-1: SerialNumber: syz [ 1187.120220][T26058] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1187.172013][ T5856] input: appletouch as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input59 [ 1187.560385][ T5856] usb 8-1: USB disconnect, device number 3 [ 1187.686814][ T5856] appletouch 8-1:1.0: input: appletouch disconnected [ 1187.790160][T23831] kworker/u4:4: attempt to access beyond end of device [ 1187.790160][T23831] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 1187.814380][T23831] kworker/u4:4: attempt to access beyond end of device [ 1187.814380][T23831] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 1187.864160][T24521] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1187.867141][T23831] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1187.989181][T23831] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1187.997176][T23831] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1188.004099][T23831] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1188.411255][T26090] fuse: Bad value for 'fd' [ 1188.711882][ T27] libceph: connect (1)[c::]:6789 error -101 [ 1188.729092][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 1188.903194][T26097] ceph: No mds server is up or the cluster is laggy [ 1189.019016][ T27] libceph: connect (1)[c::]:6789 error -101 [ 1189.056966][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 1189.627888][T26113] program syz.2.6437 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1191.889667][T26144] fuse: Bad value for 'fd' [ 1192.148310][ T8] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1192.586755][ T8] usb 8-1: Using ep0 maxpacket: 32 [ 1192.602075][ T8] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1192.636362][ T8] usb 8-1: config 0 has no interface number 0 [ 1192.728264][T26154] program syz.6.6453 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1192.745282][ T8] usb 8-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 1192.778356][ T8] usb 8-1: config 0 interface 1 has no altsetting 0 [ 1192.790542][ T8] usb 8-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1192.807765][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.835201][ T8] usb 8-1: Product: syz [ 1192.839492][ T8] usb 8-1: Manufacturer: syz [ 1192.846025][ T8] usb 8-1: SerialNumber: syz [ 1193.087750][ T8] usb 8-1: config 0 descriptor?? [ 1193.176175][T26159] loop6: detected capacity change from 0 to 512 [ 1193.356839][T26159] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 1193.364889][T26159] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 1193.462078][ T8] cx231xx 8-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1193.484069][ T8] cx231xx 8-1:0.1: Failed to read PCB config [ 1193.499071][ T8] cx231xx: probe of 8-1:0.1 failed with error -71 [ 1193.508930][ T8] usb 8-1: USB disconnect, device number 4 [ 1193.579399][T26159] EXT4-fs (loop6): 1 truncate cleaned up [ 1193.590475][T26159] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1193.629085][T26159] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1193.975369][ T8] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1194.617565][ T8] usb 8-1: Using ep0 maxpacket: 32 [ 1194.655557][ T8] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1194.686989][ T8] usb 8-1: config 0 has no interface number 0 [ 1194.713726][ T8] usb 8-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 1195.284252][ T28] audit: type=1326 audit(1760087486.151:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26186 comm="syz.6.6459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf178eec9 code=0x7ffc0000 [ 1195.307845][ T8] usb 8-1: config 0 interface 1 has no altsetting 0 [ 1195.574822][ T28] audit: type=1326 audit(1760087486.151:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26186 comm="syz.6.6459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf178eec9 code=0x7ffc0000 [ 1195.810200][ T8] usb 8-1: string descriptor 0 read error: -71 [ 1195.889906][ T8] usb 8-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1195.945495][ T28] audit: type=1326 audit(1760087486.151:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26186 comm="syz.6.6459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f3bf178eec9 code=0x7ffc0000 [ 1195.954877][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.045528][ T28] audit: type=1326 audit(1760087486.151:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26186 comm="syz.6.6459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf178eec9 code=0x7ffc0000 [ 1196.110697][ T8] usb 8-1: config 0 descriptor?? [ 1196.115545][T26191] fuse: Bad value for 'fd' [ 1196.169520][ T28] audit: type=1326 audit(1760087486.151:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26186 comm="syz.6.6459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf178eec9 code=0x7ffc0000 [ 1196.197262][ T8] usb 8-1: can't set config #0, error -71 [ 1196.256949][ T8] usb 8-1: USB disconnect, device number 5 [ 1196.321673][ T28] audit: type=1326 audit(1760087486.161:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26186 comm="syz.6.6459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3bf178eec9 code=0x7ffc0000 [ 1196.370902][T26194] syzkaller0: entered promiscuous mode [ 1196.384154][T26194] syzkaller0: entered allmulticast mode [ 1196.863681][ T28] audit: type=1326 audit(1760087486.161:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26186 comm="syz.6.6459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf178eec9 code=0x7ffc0000 [ 1196.955338][ T28] audit: type=1326 audit(1760087486.161:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26186 comm="syz.6.6459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf178eec9 code=0x7ffc0000 [ 1196.982905][ T28] audit: type=1326 audit(1760087486.161:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26186 comm="syz.6.6459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3bf178eec9 code=0x7ffc0000 [ 1197.011888][ T28] audit: type=1326 audit(1760087486.161:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26186 comm="syz.6.6459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf178eec9 code=0x7ffc0000 [ 1197.362303][T26209] program syz.5.6463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1197.871318][T26217] loop6: detected capacity change from 0 to 40427 [ 1197.902043][T26217] F2FS-fs (loop6): invalid crc value [ 1197.911880][T26217] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1197.939010][T26217] F2FS-fs (loop6): Start checkpoint disabled! [ 1197.954117][T26217] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1198.754400][T26224] loop2: detected capacity change from 0 to 512 [ 1199.050348][ T12] kworker/u4:1: attempt to access beyond end of device [ 1199.050348][ T12] loop6: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 1199.136955][ T12] kworker/u4:1: attempt to access beyond end of device [ 1199.136955][ T12] loop6: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 1199.218448][ T12] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1199.344490][T26233] fuse: Bad value for 'fd' [ 1199.383392][ T12] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1199.480362][ T12] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1200.366003][T26234] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1200.421941][ T12] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1201.076233][T26242] syzkaller0: entered promiscuous mode [ 1201.118420][T26242] syzkaller0: entered allmulticast mode [ 1201.896116][ T1185] libceph: connect (1)[c::]:6789 error -101 [ 1202.250773][ T1185] libceph: mon0 (1)[c::]:6789 connect error [ 1202.267971][T26256] ceph: No mds server is up or the cluster is laggy [ 1202.334103][T26267] loop5: detected capacity change from 0 to 64 [ 1202.923625][ T5102] Bluetooth: hci4: command 0x0c1a tx timeout [ 1203.182551][T26268] syz.5.6476: attempt to access beyond end of device [ 1203.182551][T26268] loop5: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 1203.226388][T26268] buffer_io_error: 6 callbacks suppressed [ 1203.226404][T26268] Buffer I/O error on dev loop5, logical block 159, lost async page write [ 1203.229323][T26279] fuse: Invalid rootmode [ 1203.251636][T26268] syz.5.6476: attempt to access beyond end of device [ 1203.251636][T26268] loop5: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 1203.423160][T26268] Buffer I/O error on dev loop5, logical block 160, lost async page write [ 1203.450258][T26268] syz.5.6476: attempt to access beyond end of device [ 1203.450258][T26268] loop5: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 1204.517054][T26268] Buffer I/O error on dev loop5, logical block 161, lost async page write [ 1204.545554][T26268] syz.5.6476: attempt to access beyond end of device [ 1204.545554][T26268] loop5: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 1204.622397][T26268] Buffer I/O error on dev loop5, logical block 162, lost async page write [ 1204.693475][T26268] syz.5.6476: attempt to access beyond end of device [ 1204.693475][T26268] loop5: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 1204.753400][T26268] Buffer I/O error on dev loop5, logical block 163, lost async page write [ 1204.804074][T26268] syz.5.6476: attempt to access beyond end of device [ 1204.804074][T26268] loop5: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 