last executing test programs: 4m14.219137785s ago: executing program 32 (id=257): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) ioperm(0x7f, 0x5, 0x84) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(0xffffffffffffffff) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000000)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 4m0.356538787s ago: executing program 33 (id=250): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x50) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=@updsa={0x104, 0x1a, 0xa21, 0x0, 0x0, {{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6c}, {@in, 0x0, 0x3c}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, 0x0, 0xffffffff, 0x2, 0x1, 0x0, 0x39}, [@coaddr={0x14, 0xe, @in6=@local}]}, 0x104}}, 0x810) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xccefff7f}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x64, r4, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x64}, 0x8, 0x3000000000002, 0x0, 0x885}, 0x24000090) 3m51.043608468s ago: executing program 2 (id=403): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r2, 0x3, 0x0, @val=@iter={0x0}}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 3m50.544798418s ago: executing program 34 (id=403): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r2, 0x3, 0x0, @val=@iter={0x0}}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 3m47.168844636s ago: executing program 35 (id=422): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) getpid() r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, 0x0) 3m26.991415756s ago: executing program 36 (id=510): syz_clone3(0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000080)=""/140, 0x8c}], 0x1) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000000)) 3m10.856484679s ago: executing program 37 (id=589): r0 = memfd_create(&(0x7f0000000540)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\x00\x00\x00', 0x1) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(0x0, r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x6, 0x21, 0x0, 0x20003f00) 3m6.828897515s ago: executing program 38 (id=606): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file2', [{0x20, ','}, {0x20, 'ex\x00\x00\x00I\xc0\x03\xf1\x98\xccn\xe1\x12M\xf1r]B\xdc\xca\x90I\x9f\xa6\x1f\x11F\xfd\xbc\xd5\xa7\xd2\xd6w\x8c\x88\xbfy\xbb*\xa6\xfd\x8cc\xcb\xda\xc1\xde\xaf\x0e\xd8f=7j\v\xe2\x98\x9a;\x8b\xed\xddr\x8ca\\|J6\xde\x17\x01\t\xeb\x7fK\x8d\xcfG\\Hx\x12G'}, {0x20, '\x00'}, {0x20, 'ext4\x00'}, {0x20, '\xffb'}], 0xa, "98ffe8aad4600ffdee7f7b202931869cc0ebacd18510f0008697cfc47a9bb2364d0e71c2"}, 0x93) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bda15a08769bcd5107053eaafa98740f8cb9694c01f00"/48, 0x30) write$qrtrtun(r0, &(0x7f0000000480)="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", 0x10c) write$qrtrtun(r0, &(0x7f00000016c0)="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", 0x28f) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 2m57.003526778s ago: executing program 39 (id=584): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) 2m49.387517579s ago: executing program 2 (id=607): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2m49.050418302s ago: executing program 2 (id=665): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', './file2', [{0x20, ','}, {0x20, 'ex\x00\x00\x00I\xc0\x03\xf1\x98\xccn\xe1\x12M\xf1r]B\xdc\xca\x90I\x9f\xa6\x1f\x11F\xfd\xbc\xd5\xa7\xd2\xd6w\x8c\x88\xbfy\xbb*\xa6\xfd\x8cc\xcb\xda\xc1\xde\xaf\x0e\xd8f=7j\v\xe2\x98\x9a;\x8b\xed\xddr\x8ca\\|J6\xde\x17\x01\t\xeb\x7fK\x8d\xcfG\\Hx\x12G'}, {0x20, '\x00'}, {0x20, 'eXt4\x00Lk\x00\xfc\xa3T\xdeYg\xc6\x83\xac\xb7=\t\xafB\x101\xdf\x84\'\xc9y\xf9J\t\x00\x00\x00\x00\x00\x00\x00Z\xfc\xf1\x86\xa7\xda\x17>\x13\xe4#IQ\xb5\'(\x1e.\xdd\xf3\xe8(\x86\x1d\x9e\xe7\x04\xc2uk#h\x81\x90\x92\xe5\xed5\x8b\xba9\x87\x1f\x83fO\xea\xe4#j\t\xd0\xb2\xa4\xbc\xb1\x9a\xf9\xda\"\xb7\xdc\a\xeb9\xe1]b\r\xbd/\x149\x86\x87\xfd\x88\x17\xc39\xe6\xa4\xd9\xf2-2\x80e\xb1\xa6\a+\xb1_\xf9jXK\x01\xa5X\x14t\xf4\xe3\x15\xa0[0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000000000000008001e000100"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x2000000, {0x0, 0x0, 0x0, r4, 0x192}}, 0x20}}, 0x0) 2m32.631357733s ago: executing program 41 (id=673): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="ae1d4b178f10911a2dab191193b809cf9294262aa07902937575ee00b79dde347c0e6b2970ac6c8aa4d76a09fbd96643ee0877b3d0badfdcef5d45ff3c02cbf632464c24039086f74548ccae132a1bafbfef8cc1860c4aad820da4977e44f7b489cfccac766c51391bfcdb9f5510c7770582516cb7d41772001624e5905bba54f08547a4485b5a2a98b5f5c690d0a825161e3d7e4b39365b43b2701c68b167bbdce33c013a9b89c9a7b823ec5ecd432f12dc063ddaa7431a3385e29d0c7ac17389308b450e", 0xc5}], 0x1}}], 0x1, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2m19.664598849s ago: executing program 5 (id=818): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000004c0)='./file1\x00', 0x1804810, &(0x7f0000000180)=ANY=[], 0xfe, 0x669, &(0x7f0000000640)="$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") r1 = open(&(0x7f0000000080)='./file1\x00', 0x20042, 0x144) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') read$msr(r1, 0x0, 0x0) 2m17.734579485s ago: executing program 5 (id=826): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000880)={0x0, 0x0, 0x6, "4f9868080000"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2m14.036278824s ago: executing program 5 (id=850): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) 2m13.513625684s ago: executing program 5 (id=852): syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000005900)='./file0\x00', 0x880443, &(0x7f0000000340)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6aff3870115c76a5afffff7f000000005e7865b6616374733d6669785f736166652c6e6f636f775f656e61626c65642c6673636f6e746578743d756e636f6e66696e65645f752c000000000000000000000000000000007d5534f389e4b87c542fbc8b934c5b1a78c5ed"], 0x1, 0x58e0, &(0x7f0000005940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000400)='mqueue\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(0x0, 0x0, 0x0) mknodat$loop(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2m10.98258561s ago: executing program 5 (id=857): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m10.521604322s ago: executing program 5 (id=859): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000bc0), 0x20000000}, 0x20) 2m2.647014391s ago: executing program 6 (id=922): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000380)={0xa}) 2m2.094884212s ago: executing program 6 (id=927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x9) 2m1.013156047s ago: executing program 6 (id=933): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) capget(&(0x7f0000002080)={0x20071026, r0}, &(0x7f0000002100)={0x0, 0x0, 0x40, 0x3, 0x400, 0xfffffff8}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) 2m0.075322986s ago: executing program 6 (id=940): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file2\x00', 0x404, &(0x7f0000000740)={[{@bh}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@minixdf}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1db) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 1m59.784168115s ago: executing program 3 (id=941): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x3}}, {@dfltuid}]}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f00000023c0)={0x2020}, 0x2020) 1m59.668227018s ago: executing program 6 (id=942): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) sendto$inet6(r0, &(0x7f0000003380)="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", 0x1000, 0x22000040, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000bc0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000c00)=0x40) 1m58.915893852s ago: executing program 3 (id=943): prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$loop(0x0, 0x5, 0x80000) syz_open_dev$MSR(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x5, 0x0, 0x11, 0x19, 0x280, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000000000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700001800000000472471ff550c0010fdfd07f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) r1 = socket(0x1d, 0x3, 0x1) getsockopt$nfc_llcp(r1, 0x65, 0x8, 0x0, 0x20001008) 1m55.264274733s ago: executing program 42 (id=859): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000bc0), 0x20000000}, 0x20) 1m55.253068819s ago: executing program 3 (id=950): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 1m54.994183693s ago: executing program 6 (id=954): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd2, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00'}, 0x30) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc8}]}, 0x2c}}, 0x0) 1m54.595622389s ago: executing program 43 (id=954): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd2, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00'}, 0x30) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc8}]}, 0x2c}}, 0x0) 1m54.528853434s ago: executing program 3 (id=957): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2080084c, &(0x7f0000000a80)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,umask=00000000000000000007777,dmask=00000000000000000000152,iocharset=default,gid=', @ANYRESHEX, @ANYBLOB="247569643aad29fe068a7a1a24eb0739b974df08a0550dfe5fb0443151e2bfcb3ab4283ba775", @ANYRESHEX=0xee00, @ANYRES8], 0x81, 