1204.813567][T26293] program syz.7.6481 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1204.824054][T26268] Buffer I/O error on dev loop5, logical block 167, lost async page write [ 1204.890336][T26268] syz.5.6476: attempt to access beyond end of device [ 1204.890336][T26268] loop5: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 1205.019122][T26268] Buffer I/O error on dev loop5, logical block 169, lost async page write [ 1205.110811][T26268] syz.5.6476: attempt to access beyond end of device [ 1205.110811][T26268] loop5: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 1205.186969][T26268] Buffer I/O error on dev loop5, logical block 171, lost async page write [ 1205.237902][T26268] syz.5.6476: attempt to access beyond end of device [ 1205.237902][T26268] loop5: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 1205.725232][T26268] Buffer I/O error on dev loop5, logical block 172, lost async page write [ 1205.769019][T26268] syz.5.6476: attempt to access beyond end of device [ 1205.769019][T26268] loop5: rw=2049, sector=173, nr_sectors = 1 limit=64 [ 1205.782898][T26268] Buffer I/O error on dev loop5, logical block 173, lost async page write [ 1205.794066][T26268] syz.5.6476: attempt to access beyond end of device [ 1205.794066][T26268] loop5: rw=2049, sector=174, nr_sectors = 1 limit=64 [ 1205.811085][T26268] syz.5.6476: attempt to access beyond end of device [ 1205.811085][T26268] loop5: rw=2049, sector=175, nr_sectors = 1 limit=64 [ 1205.860040][T26268] syz.5.6476: attempt to access beyond end of device [ 1205.860040][T26268] loop5: rw=2049, sector=176, nr_sectors = 1 limit=64 [ 1206.532635][ T1185] libceph: connect (1)[c::]:6789 error -101 [ 1206.554097][ T1185] libceph: mon0 (1)[c::]:6789 connect error [ 1206.616456][T26322] ceph: No mds server is up or the cluster is laggy [ 1206.806055][T26332] fuse: Invalid rootmode [ 1207.048856][ T5856] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1207.965505][ T5856] usb 3-1: Using ep0 maxpacket: 32 [ 1207.982306][ T5856] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1208.003723][ T5856] usb 3-1: config 0 has no interface number 0 [ 1208.425459][ T5856] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1208.495828][ T5856] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1208.541730][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.586797][ T5856] usb 3-1: Product: syz [ 1208.605417][ T5856] usb 3-1: Manufacturer: syz [ 1208.613956][ T5856] usb 3-1: SerialNumber: syz [ 1208.643708][ T5856] usb 3-1: config 0 descriptor?? [ 1208.671339][ T5856] f81534 3-1:0.12: required endpoints missing [ 1209.730638][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 1209.730690][ T28] audit: type=1326 audit(1760087501.051:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26356 comm="syz.7.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1210.174302][ T28] audit: type=1326 audit(1760087501.051:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26356 comm="syz.7.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1210.460706][ T28] audit: type=1326 audit(1760087501.051:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26356 comm="syz.7.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1210.542217][ T1185] usb 3-1: USB disconnect, device number 102 [ 1210.622015][ T28] audit: type=1326 audit(1760087501.051:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26356 comm="syz.7.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1210.706916][T26361] fuse: Invalid rootmode [ 1210.722501][ T28] audit: type=1326 audit(1760087501.051:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26356 comm="syz.7.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1210.753662][ T28] audit: type=1326 audit(1760087501.051:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26356 comm="syz.7.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1210.780171][ T28] audit: type=1326 audit(1760087501.051:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26356 comm="syz.7.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1210.788295][T26348] loop5: detected capacity change from 0 to 32768 [ 1210.803779][ T28] audit: type=1326 audit(1760087501.131:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26356 comm="syz.7.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1210.833809][ T28] audit: type=1326 audit(1760087501.131:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26356 comm="syz.7.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1210.837115][T26363] syzkaller0: entered promiscuous mode [ 1210.903776][T26348] Dev loop5 SGI disklabel: csum bad, label corrupted [ 1210.910093][T26363] syzkaller0: entered allmulticast mode [ 1212.976133][T26378] program syz.2.6502 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1215.237099][T26391] fuse: Bad value for 'rootmode' [ 1215.242218][ T28] audit: type=1326 audit(1760087505.801:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26389 comm="syz.5.6507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a478eec9 code=0x7ffc0000 [ 1215.341820][ T28] audit: type=1326 audit(1760087505.801:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26389 comm="syz.5.6507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a478eec9 code=0x7ffc0000 [ 1215.414392][ T28] audit: type=1326 audit(1760087505.801:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26389 comm="syz.5.6507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f68a478eec9 code=0x7ffc0000 [ 1215.463062][ T28] audit: type=1326 audit(1760087505.801:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26389 comm="syz.5.6507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a478eec9 code=0x7ffc0000 [ 1215.489379][ T28] audit: type=1326 audit(1760087505.801:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26389 comm="syz.5.6507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a478eec9 code=0x7ffc0000 [ 1215.519014][ T28] audit: type=1326 audit(1760087505.801:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26389 comm="syz.5.6507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f68a478eec9 code=0x7ffc0000 [ 1215.546967][ T28] audit: type=1326 audit(1760087505.801:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26389 comm="syz.5.6507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a478eec9 code=0x7ffc0000 [ 1215.567361][T26399] syzkaller0: entered promiscuous mode [ 1215.570067][ T28] audit: type=1326 audit(1760087505.801:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26389 comm="syz.5.6507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a478eec9 code=0x7ffc0000 [ 1215.586106][T26399] syzkaller0: entered allmulticast mode [ 1215.599075][ T28] audit: type=1326 audit(1760087505.811:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26389 comm="syz.5.6507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f68a478eec9 code=0x7ffc0000 [ 1215.745235][ T28] audit: type=1326 audit(1760087505.811:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26389 comm="syz.5.6507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a478eec9 code=0x7ffc0000 [ 1217.247487][T26396] loop7: detected capacity change from 0 to 32768 [ 1217.330623][T26396] JBD2: Ignoring recovery information on journal [ 1217.463702][T26396] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1218.567260][T24786] ocfs2: Unmounting device (7,7) on (node local) [ 1218.795500][T26425] fuse: Bad value for 'rootmode' [ 1220.416964][T26434] syzkaller0: entered promiscuous mode [ 1220.433186][T26434] syzkaller0: entered allmulticast mode [ 1220.816665][T26441] loop7: detected capacity change from 0 to 40427 [ 1220.838681][T26440] program syz.6.6522 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1220.876788][T26441] F2FS-fs (loop7): invalid crc value [ 1220.900401][T26441] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1220.927643][T26441] F2FS-fs (loop7): Start checkpoint disabled! [ 1220.945744][T26441] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1221.575545][ T1338] bio_check_eod: 4 callbacks suppressed [ 1221.575565][ T1338] kworker/u4:6: attempt to access beyond end of device [ 1221.575565][ T1338] loop7: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 1222.086000][ T1338] kworker/u4:6: attempt to access beyond end of device [ 1222.086000][ T1338] loop7: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 1222.141001][ T1338] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1222.153767][ T1338] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1222.164578][ T1338] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1222.172511][ T1338] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1225.164217][T24454] Bluetooth: hci2: command 0x0406 tx timeout [ 1225.293281][T26468] tipc: Enabled bearer , priority 0 [ 1225.426132][T26472] syzkaller0: entered promiscuous mode [ 1225.504898][T26472] syzkaller0: entered allmulticast mode [ 1226.412387][T11536] tipc: Node number set to 1840413494 [ 1227.964736][T26468] tipc: Resetting bearer [ 1228.009458][T26486] loop7: detected capacity change from 0 to 64 [ 1228.016329][T26467] tipc: Resetting bearer [ 1228.293153][T26467] tipc: Disabling bearer [ 1230.100915][T26504] program syz.5.6539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1231.424765][T26521] loop7: detected capacity change from 0 to 1024 [ 1231.485844][T26521] ext4: Unknown parameter 'fsmagic' [ 1231.976990][T26531] loop5: detected capacity change from 0 to 64 [ 1233.158186][T26533] syz.5.6548: attempt to access beyond end of device [ 1233.158186][T26533] loop5: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 1233.179464][T26533] buffer_io_error: 6 callbacks suppressed [ 1233.181462][T26533] Buffer I/O error on dev loop5, logical block 159, lost async page write [ 1233.203470][T26533] syz.5.6548: attempt to access beyond end of device [ 1233.203470][T26533] loop5: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 1233.228322][T26533] Buffer I/O error on dev loop5, logical block 160, lost async page write [ 1233.243415][T26533] syz.5.6548: attempt to access beyond end of device [ 1233.243415][T26533] loop5: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 1233.279443][T26533] Buffer I/O error on dev loop5, logical block 161, lost async page write [ 1233.294932][T26533] syz.5.6548: attempt to access beyond end of device [ 1233.294932][T26533] loop5: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 1233.328743][T26536] loop6: detected capacity change from 0 to 256 [ 1233.371825][T26536] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1233.698116][T26533] Buffer I/O error on dev loop5, logical block 162, lost async page write [ 1233.879227][T26533] syz.5.6548: attempt to access beyond end of device [ 1233.879227][T26533] loop5: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 1233.934289][T26533] Buffer I/O error on dev loop5, logical block 163, lost async page write [ 1233.983601][T26533] syz.5.6548: attempt to access beyond end of device [ 1233.983601][T26533] loop5: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 1234.037633][T26533] Buffer I/O error on dev loop5, logical block 167, lost async page write [ 1234.082378][T26533] syz.5.6548: attempt to access beyond end of device [ 1234.082378][T26533] loop5: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 1234.129834][T26533] Buffer I/O error on dev loop5, logical block 169, lost async page write [ 1234.152198][T26533] syz.5.6548: attempt to access beyond end of device [ 1234.152198][T26533] loop5: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 1234.172606][T26533] Buffer I/O error on dev loop5, logical block 171, lost async page write [ 1234.215847][T26533] syz.5.6548: attempt to access beyond end of device [ 1234.215847][T26533] loop5: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 1234.261033][T26533] Buffer I/O error on dev loop5, logical block 172, lost async page write [ 1234.285825][T26533] syz.5.6548: attempt to access beyond end of device [ 1234.285825][T26533] loop5: rw=2049, sector=173, nr_sectors = 1 limit=64 [ 1234.305968][T26533] Buffer I/O error on dev loop5, logical block 173, lost async page write [ 1235.479821][T26562] program syz.5.6556 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1235.854723][T26569] loop7: detected capacity change from 0 to 64 [ 1237.777477][ T5102] Bluetooth: hci1: unexpected event for opcode 0x0407 [ 1238.442560][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.452362][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.115039][T26586] loop5: detected capacity change from 0 to 32768 [ 1240.211603][T26586] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1240.512571][T26621] program syz.2.6569 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1240.622737][T26623] loop7: detected capacity change from 0 to 64 [ 1240.703965][T26586] XFS (loop5): Ending clean mount [ 1241.052626][T22092] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1241.799743][ T5102] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1241.809617][ T5102] Bluetooth: hci1: Injecting HCI hardware error event [ 1241.834040][T24454] Bluetooth: hci1: hardware error 0x00 [ 1243.202921][T26645] loop7: detected capacity change from 0 to 512 [ 1243.232141][T26645] EXT4-fs: Ignoring removed mblk_io_submit option [ 1243.301366][T26645] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1243.413710][T26645] EXT4-fs (loop7): 1 truncate cleaned up [ 1243.432402][T26645] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1243.573925][T26654] EXT4-fs (loop7): shut down requested (2) [ 1243.864489][T24786] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1243.875575][T24454] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1245.069559][T26670] loop6: detected capacity change from 0 to 64 [ 1245.808098][T26662] loop7: detected capacity change from 0 to 32768 [ 1245.848902][T26662] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1246.196110][ T5102] Bluetooth: hci2: command 0x0406 tx timeout [ 1246.494176][T26662] XFS (loop7): Ending clean mount [ 1246.563964][T26662] XFS (loop7): Quotacheck needed: Please wait. [ 1247.741654][T26662] XFS (loop7): Quotacheck: Done. [ 1248.094675][T24786] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1249.225517][ T8] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1250.320116][ T8] usb 8-1: Using ep0 maxpacket: 16 [ 1250.336190][ T8] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1250.355173][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.375638][ T8] usb 8-1: Product: syz [ 1250.379875][ T8] usb 8-1: Manufacturer: syz [ 1250.384796][ T8] usb 8-1: SerialNumber: syz [ 1250.455724][ T8] usb 8-1: config 0 descriptor?? [ 1251.355787][ T8] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1251.615608][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1251.689776][ T8] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1251.735788][ T8] usb 8-1: media controller created [ 1251.759881][T26734] loop4: detected capacity change from 0 to 7 [ 1251.786419][T26734] Dev loop4: unable to read RDB block 7 [ 1251.801235][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1251.810655][T26734] loop4: unable to read partition table [ 1251.833742][T26734] loop4: partition table beyond EOD, truncated [ 1251.852452][T26734] loop_reread_partitions: partition scan of loop4 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1251.907289][ T8] zl10353_read_register: readreg error (reg=127, ret==0) [ 1251.914428][ T8] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1251.948668][ T8] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1251.975551][ T8] usb 8-1: USB disconnect, device number 6 [ 1252.252382][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 1252.252623][ T28] audit: type=1326 audit(1760087543.591:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26744 comm="syz.5.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a478eec9 code=0x7ffc0000 [ 1252.386610][ T8] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1252.810522][ T28] audit: type=1326 audit(1760087543.591:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26744 comm="syz.5.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f68a478eec9 code=0x7ffc0000 [ 1253.067673][ T28] audit: type=1326 audit(1760087543.631:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26744 comm="syz.5.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a478eec9 code=0x7ffc0000 [ 1253.091080][ T28] audit: type=1326 audit(1760087543.631:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26744 comm="syz.5.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a478eec9 code=0x7ffc0000 [ 1253.117992][ T28] audit: type=1326 audit(1760087543.631:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26744 comm="syz.5.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f68a478eec9 code=0x7ffc0000 [ 1253.140362][ T28] audit: type=1326 audit(1760087543.631:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26744 comm="syz.5.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a478eec9 code=0x7ffc0000 [ 1253.162960][ T28] audit: type=1326 audit(1760087543.631:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26744 comm="syz.5.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a478eec9 code=0x7ffc0000 [ 1253.186265][ T28] audit: type=1326 audit(1760087543.631:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26744 comm="syz.5.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f68a478eec9 code=0x7ffc0000 [ 1253.210480][ T28] audit: type=1326 audit(1760087543.631:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26744 comm="syz.5.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a478eec9 code=0x7ffc0000 [ 1253.441971][ T28] audit: type=1326 audit(1760087543.631:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26744 comm="syz.5.