0x14f5, &(0x7f0000001580)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1edc51, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2187017, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1101088, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m54.027450428s ago: executing program 3 (id=960): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 1m53.199102253s ago: executing program 3 (id=963): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/76, 0x4c) 1m52.937206957s ago: executing program 44 (id=963): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/76, 0x4c) 6.252975737s ago: executing program 7 (id=1330): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000030085000000a8000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$udf(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x14, &(0x7f0000002440)=ANY=[], 0xff, 0xc19, &(0x7f0000002140)="$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") creat(&(0x7f0000000100)='./file2\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2f}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="5e785b720000000000020800000000df5700000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/12], 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73, 0x2}, 0x70) 5.845213488s ago: executing program 7 (id=1336): socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$video(&(0x7f0000000400), 0x9, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) pselect6(0x40, &(0x7f0000000180)={0xfc, 0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x100000003}, 0x0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, r0, 0x0) 5.351011107s ago: executing program 7 (id=1342): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xd, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x100007, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0x1, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001440)={r3, 0x0, 0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000100)="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") 5.173913107s ago: executing program 1 (id=1347): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54c, &(0x7f0000000fc0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) truncate(0x0, 0x8835) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x82000, 0x0, 0xfe, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 4.727458135s ago: executing program 4 (id=1351): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xd344) 4.024347807s ago: executing program 9 (id=1356): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.869538645s ago: executing program 1 (id=1358): syz_mount_image$udf(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x3, 0x583, &(0x7f0000000bc0)="$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") mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000280)='./file1/file0\x00', r0, &(0x7f0000000380)='./file1\x00') syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) unlink(&(0x7f0000000440)='./file1\x00') linkat(r0, &(0x7f0000001180)='./file1\x00', r0, &(0x7f00000002c0)='./file0\x00', 0x0) link(&(0x7f0000000140)='./file0\x00', 0x0) 3.843398009s ago: executing program 9 (id=1360): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x29, 0xffffffff, 0x2000, 0x595, 0x1ff, 0x1, 0x7ff}}, 0x50) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0) copy_file_range(r2, 0x0, r1, &(0x7f00000000c0)=0x10000, 0x3df1, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) syz_mount_image$affs(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x14000, &(0x7f0000000300)=ANY=[@ANYBLOB="0097dbe11436330930e9fc66e1f12003be8391284d6670fd4afb583f313e4978679fbe8ba869b02a8de5df14918f18b1ad949d", @ANYRESHEX=0x0, @ANYBLOB=',reserved=00000000000000000007,bs=0x0000000000000200,setuid=', @ANYRESHEX=0x0, @ANYBLOB=',mufs,mode=00000000000000000000002,rootcontext=root,dont_hash,subj_user=protect,\x00'], 0x1, 0x9dc3, &(0x7f0000009ec0)="$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") pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 2.947781835s ago: executing program 4 (id=1361): ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) keyctl$session_to_parent(0x12) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 2.534233106s ago: executing program 8 (id=1365): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x2c, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xd, 0x6c}, {0x1, 0x81, 0x1}}}]}}]}]}]}}]}, 0x70}}, 0x20040054) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 2.430029302s ago: executing program 9 (id=1366): r0 = syz_io_uring_setup(0xd0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x352}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000080)=0x4, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1b) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.217319645s ago: executing program 8 (id=1367): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100100, 0x0, 0xfffffffffffffd25) 2.176916866s ago: executing program 9 (id=1368): fchdir(0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) fchdir(r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') r2 = fanotify_init(0x0, 0x40000) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x54) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r2, 0x1, 0x40001019, r3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) getdents(r1, &(0x7f0000000340)=""/183, 0xb7) 2.114078689s ago: executing program 7 (id=1369): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x52, &(0x7f00000043c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa6c"], 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 2.113396287s ago: executing program 1 (id=1370): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x207645a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.971207244s ago: executing program 8 (id=1371): r0 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44880) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 1.934026984s ago: executing program 4 (id=1372): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00') symlink(&(0x7f0000000840)='./file0\x00', &(0x7f0000000040)='./file0\x00') 1.780764277s ago: executing program 9 (id=1373): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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") syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0xfe37, 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.780365612s ago: executing program 7 (id=1374): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xa2465) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc0884123, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80}, 0x0, 0x0) 1.631420852s ago: executing program 1 (id=1375): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) syz_io_uring_setup(0x66e, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) cachestat(r0, &(0x7f0000000080)={0x100011, 0x9}, &(0x7f0000000040), 0x0) 1.610392304s ago: executing program 4 (id=1376): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) clock_getres(0x3, 0x0) socket(0x400000000010, 0x3, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000020000000900"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) 1.482016858s ago: executing program 8 (id=1377): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xeea390}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x8000000, 0x0, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa000, 0x0, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000180)='./file0/file0\x00', 0x112) r3 = socket$packet(0x11, 0x3, 0x300) dup3(r3, r0, 0x80000) 1.48168027s ago: executing program 0 (id=1378): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) pselect6(0x40, &(0x7f0000000600)={0x0, 0x10000000000000}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) 1.242766807s ago: executing program 9 (id=1379): syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/67, 0x0, 0xdddd1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000500)=""/58, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000d80)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1ff) 1.167924959s ago: executing program 0 (id=1380): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xffffffdf, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000880)={@flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2}, @fda={0x66646185, 0x4, 0x1, 0x3f}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 1.018216463s ago: executing program 8 (id=1381): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x28, 0x18, &(0x7f0000000600)={@flat=@binder={0x73622a85, 0x100f}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0xd}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1.003327138s ago: executing program 1 (id=1382): socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendto$packet(r0, 0x0, 0x0, 0x84, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0xe0, 0x6, @remote}, 0x14) 943.035636ms ago: executing program 0 (id=1383): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000000440)="7c804b0bad79f09283791dfc66982e2d3643d6d35142c1435cf63c8f714cd9a84250", 0x22}], 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 872.099533ms ago: executing program 8 (id=1384): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYBLOB="d713f745ad0cba"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x77b, &(0x7f0000000200), &(0x7f0000000040)=0x0, &(0x7f0000000700)) mq_open(&(0x7f00005a1ffb)='e\xeeQ\x92o', 0x42, 0x0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) 758.192233ms ago: executing program 7 (id=1385): getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r1 = socket$xdp(0x2c, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000}, 0x20) 757.715302ms ago: executing program 1 (id=1386): syz_mount_image$udf(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x52b, &(0x7f0000000600)="$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") r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$inet6(0xa, 0x3, 0x7) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 753.831528ms ago: executing program 0 (id=1387): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 599.3473ms ago: executing program 4 (id=1388): creat(&(0x7f0000000200)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x69) truncate(&(0x7f0000000000)='./file0\x00', 0x4) 354.327709ms ago: executing program 0 (id=1389): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file1\x00', 0x0, 0x16) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlink(&(0x7f0000000580)='./bus\x00') 171.980417ms ago: executing program 0 (id=1390): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) poll(0x0, 0x0, 0xffffffffffbffff8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 0s ago: executing program 4 (id=1391): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @private, @local}, &(0x7f0000000200)=0xc) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0\x00'}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000280)={@remote, @broadcast}, &(0x7f0000000300)=0xc) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e08007b0c"], 0xb) kernel console output (not intermixed with test programs): al. Quota mode: writeback. [ 260.270675][ T8775] loop4: detected capacity change from 0 to 32768 [ 260.340571][ T8775] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.846 (8775) [ 260.378589][ T8798] ubi1: attaching mtd0 [ 260.398484][ T8775] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 260.425701][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.432863][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.432961][ T8775] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 260.468445][ T968] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 260.479374][ T968] dvbdev: DVB: registering new adapter (Terratec H7) [ 260.486295][ T968] usb 6-1: media controller created [ 260.496939][ T8775] BTRFS info (device loop4): using free-space-tree [ 260.520968][ T7316] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.605532][ T8800] loop3: detected capacity change from 0 to 1764 [ 260.654673][ T968] usb read operation failed. (-71) [ 260.664212][ T968] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 260.684335][ T968] usb 6-1: USB disconnect, device number 7 [ 260.801181][ T29] audit: type=1800 audit(1736448833.483:118): pid=8820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.844" name="file1" dev="overlay" ino=486 res=0 errno=0 [ 260.843592][ T8493] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 260.857998][ T8823] loop1: detected capacity change from 0 to 256 [ 260.939901][ T8087] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 261.055049][ T8493] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 261.542470][ T8833] loop5: detected capacity change from 0 to 128 [ 261.581176][ T8833] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 261.605810][ T8833] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 261.702943][ T8833] fscrypt: loop5: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 13 [ 261.781061][ T8838] @: renamed from vlan0 (while UP) [ 261.812089][ T968] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 261.972007][ T968] usb 5-1: Using ep0 maxpacket: 32 [ 261.979267][ T968] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 261.995301][ T968] usb 5-1: config 0 has no interface number 0 [ 262.020699][ T7642] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 262.040466][ T968] usb 5-1: config 0 interface 184 has no altsetting 0 [ 262.060746][ T968] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 262.076567][ T968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.105348][ T968] usb 5-1: Product: syz [ 262.130503][ T968] usb 5-1: Manufacturer: syz [ 262.161280][ T968] usb 5-1: SerialNumber: syz [ 262.168960][ T968] usb 5-1: config 0 descriptor?? [ 262.213192][ T968] smsc75xx v1.0.0 [ 263.522084][ T968] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 263.671138][ T968] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 264.022852][ T8841] loop5: detected capacity change from 0 to 32768 [ 264.250648][ T8841] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 264.725187][ T29] audit: type=1326 audit(1736448837.403:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8859 comm="syz.1.872" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05a6d85d29 code=0x0 [ 264.868108][ T29] audit: type=1326 audit(1736448837.553:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8848 comm="syz.6.854" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3a3985d29 code=0x0 [ 264.871457][ T968] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 264.921430][ T968] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 264.932597][ T968] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 264.946545][ T968] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 264.972295][ T968] usb 5-1: USB disconnect, device number 5 [ 265.154936][ T8870] syz.3.860[8870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.155062][ T8870] syz.3.860[8870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.170649][ T8870] syz.3.860[8870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.241435][ T8870] tunl0: entered promiscuous mode [ 265.289215][ T8870] vlan2: entered promiscuous mode [ 265.300257][ T8870] vlan2: entered allmulticast mode [ 265.332506][ T8870] tunl0: entered allmulticast mode [ 265.365976][ T8870] tunl0: left allmulticast mode [ 265.371324][ T8870] tunl0: left promiscuous mode [ 265.862549][ T968] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 266.042356][ T968] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.067841][ T968] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 266.093697][ T8897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 266.107408][ T968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 266.142046][ T968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 266.172272][ T968] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 266.232386][ T968] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 266.251840][ T968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 266.260249][ T968] usb 5-1: Product: syz [ 266.282186][ T968] usb 5-1: Manufacturer: syz [ 266.297064][ T968] usb 5-1: SerialNumber: syz [ 266.325521][ T968] usb 5-1: config 0 descriptor?? [ 266.330683][ T8900] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 266.478689][ T8900] tap0: tun_chr_ioctl cmd 1074025677 [ 266.583623][ T968] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 266.590504][ T968] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 266.612255][ T8900] tap0: linktype set to 0 [ 266.852418][ T968] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 266.971177][ T968] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 267.218602][ T968] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 267.316959][ T968] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 267.541154][ T8912] loop3: detected capacity change from 0 to 512 [ 267.593673][ T8912] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 267.703226][ T8912] EXT4-fs (loop3): 1 truncate cleaned up [ 267.710647][ T8912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.048639][ T8920] loop9: detected capacity change from 0 to 32768 [ 268.058693][ T8920] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.883 (8920) [ 268.074479][ T8920] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 268.085074][ T8920] BTRFS info (device loop9): using sha256 (sha256-ni) checksum algorithm [ 268.094980][ T8920] BTRFS info (device loop9): using free-space-tree [ 268.121165][ T8493] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.283143][ T8935] sch_fq: defrate 0 ignored. [ 268.455880][ T968] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 268.466191][ T968] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 268.497818][ T968] usb 5-1: USB disconnect, device number 6 [ 268.689692][ T7316] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 268.983940][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.889'. [ 269.032576][ T8949] nbd6: detected capacity change from 0 to 12 [ 269.040130][ T8950] block nbd6: NBD_DISCONNECT [ 269.063509][ T8950] block nbd6: Send disconnect failed -89 [ 269.406203][ T8957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.892'. [ 269.442174][ T8957] netlink: 'syz.4.892': attribute type 25 has an invalid length. [ 269.470417][ T8957] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.479487][ T8957] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.488563][ T8957] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.497745][ T8957] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.655070][ T8946] block nbd6: Disconnected due to user request. [ 269.672215][ T8946] block nbd6: shutting down sockets [ 270.268212][ T8972] loop3: detected capacity change from 0 to 4096 [ 270.299606][ T8972] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 270.368144][ T8972] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 270.887095][ T8987] loop9: detected