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a478eec9 code=0x7ffc0000 [ 1255.305403][T26756] loop5: detected capacity change from 0 to 32768 [ 1255.320897][T26756] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.6609 (26756) [ 1255.327972][T26769] loop6: detected capacity change from 0 to 64 [ 1255.358823][T26756] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1255.395372][T11536] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1255.411172][T26756] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 1255.655396][T11536] usb 8-1: Using ep0 maxpacket: 8 [ 1255.696470][T26756] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1255.707311][T11536] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1255.735226][T11536] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1255.766542][T26756] BTRFS info (device loop5): use zstd compression, level 3 [ 1255.815806][T11536] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1255.835440][T26756] BTRFS info (device loop5): using free space tree [ 1255.866012][T11536] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1255.957061][T11536] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1256.076789][T11536] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.848250][T11536] usb 8-1: GET_CAPABILITIES returned 0 [ 1256.855257][T26756] BTRFS info (device loop5): enabling ssd optimizations [ 1256.869757][T11536] usbtmc 8-1:16.0: can't read capabilities [ 1256.887863][T26756] BTRFS info (device loop5): auto enabling async discard [ 1257.795613][ T5102] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1257.806164][ T5102] Bluetooth: hci2: Injecting HCI hardware error event [ 1257.817956][T24454] Bluetooth: hci2: hardware error 0x00 [ 1257.989609][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 1257.989626][ T28] audit: type=1326 audit(1760087548.331:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26791 comm="syz.6.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3bf178eec9 code=0x7ffc0000 [ 1258.175217][ T28] audit: type=1326 audit(1760087548.331:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26791 comm="syz.6.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf178eec9 code=0x7ffc0000 [ 1258.198434][ T28] audit: type=1326 audit(1760087548.331:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26791 comm="syz.6.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f3bf178eec9 code=0x7ffc0000 [ 1258.216671][ T1185] usb 8-1: USB disconnect, device number 7 [ 1258.220862][ T28] audit: type=1326 audit(1760087548.331:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26791 comm="syz.6.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3bf178ef03 code=0x7ffc0000 [ 1258.248837][ T28] audit: type=1326 audit(1760087548.331:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26791 comm="syz.6.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3bf178ef03 code=0x7ffc0000 [ 1258.284363][ T28] audit: type=1326 audit(1760087548.331:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26791 comm="syz.6.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf178eec9 code=0x7ffc0000 [ 1258.346188][ T28] audit: type=1326 audit(1760087548.341:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26791 comm="syz.6.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf178eec9 code=0x7ffc0000 [ 1258.369069][ T28] audit: type=1326 audit(1760087548.341:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26791 comm="syz.6.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf178eec9 code=0x7ffc0000 [ 1258.392143][ T28] audit: type=1326 audit(1760087548.341:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26791 comm="syz.6.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3bf178eec9 code=0x7ffc0000 [ 1258.424774][ T28] audit: type=1326 audit(1760087548.341:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26791 comm="syz.6.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf178eec9 code=0x7ffc0000 [ 1258.488307][T22092] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1260.243064][T26810] loop6: detected capacity change from 0 to 40427 [ 1260.273646][T26810] F2FS-fs (loop6): invalid crc value [ 1260.316269][T26810] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1260.349286][T26810] F2FS-fs (loop6): Start checkpoint disabled! [ 1260.407922][T26810] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1260.523068][T24454] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1261.894666][T26823] loop5: detected capacity change from 0 to 64 [ 1261.940549][ T2116] bio_check_eod: 6 callbacks suppressed [ 1261.940627][ T2116] kworker/u4:7: attempt to access beyond end of device [ 1261.940627][ T2116] loop6: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 1262.326014][ T2116] kworker/u4:7: attempt to access beyond end of device [ 1262.326014][ T2116] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1262.616472][ T2116] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1263.037878][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 1263.037892][ T28] audit: type=1326 audit(1760087554.381:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26827 comm="syz.7.6628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1263.804524][ T28] audit: type=1326 audit(1760087554.411:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26827 comm="syz.7.6628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1263.827992][ T28] audit: type=1326 audit(1760087554.411:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26827 comm="syz.7.6628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1263.851385][ T28] audit: type=1326 audit(1760087554.411:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26827 comm="syz.7.6628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1263.924862][ T28] audit: type=1326 audit(1760087554.411:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26827 comm="syz.7.6628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1263.967775][ T28] audit: type=1326 audit(1760087554.411:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26827 comm="syz.7.6628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1264.038233][ T28] audit: type=1326 audit(1760087554.411:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26827 comm="syz.7.6628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1264.111759][ T28] audit: type=1326 audit(1760087554.411:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26827 comm="syz.7.6628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1264.142364][T22258] libceph: connect (1)[c::]:6789 error -101 [ 1264.178196][T22258] libceph: mon0 (1)[c::]:6789 connect error [ 1264.184225][T26834] ceph: No mds server is up or the cluster is laggy [ 1264.393553][ T28] audit: type=1326 audit(1760087554.411:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26827 comm="syz.7.6628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1264.465629][T26840] tipc: Enabled bearer , priority 0 [ 1264.483583][ T28] audit: type=1326 audit(1760087554.411:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26827 comm="syz.7.6628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f741e18d710 code=0x7ffc0000 [ 1264.700809][T26840] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1264.831041][T26844] syzkaller0: entered promiscuous mode [ 1264.878050][T26844] syzkaller0: entered allmulticast mode [ 1264.918766][T26835] tipc: Resetting bearer [ 1265.812636][ T8] tipc: Node number set to 1925414492 [ 1266.054881][T26835] tipc: Disabling bearer [ 1266.253752][T26857] loop7: detected capacity change from 0 to 40427 [ 1266.322401][T26857] F2FS-fs (loop7): invalid crc value [ 1266.336977][T26857] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1266.363068][T26857] F2FS-fs (loop7): Start checkpoint disabled! [ 1266.372658][T26857] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1267.249261][T26864] loop6: detected capacity change from 0 to 64 [ 1267.317361][ T48] kworker/u4:3: attempt to access beyond end of device [ 1267.317361][ T48] loop7: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 1267.417799][ T48] kworker/u4:3: attempt to access beyond end of device [ 1267.417799][ T48] loop7: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1267.468280][ T48] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1267.513465][T22258] libceph: connect (1)[c::]:6789 error -101 [ 1267.524436][T22258] libceph: mon0 (1)[c::]:6789 connect error [ 1267.535048][ T48] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1267.572793][ T48] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1267.589899][T26869] ceph: No mds server is up or the cluster is laggy [ 1268.298907][T22258] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1268.508607][T22258] usb 7-1: Using ep0 maxpacket: 32 [ 1269.400133][T22258] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1269.485806][T22258] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1269.571763][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 1269.571805][ T28] audit: type=1326 audit(1760087560.911:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26896 comm="syz.7.6638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1269.609821][T22258] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1269.886662][T22258] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1270.150974][T22258] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1270.283576][ T28] audit: type=1326 audit(1760087560.911:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26896 comm="syz.7.6638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1270.351304][T22258] usb 7-1: Product: syz [ 1270.437490][T22258] usb 7-1: Manufacturer: syz [ 1270.445941][ T28] audit: type=1326 audit(1760087560.911:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26896 comm="syz.7.6638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1270.469198][ T28] audit: type=1326 audit(1760087560.911:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26896 comm="syz.7.6638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1270.472039][T22258] usb 7-1: SerialNumber: syz [ 1270.492727][ T28] audit: type=1326 audit(1760087560.941:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26896 comm="syz.7.6638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1270.517313][T26904] tipc: Enabled bearer , priority 0 [ 1270.519760][ T28] audit: type=1326 audit(1760087560.941:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26896 comm="syz.7.6638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1270.548932][ T28] audit: type=1326 audit(1760087560.941:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26896 comm="syz.7.6638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1270.571621][ T28] audit: type=1326 audit(1760087560.941:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26896 comm="syz.7.6638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1270.593200][T26905] syzkaller0: entered promiscuous mode [ 1270.601464][ T28] audit: type=1326 audit(1760087560.941:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26896 comm="syz.7.6638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741e18eec9 code=0x7ffc0000 [ 1270.615169][T26905] syzkaller0: entered allmulticast mode [ 1270.649191][ T28] audit: type=1326 audit(1760087560.941:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26896 comm="syz.7.6638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f741e18d710 code=0x7ffc0000 [ 1270.720210][T26879] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1270.870284][T22258] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input60 [ 1270.943407][T26904] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1271.040922][T26905] tipc: Resetting bearer [ 1271.246219][T26902] tipc: Resetting bearer [ 1271.473132][ T27] usb 7-1: USB disconnect, device number 8 [ 1271.624809][T26902] tipc: Disabling bearer [ 1271.829732][ T27] appletouch 7-1:1.0: input: appletouch disconnected [ 1272.784289][ T1185] libceph: connect (1)[c::]:6789 error -101 [ 1272.861780][T26925] ceph: No mds server is up or the cluster is laggy [ 1272.880091][ T1185] libceph: mon0 (1)[c::]:6789 connect error [ 1273.622955][T26939] loop7: detected capacity change from 0 to 16 [ 1273.669890][T26934] loop5: detected capacity change from 0 to 32768 [ 1273.672778][T26939] erofs: (device loop7): mounted with root inode @ nid 36. [ 1273.734488][T26939] autofs4:pid:26939:autofs_fill_super: called with bogus options [ 1273.784084][T26934] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1273.829628][T24786] erofs: (device loop7): erofs_fill_dentries: bogus dirent @ nid 46 [ 1273.866990][T24786] erofs: (device loop7): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 1273.910527][T26934] XFS (loop5): Ending clean mount [ 1273.929818][T24786] erofs: (device loop7): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 1273.968717][T26934] XFS (loop5): Quotacheck needed: Please wait. [ 1274.137627][T26934] XFS (loop5): Quotacheck: Done. [ 1274.406962][T22092] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1275.502489][ T42] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.728484][ T42] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.752422][T26960] tipc: Enabled bearer , priority 0 [ 1275.765978][T26960] syzkaller0: entered promiscuous mode [ 1275.771471][T26960] syzkaller0: entered allmulticast mode [ 1275.877646][ T42] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.903253][T20602] libceph: connect (1)[c::]:6789 error -101 [ 1275.910249][T20602] libceph: mon0 (1)[c::]:6789 connect error [ 1275.949665][T26965] ceph: No mds server is up or the cluster is laggy [ 1275.951577][T26960] tipc: Resetting bearer [ 1275.994758][T26959] tipc: Resetting bearer [ 1276.126845][T26959] tipc: Disabling bearer [ 1276.167890][ T5102] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1276.173720][ T42] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.184757][ T5102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1276.195764][ T5102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1276.213390][ T5102] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1276.222417][ T5102] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1276.231777][ T5102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1276.336826][T26977] fuse: Unknown parameter '0x0000000000000005' [ 1276.365226][T20602] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1276.576181][T20602] usb 3-1: Using ep0 maxpacket: 16 [ 1276.604834][T20602] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1276.669014][T20602] usb 3-1: config 0 has no interface number 0 [ 1276.681955][T20602] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1276.815461][T20602] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1276.824659][T20602] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.836717][T20602] usb 3-1: Product: syz [ 1276.840997][T20602] usb 3-1: Manufacturer: syz [ 1276.860396][T20602] usb 3-1: SerialNumber: syz [ 1276.886476][T20602] usb 3-1: config 0 descriptor?? [ 1276.910650][T20602] CoreChips: probe of 3-1:0.41 failed with error -22 [ 1277.254853][T26973] chnl_net:caif_netlink_parms(): no params data found [ 1277.371615][ T42] tipc: Left network mode [ 1278.362307][ T5102] Bluetooth: hci2: command tx timeout [ 1279.291196][ T9] usb 3-1: USB disconnect, device number 103 [ 1279.385421][T26973] bridge0: port 1(bridge_slave_0) entered blocking state [ 1279.442420][T26973] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.461944][T26973] bridge_slave_0: entered allmulticast mode [ 1279.482569][T26973] bridge_slave_0: entered promiscuous mode [ 1279.497471][T26973] bridge0: port 2(bridge_slave_1) entered blocking state [ 1279.507646][T26973] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.520185][T26973] bridge_slave_1: entered allmulticast mode [ 1279.532525][T26973] bridge_slave_1: entered promiscuous mode [ 1279.548035][T27021] fuse: Unknown parameter '0x0000000000000005' [ 1279.648709][T27018] tipc: Enabled bearer , priority 0 [ 1279.811371][T27023] syzkaller0: entered promiscuous mode [ 1279.836769][T27023] syzkaller0: entered allmulticast mode [ 1279.981921][T26973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1280.016629][T27035] tipc: Resetting bearer [ 1280.199036][T26973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1280.341263][T27010] tipc: Resetting bearer [ 1280.401312][T27010] tipc: Disabling bearer [ 1280.435206][ T5102] Bluetooth: hci2: command tx timeout [ 1281.162680][T27053] program syz.5.6679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1281.682453][T26973] team0: Port device team_slave_0 added [ 1281.693498][T26973] team0: Port device team_slave_1 added [ 1281.776508][T26973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1281.813939][T26973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1281.899170][T26973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1281.923479][T27060] fuse: Unknown parameter '0x0000000000000005' [ 1281.987859][T26973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1282.005220][T26973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1282.031887][T26973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1282.125662][ T5856] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1282.316381][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 1282.316429][ T28] audit: type=1326 audit(1760087573.651:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27071 comm="syz.2.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e858eec9 code=0x7ffc0000 [ 1282.345397][ T5856] usb 6-1: Using ep0 maxpacket: 16 [ 1282.525135][ T5102] Bluetooth: hci2: command tx timeout [ 1282.589086][ T28] audit: type=1326 audit(1760087573.651:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27071 comm="syz.2.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e858eec9 code=0x7ffc0000 [ 1282.797892][ T28] audit: type=1326 audit(1760087573.651:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27071 comm="syz.2.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f17e858eec9 code=0x7ffc0000 [ 1283.015036][T26973] hsr_slave_0: entered promiscuous mode [ 1283.072729][ T28] audit: type=1326 audit(1760087573.651:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27071 comm="syz.2.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e858eec9 code=0x7ffc0000 [ 1283.143569][ T28] audit: type=1326 audit(1760087573.651:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27071 comm="syz.2.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f17e858eec9 code=0x7ffc0000 [ 1283.167489][T26973] hsr_slave_1: entered promiscuous mode [ 1283.168474][ T28] audit: type=1326 audit(1760087573.661:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27071 comm="syz.2.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e858eec9 code=0x7ffc0000 [ 1283.196483][ T5856] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1283.204717][ T5856] usb 6-1: config 0 has no interface number 0 [ 1283.210955][T26973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1283.210977][T26973] Cannot create hsr debugfs directory [ 1283.224143][ T5856] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1283.231419][ T28] audit: type=1326 audit(1760087573.691:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27071 comm="syz.2.