capacity change from 0 to 4096 [ 270.903682][ T8987] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 271.032536][ T5831] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 271.192033][ T5831] usb 2-1: Using ep0 maxpacket: 16 [ 271.213337][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.241318][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.272763][ T5831] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 271.302884][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.324390][ T5831] usb 2-1: config 0 descriptor?? [ 271.377273][ T9003] loop9: detected capacity change from 0 to 512 [ 271.430761][ T9003] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.912: corrupted in-inode xattr: e_value size too large [ 271.472448][ T9003] EXT4-fs error (device loop9): ext4_orphan_get:1392: comm syz.9.912: couldn't read orphan inode 15 (err -117) [ 271.506492][ T9003] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.740071][ T5831] elan 0003:04F3:0755.000B: failed to start in urb: -90 [ 271.758222][ T5831] elan 0003:04F3:0755.000B: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 271.875990][ T7316] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.885669][ T970] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 271.963519][ T5831] usb 2-1: USB disconnect, device number 5 [ 272.052180][ T970] usb 5-1: Using ep0 maxpacket: 32 [ 272.062764][ T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.078579][ T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.094313][ T970] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 272.111621][ T970] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 272.124776][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.136527][ T970] usb 5-1: config 0 descriptor?? [ 272.440038][ T9025] sctp: [Deprecated]: syz.6.919 (pid 9025) Use of int in max_burst socket option deprecated. [ 272.440038][ T9025] Use struct sctp_assoc_value instead [ 272.603680][ T970] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.000C/input/input14 [ 272.675180][ T970] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.000C/input/input15 [ 272.712323][ T970] kye 0003:0458:5011.000C: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 273.067159][ T9029] loop1: detected capacity change from 0 to 2048 [ 273.153476][ T9038] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 273.286143][ T9041] loop9: detected capacity change from 0 to 512 [ 273.822847][ C0] kye 0003:0458:5011.000C: usb_submit_urb(ctrl) failed: -1 [ 273.976827][ T9038] NILFS (loop1): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 273.988683][ T9038] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=2) [ 274.011379][ T9038] Remounting filesystem read-only [ 274.023240][ T7900] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 274.282075][ T9057] sctp: [Deprecated]: syz.1.929 (pid 9057) Use of int in max_burst socket option deprecated. [ 274.282075][ T9057] Use struct sctp_assoc_value instead [ 274.692532][ T5894] usb 5-1: USB disconnect, device number 7 [ 275.171424][ T9070] tipc: Started in network mode [ 275.202418][ T9070] tipc: Node identity 4e799bf229b9, cluster identity 4711 [ 275.210464][ T9070] tipc: Enabled bearer , priority 0 [ 275.353336][ T9070] syzkaller0: entered promiscuous mode [ 275.369650][ T9070] syzkaller0: entered allmulticast mode [ 275.383902][ T9079] sctp: [Deprecated]: syz.4.937 (pid 9079) Use of int in max_burst socket option deprecated. [ 275.383902][ T9079] Use struct sctp_assoc_value instead [ 275.384255][ T9070] tipc: Resetting bearer [ 275.428314][ T9081] loop6: detected capacity change from 0 to 512 [ 275.438260][ T9081] EXT4-fs: Ignoring removed bh option [ 275.444700][ T9075] mac80211_hwsim hwsim32 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 275.453203][ T9081] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 275.494977][ T9081] EXT4-fs (loop6): 1 truncate cleaned up [ 275.513225][ T9068] tipc: Resetting bearer [ 275.515626][ T9081] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.713984][ T8331] EXT4-fs error (device loop6): ext4_readdir:259: inode #11: block 54: comm syz-executor: path /31/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 275.745773][ T8331] EXT4-fs error (device loop6): ext4_empty_dir:3134: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 275.812599][ T8331] EXT4-fs error (device loop6): ext4_readdir:259: inode #11: block 54: comm syz-executor: path /31/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 275.847011][ T8331] EXT4-fs error (device loop6): ext4_empty_dir:3134: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 276.132340][ T9074] loop9: detected capacity change from 0 to 32768 [ 276.139934][ T9074] XFS: ikeep mount option is deprecated. [ 276.178295][ T8331] EXT4-fs error (device loop6): ext4_readdir:259: inode #11: block 54: comm syz-executor: path /31/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 276.222067][ T5894] tipc: Node number set to 1740676082 [ 276.289875][ T8331] EXT4-fs error (device loop6): ext4_empty_dir:3134: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 276.433238][ T8331] EXT4-fs error (device loop6): ext4_readdir:259: inode #11: block 54: comm syz-executor: path /31/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 276.462297][ T8331] EXT4-fs error (device loop6): ext4_empty_dir:3134: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 276.483660][ T8331] EXT4-fs error (device loop6): ext4_readdir:259: inode #11: block 54: comm syz-executor: path /31/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 276.598917][ T8331] EXT4-fs error (device loop6): ext4_empty_dir:3134: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 276.702634][ T9074] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 276.809505][ T9099] binder: 9098:9099 unknown command 0 [ 276.815982][ T9099] binder: 9098:9099 ioctl c0306201 200001c0 returned -22 [ 276.906230][ T9074] XFS (loop9): Ending clean mount [ 277.024696][ T9074] XFS (loop9): Quotacheck needed: Please wait. [ 277.154088][ T9074] XFS (loop9): Quotacheck: Done. [ 277.266520][ T29] audit: type=1804 audit(1736448849.953:121): pid=9074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.938" name="/newroot/99/file0/bus" dev="loop9" ino=9290 res=1 errno=0 [ 277.354872][ T29] audit: type=1804 audit(1736448849.993:122): pid=9074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.938" name="/newroot/99/file0/bus" dev="loop9" ino=9290 res=1 errno=0 [ 277.439861][ T9105] loop4: detected capacity change from 0 to 512 [ 277.467803][ T53] wlan0: Trigger new scan to find an IBSS to join [ 277.580890][ T7316] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 279.972347][ T9068] tipc: Disabling bearer [ 280.144662][ T8331] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.763791][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 280.777482][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 280.810170][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 280.819019][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 280.828197][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 280.836093][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 280.923467][ T9126] loop3: detected capacity change from 0 to 256 [ 280.930751][ T9126] exfat: Bad value for 'gid' [ 280.936040][ T9126] exfat: Bad value for 'gid' [ 281.135460][ T9127] fuse: Bad value for 'fd' [ 281.309166][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 281.325454][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 281.337006][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 281.345105][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 281.356468][ T5852] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 281.364289][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 281.424915][ T64] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.761357][ T64] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.128414][ T64] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.309445][ T64] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.505793][ T53] wlan0: Trigger new scan to find an IBSS to join [ 282.820318][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 282.835822][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 282.849352][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 282.861581][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 282.871037][ T5852] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 282.882516][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 282.902299][ T5836] Bluetooth: hci1: command tx timeout [ 282.913449][ T9155] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.943419][ T9132] chnl_net:caif_netlink_parms(): no params data found [ 283.049374][ T9119] chnl_net:caif_netlink_parms(): no params data found [ 283.237628][ T64] bridge_slave_1: left allmulticast mode [ 283.247177][ T64] bridge_slave_1: left promiscuous mode [ 283.256367][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.335947][ T64] bridge_slave_0: left allmulticast mode [ 283.341681][ T64] bridge_slave_0: left promiscuous mode [ 283.347889][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.348931][ T9165] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.463683][ T5852] Bluetooth: hci5: command tx timeout [ 283.583054][ T1153] wlan0: Creating new IBSS network, BSSID 7a:82:df:fa:70:ad [ 283.972466][ T9163] loop1: detected capacity change from 0 to 