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e858eec9 code=0x7ffc0000 [ 1283.255043][ T28] audit: type=1326 audit(1760087573.691:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27071 comm="syz.2.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f17e858eec9 code=0x7ffc0000 [ 1283.279256][ T5856] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1283.301531][ T5856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.315522][ T5856] usb 6-1: Product: syz [ 1283.325302][ T5856] usb 6-1: Manufacturer: syz [ 1283.330014][ T5856] usb 6-1: SerialNumber: syz [ 1283.335386][ T28] audit: type=1326 audit(1760087573.701:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27071 comm="syz.2.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e858eec9 code=0x7ffc0000 [ 1283.402789][ T5856] usb 6-1: config 0 descriptor?? [ 1283.419218][ T5856] CoreChips: probe of 6-1:0.41 failed with error -22 [ 1283.443839][ T28] audit: type=1326 audit(1760087573.701:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27071 comm="syz.2.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e858eec9 code=0x7ffc0000 [ 1283.498413][ T42] hsr_slave_0: left promiscuous mode [ 1283.513823][ T42] hsr_slave_1: left promiscuous mode [ 1283.524130][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1283.535697][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1283.543956][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1283.553906][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1283.582264][ T42] bridge_slave_1: left allmulticast mode [ 1283.592983][ T42] bridge_slave_1: left promiscuous mode [ 1283.603492][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.628450][ T42] bridge_slave_0: left allmulticast mode [ 1283.634345][ T42] bridge_slave_0: left promiscuous mode [ 1283.651409][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.732997][ T42] bond_slave_0: left promiscuous mode [ 1283.739117][ T42] bond_slave_1: left promiscuous mode [ 1283.754001][ T42] veth1_macvtap: left promiscuous mode [ 1283.759882][ T42] veth0_macvtap: left promiscuous mode [ 1283.766458][ T42] veth1_vlan: left promiscuous mode [ 1283.771945][ T42] veth0_vlan: left promiscuous mode [ 1283.950381][ T42] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 1283.960262][ T42] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 1284.188729][ T42] bond1 (unregistering): Released all slaves [ 1284.597020][ T5102] Bluetooth: hci2: command tx timeout [ 1284.909863][ T9] usb 6-1: USB disconnect, device number 52 [ 1285.489818][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1285.552112][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1285.608986][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1285.670176][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1286.124339][T27113] fuse: Unknown parameter '0x0000000000000005' [ 1286.206676][T27115] loop6: detected capacity change from 0 to 16 [ 1286.225745][T27115] erofs: (device loop6): mounted with root inode @ nid 36. [ 1286.356983][T27116] erofs: (device loop6): z_erofs_fill_inode_lazy: unknown HEAD1 format 5 for nid 36, please upgrade kernel [ 1286.393652][T27116] erofs: (device loop6): z_erofs_fill_inode_lazy: unknown HEAD1 format 5 for nid 36, please upgrade kernel [ 1286.419310][T27116] erofs: (device loop6): z_erofs_read_folio: read error -95 @ 0 of nid 36 [ 1286.429831][T27116] erofs: (device loop6): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1286.574973][T27111] loop5: detected capacity change from 0 to 40427 [ 1286.595960][T27111] F2FS-fs (loop5): invalid crc value [ 1286.653737][T27111] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1286.788854][T27111] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1287.024761][T22092] syz-executor: attempt to access beyond end of device [ 1287.024761][T22092] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1287.045594][T22092] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1287.094942][ T5102] Bluetooth: hci2: command tx timeout [ 1287.218776][ T42] bond0 (unregistering): Released all slaves [ 1287.625546][T27088] tipc: Enabling of bearer rejected, failed to enable media [ 1288.079209][T27134] loop6: detected capacity change from 0 to 40427 [ 1288.124457][T27134] F2FS-fs (loop6): invalid crc value [ 1288.143285][T27134] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1288.170800][T27134] F2FS-fs (loop6): Start checkpoint disabled! [ 1288.180985][T27134] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1289.022057][T27143] fuse: Unknown parameter '0x0000000000000005' [ 1289.083150][T26973] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1289.246314][T26973] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1289.399812][T26973] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1289.452673][T26973] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1289.893335][T26973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.006241][T26973] 8021q: adding VLAN 0 to HW filter on device team0 [ 1290.073374][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.080541][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1290.188647][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.195977][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1290.739221][T27182] tipc: Enabled bearer , priority 0 [ 1290.829384][T27184] syzkaller0: entered promiscuous mode [ 1290.850612][T27184] syzkaller0: entered allmulticast mode [ 1290.989341][T27184] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1291.016025][T27182] tipc: Resetting bearer [ 1291.065007][T27181] tipc: Resetting bearer [ 1291.954242][T27181] tipc: Disabling bearer [ 1293.059855][T26973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1293.428129][T27202] fuse: Unknown parameter 'fd0x0000000000000005' [ 1295.432810][T26973] veth0_vlan: entered promiscuous mode [ 1295.481447][T26973] veth1_vlan: entered promiscuous mode [ 1295.805805][T27241] tipc: Enabled bearer , priority 0 [ 1295.953234][T27235] syzkaller0: entered promiscuous mode [ 1296.017493][T27235] syzkaller0: entered allmulticast mode [ 1296.315297][T27244] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1296.404226][T27235] tipc: Resetting bearer [ 1296.426481][T27247] fuse: Unknown parameter 'fd0x0000000000000005' [ 1296.433072][T27234] tipc: Resetting bearer [ 1296.500968][T27234] tipc: Disabling bearer [ 1296.637078][T26973] veth0_macvtap: entered promiscuous mode [ 1296.937765][T26973] veth1_macvtap: entered promiscuous mode [ 1297.115277][T20602] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1297.152594][T26973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.349748][T27256] loop6: detected capacity change from 0 to 40427 [ 1297.364829][T26973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.378011][T26973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.394383][T27256] F2FS-fs (loop6): invalid crc value [ 1297.404414][T26973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.419993][T26973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.441641][T27256] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1297.468195][T20602] usb 3-1: Using ep0 maxpacket: 16 [ 1297.474011][T27256] F2FS-fs (loop6): Start checkpoint disabled! [ 1297.511678][T26973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.526261][T20602] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1297.537507][T27256] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1297.557883][T20602] usb 3-1: config 0 has no interface number 0 [ 1297.564024][T20602] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1297.572821][T26973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1297.652362][T20602] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1297.681744][T20602] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.704617][T20602] usb 3-1: Product: syz [ 1297.918192][T20602] usb 3-1: Manufacturer: syz [ 1297.929226][T20602] usb 3-1: SerialNumber: syz [ 1297.967356][T26973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.172836][T20602] usb 3-1: config 0 descriptor?? [ 1298.195596][T26973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.247527][T20602] CoreChips: probe of 3-1:0.41 failed with error -22 [ 1298.281824][T26973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.292417][T26973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.302972][T26973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.313504][T26973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.325643][T26973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1298.440332][T26973] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.449438][T26973] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.459201][T26973] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.469074][T26973] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.162515][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.204975][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.354354][T26422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.402329][T26422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.879140][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.925322][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.439672][T27268] usb 