40427 [ 283.980477][ T9163] F2FS-fs (loop1): Invalid log blocks per segment (4278190089) [ 283.992109][ T9163] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 284.044511][ T5831] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 284.063729][ T9163] F2FS-fs (loop1): invalid crc value [ 284.103127][ T9163] F2FS-fs (loop1): Found nat_bits in checkpoint [ 284.202739][ T9163] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 284.209946][ T9163] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 284.232409][ T5831] usb 5-1: Using ep0 maxpacket: 8 [ 284.242894][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.254098][ T5831] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 284.264347][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.275305][ T5831] usb 5-1: Product: syz [ 284.283709][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.298605][ T5831] usb 5-1: Manufacturer: syz [ 284.307626][ T64] bond0 (unregistering): Released all slaves [ 284.322257][ T5831] usb 5-1: SerialNumber: syz [ 284.342526][ T5831] usb 5-1: config 0 descriptor?? [ 284.483269][ T7900] syz-executor: attempt to access beyond end of device [ 284.483269][ T7900] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 284.534226][ T7900] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 284.559206][ T5831] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 284.984024][ T5836] Bluetooth: hci2: command tx timeout [ 284.991307][ T5836] Bluetooth: hci1: command tx timeout [ 285.124326][ T9132] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.131529][ T9132] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.161050][ T9132] bridge_slave_0: entered allmulticast mode [ 285.173450][ T9132] bridge_slave_0: entered promiscuous mode [ 285.188785][ T5831] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 285.222396][ T5831] usb 5-1: USB disconnect, device number 8 [ 285.235389][ T9119] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.262197][ T9119] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.269757][ T9119] bridge_slave_0: entered allmulticast mode [ 285.314649][ T9119] bridge_slave_0: entered promiscuous mode [ 285.323896][ T9119] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.331226][ T9119] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.349400][ T9119] bridge_slave_1: entered allmulticast mode [ 285.363488][ T9119] bridge_slave_1: entered promiscuous mode [ 285.381410][ T9132] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.390557][ T9132] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.408185][ T9132] bridge_slave_1: entered allmulticast mode [ 285.423185][ T9132] bridge_slave_1: entered promiscuous mode [ 285.544203][ T5836] Bluetooth: hci5: command tx timeout [ 285.616892][ T9132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.652175][ T64] hsr_slave_0: left promiscuous mode [ 285.657984][ T9192] loop9: detected capacity change from 0 to 32768 [ 285.664901][ T64] hsr_slave_1: left promiscuous mode [ 285.670504][ T9192] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.977 (9192) [ 285.688651][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.701632][ T9192] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 285.707257][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.712477][ T9192] BTRFS info (device loop9): using sha256 (sha256-ni) checksum algorithm [ 285.731082][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.738827][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.771966][ T9192] BTRFS info (device loop9): using free-space-tree [ 285.776892][ T64] veth1_macvtap: left promiscuous mode [ 285.785362][ T64] veth0_macvtap: left promiscuous mode [ 285.791167][ T64] veth1_vlan: left promiscuous mode [ 285.797532][ T64] veth0_vlan: left promiscuous mode [ 286.126006][ T9192] BTRFS info (device loop9): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 286.442548][ T7316] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 286.900729][ T64] team0 (unregistering): Port device team_slave_1 removed [ 287.008547][ T64] team0 (unregistering): Port device team_slave_0 removed [ 287.069608][ T5836] Bluetooth: hci1: command tx timeout [ 287.071092][ T5852] Bluetooth: hci2: command tx timeout [ 287.625487][ T5836] Bluetooth: hci5: command tx timeout [ 288.245622][ T9119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.300949][ T9132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.321146][ T9219] @: renamed from vlan0 [ 288.350020][ T9119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.508981][ T9151] chnl_net:caif_netlink_parms(): no params data found [ 288.535484][ T9119] team0: Port device team_slave_0 added [ 288.624197][ T9132] team0: Port device team_slave_0 added [ 288.644046][ T9119] team0: Port device team_slave_1 added [ 288.652417][ T9132] team0: Port device team_slave_1 added [ 288.707365][ T9132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.724433][ T9132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.752408][ T9132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.790804][ T9132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.799887][ T9132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.827556][ T9132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.846814][ T9119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.876532][ T9119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.932146][ T9119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.946674][ T9119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.954705][ T9119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.981670][ T9119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.128571][ T9151] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.136065][ T9151] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.143255][ T5836] Bluetooth: hci2: command tx timeout [ 289.149856][ T9151] bridge_slave_0: entered allmulticast mode [ 289.152126][ T5836] Bluetooth: hci1: command tx timeout [ 289.157878][ T9151] bridge_slave_0: entered promiscuous mode [ 289.210452][ T9132] hsr_slave_0: entered promiscuous mode [ 289.273728][ T9132] hsr_slave_1: entered promiscuous mode [ 289.302208][ T9132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.310229][ T9132] Cannot create hsr debugfs directory [ 289.361048][ T9151] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.382711][ T9151] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.390284][ T9151] bridge_slave_1: entered allmulticast mode [ 289.405339][ T9243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.410991][ T9151] bridge_slave_1: entered promiscuous mode [ 289.443656][ T9243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.626587][ T9119] hsr_slave_0: entered promiscuous mode [ 289.684281][ T9119] hsr_slave_1: entered promiscuous mode [ 289.702185][ T5836] Bluetooth: hci5: command tx timeout [ 289.732071][ T9119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.752690][ T9119] Cannot create hsr debugfs directory [ 289.772337][ T9151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.814180][ T9151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.137133][ T64] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.198570][ T9151] team0: Port device team_slave_0 added [ 290.423484][ T64] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.444910][ T9151] team0: Port device team_slave_1 added [ 290.631760][ T64] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.232071][ T5852] Bluetooth: hci2: command tx timeout [ 291.433760][ T9270] loop1: detected capacity change from 0 to 512 [ 291.471043][ T9270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.484333][ T9270] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.550682][ T29] audit: type=1800 audit(1736448864.233:123): pid=9270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.996" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 291.642245][ T29] audit: type=1800 audit(1736448864.323:124): pid=9275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.996" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 291.686024][ T64] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.735679][ T9277] loop4: detected capacity change from 0 to 1024 [ 291.744218][ T9277] hfsplus: Unknown parameter '0xffffffffffffffff' [ 291.834392][ T9151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.846384][ T9151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.892119][ T9151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.924746][ T9151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.938283][ T9151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.975275][ T9151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.995796][ T7900] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.480314][ T9151] hsr_slave_0: entered promiscuous mode [ 292.497799][ T9151] hsr_slave_1: entered promiscuous mode [ 292.542462][ T9151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.562442][ T9151] Cannot create hsr debugfs directory [ 292.828305][ T9301] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input16 [ 292.873928][ T9285] loop4: detected capacity change from 0 to 32768 [ 292.896379][ T9285] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1001 (9285) [ 292.925516][ T64] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.927072][ T9285] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 292.971771][ T9285] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 292.981099][ T9285] BTRFS info (device loop4): using free-space-tree [ 293.214521][ T9321] loop9: detected capacity change from 0 to 2048 [ 293.221705][ T9321] EXT4-fs: Ignoring removed mblk_io_submit option [ 293.242129][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 293.267003][ T64] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.322724][ T29] audit: type=1800 audit(1736448866.003:125): pid=9285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1001" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 293.432991][ T9321] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.559928][ T9321] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 293.665383][ T64] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.824384][ T7316] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.933110][ T8087] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 293.960444][ T64] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.089304][ T9336] loop9: detected capacity change from 0 to 512 [ 294.150657][ T9132] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 294.235041][ T9132] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 294.263217][ T9336] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.276393][ T9336] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.352338][ T29] audit: type=1800 audit(1736448867.023:126): pid=9336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1012" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 294.427337][ T9132] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 294.436793][ T29] audit: type=1800 audit(1736448867.123:127): pid=9344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1012" name="file2" dev="loop9" ino=16 res=0 errno=0 [ 294.671667][ T9132] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 294.723411][ T7316] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.962263][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 294.968483][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 295.002574][ T9132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.021413][ T9132] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.034599][ T7429] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.041823][ T7429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.091057][ T7429] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.098277][ T7429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.116973][ T64] bridge_slave_1: left allmulticast mode [ 295.123301][ T64] bridge_slave_1: left promiscuous mode [ 295.136775][ T9351] ceph: No mds server is up or the cluster is laggy [ 295.143078][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.189735][ T64] bridge_slave_0: left allmulticast mode [ 295.195756][ T64] bridge_slave_0: left promiscuous mode [ 295.201611][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.264177][ T64] bridge_slave_1: left allmulticast mode [ 295.280101][ T64] bridge_slave_1: left promiscuous mode [ 295.300606][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.363252][ T64] bridge_slave_0: left allmulticast mode [ 295.369163][ T64] bridge_slave_0: left promiscuous mode [ 295.399809][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.582759][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.596087][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.607314][ T64] bond0 (unregistering): Released all slaves [ 296.884871][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.898271][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.911781][ T64] bond0 (unregistering): Released all slaves [ 297.215374][ T64] bond1 (unregistering): (slave batadv1): Releasing active interface [ 297.228005][ T64] bond1 (unregistering): Released all slaves [ 297.446348][ T9372] loop1: detected capacity change from 0 to 1024 [ 297.468463][ T9372] EXT4-fs (loop1): Test dummy encryption mode enabled [ 297.476657][ T9372] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 297.497343][ T9372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.785296][ T7900] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.015706][ T9119] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 298.074467][ T9378] loop9: detected capacity change from 0 to 32768 [ 298.083471][ T9378] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.1024 (9378) [ 298.111241][ T9378] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 298.127279][ T9378] BTRFS info (device loop9): using sha256 (sha256-ni) checksum algorithm [ 298.136436][ T9378] BTRFS info (device loop9): using free-space-tree [ 298.205316][ T9382] loop4: detected capacity change from 0 to 2048 [ 298.221379][ T9382] EXT4-fs: Ignoring removed mblk_io_submit option [ 298.224883][ T9119] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 298.257853][ T9382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.298104][ T9382] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 298.347377][ T29] audit: type=1800 audit(1736448871.033:128): pid=9378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1024" name="bus" dev="loop9" ino=263 res=0 errno=0 [ 298.442167][ T9119] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 298.569226][ T9119] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 298.616346][ T8087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.806069][ T9401] loop1: detected capacity change from 0 to 32768 [ 298.844143][ T7316] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 299.045800][ T9401] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 299.281095][ T9132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.308807][ T9410] loop1: detected capacity change from 0 to 512 [ 299.360803][ T9408] loop9: detected capacity change from 0 to 4096 [ 299.606043][ T64] hsr_slave_0: left promiscuous mode [ 299.627197][ T64] hsr_slave_1: left promiscuous mode [ 299.652292][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.660030][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.673579][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.681294][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.708953][ T64] hsr_slave_0: left promiscuous mode [ 299.717623][ T64] hsr_slave_1: left promiscuous mode [ 299.734521][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.751522][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.776097][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.792125][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.856015][ T64] veth1_macvtap: left promiscuous mode [ 299.861617][ T64] veth0_macvtap: left promiscuous mode [ 299.867812][ T64] veth1_vlan: left promiscuous mode [ 299.873967][ T64] veth0_vlan: left promiscuous mode [ 299.880399][ T64] veth1_macvtap: left promiscuous mode [ 299.886110][ T64] veth0_macvtap: left promiscuous mode [ 299.891756][ T64] veth1_vlan: left promiscuous mode [ 299.897269][ T64] veth0_vlan: left promiscuous mode [ 300.512429][ T970] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 300.702252][ T970] usb 5-1: Using ep0 maxpacket: 8 [ 300.715441][ T970] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 300.732007][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.746458][ T970] usb 5-1: Product: syz [ 300.761020][ T970] usb 5-1: Manufacturer: syz [ 300.765883][ T970] usb 5-1: SerialNumber: syz [ 300.783101][ T970] usb 5-1: config 0 descriptor?? [ 301.011897][ T970] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 301.263585][ T64] team0 (unregistering): Port device team_slave_1 removed [ 301.275350][ T9425] loop1: detected capacity change from 0 to 32768 [ 301.283319][ T9425] XFS: ikeep mount option is deprecated. [ 301.316160][ T9425] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 301.408240][ T64] team0 (unregistering): Port device team_slave_0 removed [ 301.508398][ T9425] XFS (loop1): Ending clean mount [ 301.524664][ T9425] XFS (loop1): Quotacheck needed: Please wait. [ 301.622570][ T9425] XFS (loop1): Quotacheck: Done. [ 301.755602][ T29] audit: type=1804 audit(1736448874.433:129): pid=9425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1031" name="/newroot/91/file0/bus" dev="loop1" ino=9290 res=1 errno=0 [ 301.833455][ T29] audit: type=1804 audit(1736448874.513:130): pid=9425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1031" name="/newroot/91/file0/bus" dev="loop1" ino=9290 res=1 errno=0 [ 301.978288][ T7900] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 302.874696][ T970] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 302.896118][ T970] dvbdev: DVB: registering new adapter (Terratec H7) [ 302.911834][ T970] usb 5-1: media controller created [ 303.087757][ T970] usb read operation failed. (-71) [ 303.103946][ T970] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 303.152646][ T970] usb 5-1: USB disconnect, device number 9 [ 303.466249][ T64] team0 (unregistering): Port device team_slave_1 removed [ 303.550978][ T64] team0 (unregistering): Port device team_slave_0 removed [ 303.805540][ T9438] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input17 [ 304.838802][ T9445] tipc: Enabled bearer , priority 0 [ 304.928468][ T9446] syzkaller0: entered promiscuous mode [ 304.942683][ T9446] syzkaller0: entered allmulticast mode [ 304.953083][ T9446] tipc: Resetting bearer [ 305.032333][ T9442] tipc: Resetting bearer [ 305.110002][ T9455] loop4: detected capacity change from 0 to 512 [ 305.138405][ T9455] EXT4-fs: Ignoring removed i_version option [ 305.162551][ T9455] EXT4-fs: Ignoring removed mblk_io_submit option [ 305.177171][ T9455] ext4: Unknown parameter 'seclabel' [ 305.235151][ T9455] loop4: detected capacity change from 0 to 256 [ 305.242069][ T9458] sctp: [Deprecated]: syz.9.1035 (pid 9458) Use of int in max_burst socket option deprecated. [ 305.242069][ T9458] Use struct sctp_assoc_value instead [ 305.263072][ T9455] msdos: Bad value for 'errors' [ 308.569523][ T9442] tipc: Disabling bearer [ 308.714359][ T9151] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 308.745088][ T9151] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 308.779608][ T9132] veth0_vlan: entered promiscuous mode [ 308.794697][ T9151] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 308.819120][ T9151] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 308.847536][ T9119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.904138][ T9132] veth1_vlan: entered promiscuous mode [ 308.957655][ T9119] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.980218][ T7444] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.987464][ T7444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.049769][ T9132] veth0_macvtap: entered promiscuous mode [ 309.072345][ T7444] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.079530][ T7444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.123589][ T9132] veth1_macvtap: entered promiscuous mode [ 309.176915][ T9132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.190129][ T9132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.208109][ T9132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.220226][ T9132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.230751][ T9132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.241386][ T9132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.254743][ T9132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.300200][ T9132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.332023][ T9132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.349293][ T9132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.359915][ T9132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.371591][ T9132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.392528][ T9132] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.401299][ T9132] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.414136][ T9132] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.423222][ T9132] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.538688][ T9151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.656799][ T7444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.670893][ T9151] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.683996][ T7444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.733809][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.741089][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.769027][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.776310][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.850620][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.874032][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.911267][ T9119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.981019][ T9151] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 310.031135][ T9151] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 310.164632][ T9119] veth0_vlan: entered promiscuous mode [ 310.234908][ T9119] veth1_vlan: entered promiscuous mode [ 310.301823][ T9119] veth0_macvtap: entered promiscuous mode [ 310.318273][ T9119] veth1_macvtap: entered promiscuous mode [ 310.366685][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.390412][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.412164][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.432164][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.446246][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.457502][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.468624][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.479293][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.490770][ T9119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.516161][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.527243][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.537906][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.548631][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.558809][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.569562][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.582398][ T9119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.599817][ T9119] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.610207][ T9119] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.619690][ T9119] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.629583][ T9119] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.660158][ T9151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.816587][ T7444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.844186][ T7444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.875048][ T7434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.884102][ T7434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.300057][ T9490] loop7: detected capacity change from 0 to 2048 [ 311.339022][ T9151] veth0_vlan: entered promiscuous mode [ 311.348663][ T9490] EXT4-fs: Ignoring removed mblk_io_submit option [ 311.366925][ T9151] veth1_vlan: entered promiscuous mode [ 311.421483][ T9151] veth0_macvtap: entered promiscuous mode [ 311.433788][ T9151] veth1_macvtap: entered promiscuous mode [ 311.441085][ T9490] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.450845][ T9151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.464744][ T9151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.474748][ T9151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.485427][ T9151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.495461][ T9151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.506254][ T9151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.516459][ T9151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.518384][ T9495] loop4: detected capacity change from 0 to 256 [ 311.527250][ T9151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.545612][ T9151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.556146][ T9151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.567536][ T9151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.608782][ T9151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.636971][ T9151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.654490][ T9490] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 311.658055][ T9151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.706501][ T9151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.732169][ T9151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.762310][ T9151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.795007][ T9151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.827430][ T9151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.871567][ T9151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.893832][ T9132] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.905732][ T9151] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.932317][ T9151] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.942199][ T9151] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.950983][ T9151] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.205617][ T9485] loop9: detected capacity change from 0 to 32768 [ 312.224530][ T9485] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.1038 (9485) [ 312.255654][ T9485] BTRFS info (device loop9): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 312.267214][ T9485] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 312.277204][ T5916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.292592][ T9485] BTRFS info (device loop9): using free-space-tree [ 312.304295][ T5916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.428207][ T5916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.444143][ T5916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.520214][ T9483] loop1: detected capacity change from 0 to 32768 [ 312.541808][ T9483] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1037 (9483) [ 312.592789][ T9483] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 312.603377][ T9483] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 312.612228][ T9483] BTRFS info (device loop1): using free-space-tree [ 312.854047][ T9499] loop0: detected capacity change from 0 to 32768 [ 313.011253][ T9499] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 313.172152][ T29] audit: type=1800 audit(1736448885.853:131): pid=9483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1037" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 313.405880][ T7316] BTRFS info (device loop9): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 313.612885][ T9543] loop0: detected capacity change from 0 to 1764 [ 313.684926][ T7900] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 313.972331][ T9119] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 314.050057][ T9550] tipc: Started in network mode [ 314.059612][ T9550] tipc: Node identity aaa1646296bb, cluster identity 4711 [ 314.080854][ T9550] tipc: Enabled bearer , priority 0 [ 314.210897][ T9550] syzkaller0: entered promiscuous