3-1: USB disconnect, device number 104 [ 1303.140918][T27316] input: syz1 as /devices/virtual/input/input61 [ 1304.170304][T27325] tipc: Enabled bearer , priority 0 [ 1304.180007][T27325] syzkaller0: entered promiscuous mode [ 1304.186327][T27325] syzkaller0: entered allmulticast mode [ 1304.206919][T27325] tipc: Resetting bearer [ 1304.225040][T27323] tipc: Resetting bearer [ 1304.290673][T27323] tipc: Disabling bearer [ 1304.535201][T20602] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1304.745168][T20602] usb 9-1: Using ep0 maxpacket: 16 [ 1304.944958][T27345] loop6: detected capacity change from 0 to 40427 [ 1304.980705][T27345] F2FS-fs (loop6): invalid crc value [ 1304.988789][T27345] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1305.026934][T27347] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6741'. [ 1305.046791][T20602] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 1305.047444][T27345] F2FS-fs (loop6): Start checkpoint disabled! [ 1305.067579][T27347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1305.081167][T27347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1305.088788][T27345] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1305.101762][T20602] usb 9-1: config 0 has no interface number 0 [ 1305.171605][T27347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1305.195573][T20602] usb 9-1: config 0 interface 41 has no altsetting 0 [ 1305.208298][T27352] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6742'. [ 1305.219478][T27347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1305.236145][T20602] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1305.264991][T20602] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.295769][T20602] usb 9-1: Product: syz [ 1305.313792][T20602] usb 9-1: Manufacturer: syz [ 1305.338181][T20602] usb 9-1: SerialNumber: syz [ 1305.357633][T20602] usb 9-1: config 0 descriptor?? [ 1305.395937][T20602] CoreChips: probe of 9-1:0.41 failed with error -22 [ 1305.435873][ T11] kworker/u4:0: attempt to access beyond end of device [ 1305.435873][ T11] loop6: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 1305.557783][ T42] kworker/u4:2: attempt to access beyond end of device [ 1305.557783][ T42] loop6: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 1305.601691][ T42] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1305.653361][ T42] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1305.687345][ T42] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1305.709711][ T42] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1306.291235][T27368] tipc: Enabled bearer , priority 0 [ 1306.320580][T27368] syzkaller0: entered promiscuous mode [ 1306.342905][T27368] syzkaller0: entered allmulticast mode [ 1306.395999][T27368] tipc: Resetting bearer [ 1306.424182][T27367] tipc: Resetting bearer [ 1306.549791][T27367] tipc: Disabling bearer [ 1306.827671][T27380] loop5: detected capacity change from 0 to 1024 [ 1307.653922][T27380] ext4: Unknown parameter 'fsmagic' [ 1307.901124][ T1185] usb 9-1: USB disconnect, device number 2 [ 1311.176992][T27396] loop8: detected capacity change from 0 to 40427 [ 1311.226184][T27396] F2FS-fs (loop8): invalid crc value [ 1311.235942][T27396] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1311.269240][T27396] F2FS-fs (loop8): Start checkpoint disabled! [ 1311.310539][T27396] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 1311.683051][ T2917] kworker/u4:8: attempt to access beyond end of device [ 1311.683051][ T2917] loop8: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 1311.740543][ T11] kworker/u4:0: attempt to access beyond end of device [ 1311.740543][ T11] loop8: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 1311.788930][ T11] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1311.815435][ T11] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1311.822352][ T11] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1311.914464][ T11] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1320.057181][T27473] Bluetooth: MGMT ver 1.22 [ 1321.226533][T27484] loop8: detected capacity change from 0 to 40427 [ 1321.265604][T27484] F2FS-fs (loop8): invalid crc value [ 1321.306639][T27484] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1321.346829][T27484] F2FS-fs (loop8): Start checkpoint disabled! [ 1321.417738][T27484] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 1322.911546][T26421] kworker/u4:11: attempt to access beyond end of device [ 1322.911546][T26421] loop8: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 1322.928103][T26421] kworker/u4:11: attempt to access beyond end of device [ 1322.928103][T26421] loop8: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 1322.945304][T26421] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1322.952657][T26421] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1322.959997][T26421] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1322.969893][T26421] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1325.390649][T27516] loop8: detected capacity change from 0 to 512 [ 1325.606614][T27516] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1325.625459][T27516] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1325.714611][T27503] loop5: detected capacity change from 0 to 40427 [ 1325.793925][T27503] F2FS-fs (loop5): invalid crc value [ 1325.838413][T27503] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1325.897829][T26973] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1326.671740][T27503] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1328.118047][ T5102] Bluetooth: hci2: command 0x0405 tx timeout [ 1328.607214][T27561] atomic_op ffff88802c196198 conn xmit_atomic 0000000000000000 [ 1329.317775][T27578] input: syz1 as /devices/virtual/input/input62 [ 1329.413926][T27578] loop5: detected capacity change from 0 to 512 [ 1330.266111][T27578] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.6782: casefold flag without casefold feature [ 1330.286130][T27578] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.6782: couldn't read orphan inode 15 (err -117) [ 1330.300241][T27578] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1330.567112][T22092] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1332.322467][T27593] tipc: Enabled bearer , priority 0 [ 1332.346620][T27593] syzkaller0: entered promiscuous mode [ 1332.362331][T27593] syzkaller0: entered allmulticast mode [ 1332.371976][T27599] loop8: detected capacity change from 0 to 64 [ 1332.418997][T27593] tipc: Resetting bearer [ 1332.447718][T27590] tipc: Resetting bearer [ 1332.631625][T27590] tipc: Disabling bearer [ 1332.965325][ T5856] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1333.205803][ T5856] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 1333.215217][ T5856] usb 7-1: config 0 has no interface number 0 [ 1333.221954][ T5856] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1333.290356][ T5856] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1333.299533][ T5856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.307763][ T5856] usb 7-1: Product: syz [ 1333.312084][ T5856] usb 7-1: Manufacturer: syz [ 1333.316823][ T5856] usb 7-1: SerialNumber: syz [ 1333.339029][ T5856] usb 7-1: config 0 descriptor?? [ 1333.409697][ T5856] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 1334.181389][T20602] usb 7-1: USB disconnect, device number 9 [ 1334.190826][T20602] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 1335.417276][T27627] loop5: detected capacity change from 0 to 1024 [ 1335.431276][T27627] EXT4-fs: Ignoring removed nobh option [ 1335.473838][T27627] EXT4-fs: Ignoring removed bh option [ 1335.501396][T27627] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1336.113776][T27627] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1336.284156][T27647] atomic_op ffff88802ecc9198 conn xmit_atomic 0000000000000000 [ 1336.343905][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 1336.343936][ T28] audit: type=1804 audit(1760087627.681:678): pid=27654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.6796" name="/newroot/320/file2/bus" dev="loop5" ino=18 res=1 errno=0 [ 1336.447746][ T28] audit: type=1804 audit(1760087627.781:679): pid=27627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.6796" name="/newroot/320/file2/bus" dev="loop5" ino=18 res=1 errno=0 [ 1336.614408][T27661] EXT4-fs (loop5): shut down requested (0) [ 1336.863774][T27663] loop8: detected capacity change from 0 to 1024 [ 1336.886599][T22092] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1336.908908][T27663] ext4: Unknown parameter 'fsmagic' [ 1339.259109][ T9] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1339.437511][T27677] loop5: detected capacity change from 0 to 32768 [ 1339.461989][ T9] usb 3-1: device descriptor read/64, error -71 [ 1339.517702][T27677] syz.5.6804: attempt to access beyond end of device [ 1339.517702][T27677] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1339.528828][T27684] loop8: detected capacity change from 0 to 16 [ 1339.533361][T27677] lbmIODone: I/O error in JFS log [ 1339.564939][T27684] erofs: (device loop8): mounted with root inode @ nid 36. [ 1339.602918][T27677] *** Log Format Error ! *** [ 1339.630431][T27677] lmLogInit: exit(-22) [ 1339.647544][T27677] lmLogOpen: exit(-22) [ 1339.729065][T26973] erofs: (device loop8): erofs_fill_dentries: bogus dirent @ nid 46 [ 1339.745571][ T9] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1339.757573][T27677] ERROR: (device loop5): txBegin: read-only filesystem [ 1339.757573][T27677] [ 1339.761141][T26973] erofs: (device loop8): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 1339.787069][T27677] ERROR: (device loop5): remounting filesystem as read-only [ 1339.794540][T27677] jfs_dirty_inode called on read-only volume [ 1339.795337][T26973] erofs: (device loop8): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 1339.809988][T27677] Is remount racy? [ 1339.810136][T27677] jfs_dirty_inode called on read-only volume [ 1339.810147][T27677] Is remount racy? [ 1339.810161][T27677] INFO: trying to register non-static key. [ 1339.810168][T27677] The code is fine but needs lockdep annotation, or maybe [ 1339.810175][T27677] you didn't initialize this object before use? [ 1339.810181][T27677] turning off the locking correctness validator. [ 1339.810190][T27677] CPU: 0 PID: 27677 Comm: syz.5.6804 Not tainted syzkaller #0 [ 1339.810211][T27677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1339.810222][T27677] Call Trace: [ 1339.810230][T27677] [ 1339.810238][T27677] dump_stack_lvl+0x16c/0x230 [ 1339.810269][T27677] ? show_regs_print_info+0x20/0x20 [ 1339.810292][T27677] ? load_image+0x3b0/0x3b0 [ 1339.810312][T27677] ? __is_module_percpu_address+0x219/0x380 [ 1339.810339][T27677] ? __is_kernel_percpu_address+0x133/0x270 [ 1339.810361][T27677] assign_lock_key+0x1f9/0x230 [ 1339.904862][T27677] ? SOFTIRQ_verbose+0x10/0x10 [ 1339.909722][T27677] ? space_used+0x17d/0x4f0 [ 1339.914321][T27677] register_lock_class+0x212/0x890 [ 1339.919440][T27677] ? __lock_acquire+0x1334/0x7c80 [ 1339.924464][T27677] ? is_dynamic_key+0x260/0x260 [ 1339.929308][T27677] ? vsnprintf+0x7b2/0x1a40 [ 1339.933804][T27677] __lock_acquire+0x17a/0x7c80 [ 1339.938657][T27677] ? __lock_acquire+0x7c80/0x7c80 [ 1339.943680][T27677] ? __rwlock_init+0x150/0x150 [ 1339.948483][T27677] ? verify_lock_unused+0x140/0x140 [ 1339.953725][T27677] ? mark_lock+0x94/0x320 [ 1339.958234][T27677] ? __lock_acquire+0x1334/0x7c80 [ 1339.963253][T27677] lock_acquire+0x197/0x410 [ 1339.967744][T27677] ? __wake_up+0xf8/0x190 [ 1339.972294][T27677] ? vprintk_emit+0x371/0x600 [ 1339.976961][T27677] ? preempt_count_add+0x91/0x1a0 [ 1339.982151][T27677] ? read_lock_is_recursive+0x20/0x20 [ 1339.987521][T27677] ? vprintk_emit+0x521/0x600 [ 1339.992186][T27677] ? printk_sprint+0x460/0x460 [ 1339.996940][T27677] _raw_spin_lock_irqsave+0xa8/0xf0 [ 1340.002134][T27677] ? __wake_up+0xf8/0x190 [ 1340.006451][T27677] ? _raw_spin_lock+0x40/0x40 [ 1340.011121][T27677] __wake_up+0xf8/0x190 [ 1340.015269][T27677] ? __wake_up_bit+0x1e0/0x1e0 [ 1340.020017][T27677] ? do_raw_spin_lock+0x121/0x2c0 [ 1340.025031][T27677] ? __rwlock_init+0x150/0x150 [ 1340.029787][T27677] txEnd+0x8a/0x520 [ 1340.033593][T27677] jfs_truncate_nolock+0x1e5/0x2c0 [ 1340.038717][T27677] ? jfs_direct_IO+0x220/0x220 [ 1340.043469][T27677] ? block_truncate_page+0x710/0x9f0 [ 1340.048773][T27677] ? jfs_dirty_inode+0x240/0x240 [ 1340.053723][T27677] jfs_truncate+0xce/0x140 [ 1340.058145][T27677] jfs_setattr+0x4f8/0x750 [ 1340.062558][T27677] ? jfs_fsync+0x1b0/0x1b0 [ 1340.066969][T27677] notify_change+0xb0d/0xe10 [ 1340.071711][T27677] do_truncate+0x19b/0x220 [ 1340.076121][T27677] ? put_page_bootmem+0x2c0/0x2c0 [ 1340.081137][T27677] ? bpf_lsm_path_truncate+0x9/0x10 [ 1340.086331][T27677] vfs_truncate+0x266/0x300 [ 1340.090821][T27677] do_sys_truncate+0xe0/0x1a0 [ 1340.095484][T27677] ? break_lease+0xd0/0xd0 [ 1340.099884][T27677] ? lockdep_hardirqs_on+0x98/0x150 [ 1340.105084][T27677] do_syscall_64+0x55/0xb0 [ 1340.109494][T27677] ? clear_bhb_loop+0x40/0x90 [ 1340.114160][T27677] ? clear_bhb_loop+0x40/0x90 [ 1340.118827][T27677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1340.124711][T27677] RIP: 0033:0x7f68a478eec9 [ 1340.129115][T27677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1340.148709][T27677] RSP: 002b:00007f68a5628038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 1340.157202][T27677] RAX: ffffffffffffffda RBX: 00007f68a49e5fa0 RCX: 00007f68a478eec9 [ 1340.165175][T27677] RDX: 0000000000000000 RSI: 0000000000040006 RDI: 0000200000000040 [ 1340.173135][T27677] RBP: 00007f68a4811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1340.181093][T27677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1340.189052][T27677] R13: 00007f68a49e6038 R14: 00007f68a49e5fa0 R15: 00007fffa51604b8 [ 1340.197030][T27677] [ 1340.200096][T27677] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 1340.211969][T27677] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1340.220540][T27677] CPU: 0 PID: 27677 Comm: syz.5.6804 Not tainted syzkaller #0 [ 1340.227984][T27677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1340.238111][T27677] RIP: 0010:__wake_up_common+0x23c/0x4e0 [ 1340.243734][T27677] Code: 24 00 00 00 00 49 83 c5 40 4d 39 ef 0f 84 ed 01 00 00 45 31 f6 eb 09 4d 39 ef 0f 84 df 01 00 00 4c 89 fd 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 48 89 ef e8 f6 81 78 00 48 ba 00 00 00 00 00 fc [ 1340.263328][T27677] RSP: 0018:ffffc900053879b8 EFLAGS: 00010046 [ 1340.269383][T27677] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1340.277338][T27677] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffffc90002619030 [ 1340.285298][T27677] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffc90005387a60 [ 1340.293255][T27677] R10: dffffc0000000000 R11: fffff52000a70f20 R12: ffffc90002619030 [ 1340.301210][T27677] R13: ffffc90002619070 R14: 0000000000000000 R15: 0000000000000000 [ 1340.309166][T27677] FS: 00007f68a56286c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1340.318087][T27677] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1340.324684][T27677] CR2: 00005607ff771168 CR3: 0000000063571000 CR4: 00000000003506f0 [ 1340.332648][T27677] Call Trace: [ 1340.335945][T27677] [ 1340.338865][T27677] __wake_up+0x112/0x190 [ 1340.343106][T27677] ? __wake_up_bit+0x1e0/0x1e0 [ 1340.347867][T27677] ? do_raw_spin_lock+0x121/0x2c0 [ 1340.352888][T27677] ? __rwlock_init+0x150/0x150 [ 1340.357653][T27677] txEnd+0x8a/0x520 [ 1340.361450][T27677] jfs_truncate_nolock+0x1e5/0x2c0 [ 1340.366638][T27677] ? jfs_direct_IO+0x220/0x220 [ 1340.371427][T27677] ? block_truncate_page+0x710/0x9f0 [ 1340.376732][T27677] ? jfs_dirty_inode+0x240/0x240 [ 1340.381659][T27677] jfs_truncate+0xce/0x140 [ 1340.386066][T27677] jfs_setattr+0x4f8/0x750 [ 1340.390472][T27677] ? jfs_fsync+0x1b0/0x1b0 [ 1340.394876][T27677] notify_change+0xb0d/0xe10 [ 1340.399466][T27677] do_truncate+0x19b/0x220 [ 1340.403870][T27677] ? put_page_bootmem+0x2c0/0x2c0 [ 1340.408886][T27677] ? bpf_lsm_path_truncate+0x9/0x10 [ 1340.414083][T27677] vfs_truncate+0x266/0x300 [ 1340.418580][T27677] do_sys_truncate+0xe0/0x1a0 [ 1340.423244][T27677] ? break_lease+0xd0/0xd0 [ 1340.427657][T27677] ? lockdep_hardirqs_on+0x98/0x150 [ 1340.432852][T27677] do_syscall_64+0x55/0xb0 [ 1340.437262][T27677] ? clear_bhb_loop+0x40/0x90 [ 1340.442011][T27677] ? clear_bhb_loop+0x40/0x90 [ 1340.446676][T27677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1340.452556][T27677] RIP: 0033:0x7f68a478eec9 [ 1340.456958][T27677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1340.476566][T27677] RSP: 002b:00007f68a5628038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 1340.484967][T27677] RAX: ffffffffffffffda RBX: 00007f68a49e5fa0 RCX: 00007f68a478eec9 [ 1340.492931][T27677] RDX: 0000000000000000 RSI: 0000000000040006 RDI: 0000200000000040 [ 1340.500902][T27677] RBP: 00007f68a4811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1340.508950][T27677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1340.516909][T27677] R13: 00007f68a49e6038 R14: 00007f68a49e5fa0 R15: 00007fffa51604b8 [ 1340.524877][T27677] [ 1340.527902][T27677] Modules linked in: [ 1340.531789][T27677] ---[ end trace 0000000000000000 ]--- [ 1340.537226][T27677] RIP: 0010:__wake_up_common+0x23c/0x4e0 [ 1340.542852][T27677] Code: 24 00 00 00 00 49 83 c5 40 4d 39 ef 0f 84 ed 01 00 00 45 31 f6 eb 09 4d 39 ef 0f 84 df 01 00 00 4c 89 fd 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 48 89 ef e8 f6 81 78 00 48 ba 00 00 00 00 00 fc [ 1340.562454][T27677] RSP: 0018:ffffc900053879b8 EFLAGS: 00010046 [ 1340.568509][T27677] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1340.576473][T27677] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffffc90002619030 [ 1340.584430][T27677] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffc90005387a60 [ 1340.592387][T27677] R10: dffffc0000000000 R11: fffff52000a70f20 R12: ffffc90002619030 [ 1340.600353][T27677] R13: ffffc90002619070 R14: 0000000000000000 R15: 0000000000000000 [ 1340.608312][T27677] FS: 00007f68a56286c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1340.617230][T27677] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1340.623799][T27677] CR2: 00005607ff771168 CR3: 0000000063571000 CR4: 00000000003506f0 [ 1340.631764][T27677] Kernel panic - not syncing: Fatal exception [ 1340.638036][T27677] Kernel Offset: disabled [ 1340.642340][T27677] Rebooting in 86400 seconds..