mode [ 314.252075][ T9550] syzkaller0: entered allmulticast mode [ 314.264241][ T9119] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 314.292692][ T9550] tipc: Resetting bearer [ 314.429455][ T9549] tipc: Resetting bearer [ 315.155371][ T5831] tipc: Node number set to 1008362594 [ 315.587633][ T9568] loop0: detected capacity change from 0 to 2048 [ 315.626621][ T9568] EXT4-fs: Ignoring removed mblk_io_submit option [ 315.710435][ T9568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.834766][ T9568] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 315.898370][ T9565] loop1: detected capacity change from 0 to 40427 [ 315.918052][ T9565] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 315.936542][ T9565] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 315.968971][ T9565] F2FS-fs (loop1): invalid crc value [ 315.981175][ T9577] loop7: detected capacity change from 0 to 256 [ 316.005194][ T9565] F2FS-fs (loop1): Found nat_bits in checkpoint [ 316.087309][ T9119] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.312560][ T9565] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 316.319706][ T9565] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 316.412706][ T9570] loop8: detected capacity change from 0 to 32768 [ 316.437614][ T9570] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 316.517069][ T9565] F2FS-fs (loop1): Stopped filesystem due to reason: 0 [ 316.596618][ T5937] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 316.713830][ T9570] XFS (loop8): Ending clean mount [ 316.715846][ T5916] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 316.752888][ T5937] usb 1-1: Using ep0 maxpacket: 32 [ 316.766913][ T5937] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 316.778370][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.780708][ T5916] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 316.803975][ T5937] usb 1-1: config 0 descriptor?? [ 316.826228][ T5937] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 317.137306][ T9574] loop4: detected capacity change from 0 to 32768 [ 317.157317][ T9574] XFS: ikeep mount option is deprecated. [ 317.212626][ T9574] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 317.566619][ T9151] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 317.654044][ T9574] XFS (loop4): Ending clean mount [ 317.677302][ T9574] XFS (loop4): Quotacheck needed: Please wait. [ 317.965589][ T9574] XFS (loop4): Quotacheck: Done. [ 318.159606][ T9605] loop1: detected capacity change from 0 to 32768 [ 318.192214][ T9605] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1064 (9605) [ 318.255836][ T9595] loop7: detected capacity change from 0 to 32768 [ 318.294276][ T9595] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1065 (9595) [ 318.307391][ T9605] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 318.366244][ T9608] sctp: [Deprecated]: syz.8.1066 (pid 9608) Use of int in max_burst socket option deprecated. [ 318.366244][ T9608] Use struct sctp_assoc_value instead [ 318.371244][ T9605] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 318.402154][ T9605] BTRFS info (device loop1): using free-space-tree [ 318.442409][ T9595] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 318.466860][ T9595] BTRFS info (device loop7): using sha256 (sha256-ni) checksum algorithm [ 318.477597][ T9595] BTRFS info (device loop7): using free-space-tree [ 318.548322][ T29] audit: type=1804 audit(1736448891.223:132): pid=9574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1062" name="/newroot/93/file0/bus" dev="loop4" ino=9290 res=1 errno=0 [ 318.716326][ T29] audit: type=1804 audit(1736448891.403:133): pid=9574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1062" name="/newroot/93/file0/bus" dev="loop4" ino=9290 res=1 errno=0 [ 318.758228][ T9624] loop8: detected capacity change from 0 to 1764 [ 318.941986][ T29] audit: type=1800 audit(1736448891.623:134): pid=9595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1065" name="bus" dev="loop7" ino=263 res=0 errno=0 [ 318.944891][ T9151] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 318.963246][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.045712][ T5937] gspca_vc032x: reg_r err -71 [ 319.050504][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.079616][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.085550][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.090922][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.096500][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.101828][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.108218][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.113639][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.118977][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.124630][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.130030][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.135488][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.141039][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.146580][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.152007][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.157345][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.162991][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.168419][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.173911][ T5937] gspca_vc032x: Unknown sensor... [ 319.179607][ T5937] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 319.209959][ T5937] usb 1-1: USB disconnect, device number 4 [ 319.254938][ T9151] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 319.326546][ T8087] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 319.643220][ T9132] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 319.728993][ T7900] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 319.743177][ T5470] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 319.955317][ T9650] loop4: detected capacity change from 0 to 1024 [ 319.969199][ T5470] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.002277][ T5470] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 320.005304][ T9650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.054300][ T5470] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 320.113087][ T5470] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 320.168786][ T5470] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 320.290416][ T8087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.441770][ T5470] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 320.451161][ T5470] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 320.459463][ T5470] usb 9-1: Product: syz [ 320.463976][ T5470] usb 9-1: Manufacturer: syz [ 320.468616][ T5470] usb 9-1: SerialNumber: syz [ 320.496235][ T5470] usb 9-1: config 0 descriptor?? [ 321.415132][ T5470] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 321.442106][ T5470] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5 [ 321.873790][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.896472][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.574242][ T968] usb 9-1: USB disconnect, device number 6 [ 322.900297][ T9676] loop7: detected capacity change from 0 to 40427 [ 322.931459][ T9676] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 322.944603][ T9676] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 322.966895][ T9676] F2FS-fs (loop7): invalid crc value [ 322.985654][ T9676] F2FS-fs (loop7): Found nat_bits in checkpoint [ 323.194843][ T9676] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 323.211473][ T9676] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 323.318797][ T9676] F2FS-fs (loop7): Stopped filesystem due to reason: 0 [ 323.460576][ T7444] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 323.503042][ T7444] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 324.463676][ T9697] loop8: detected capacity change from 0 to 32768 [ 324.474075][ T9697] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1083 (9697) [ 324.525515][ T9697] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 324.556005][ T9697] BTRFS info (device loop8): using sha256 (sha256-ni) checksum algorithm [ 324.582251][ T9697] BTRFS info (device loop8): using free-space-tree [ 324.591245][ T9702] sctp: [Deprecated]: syz.7.1080 (pid 9702) Use of int in max_burst socket option deprecated. [ 324.591245][ T9702] Use struct sctp_assoc_value instead [ 325.159183][ T29] audit: type=1800 audit(1736448897.833:135): pid=9697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1083" name="bus" dev="loop8" ino=263 res=0 errno=0 [ 325.304438][ T9718] loop7: detected capacity change from 0 to 32768 [ 325.324375][ T9718] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1084 (9718) [ 325.383771][ T9718] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 325.394188][ T9718] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 325.443280][ T9718] BTRFS info (device loop7): using free-space-tree [ 325.535096][ T9151] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 326.058975][ T9745] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1087'. [ 326.432691][ T9132] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 326.569835][ T9749] ref_ctr going negative. vaddr: 0x20ffc002, curr val: -29824, delta: 1 [ 326.584308][ T9749] ref_ctr increment failed for inode: 0x4a offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88802973b0c0 [ 327.120646][ T9549] tipc: Disabling bearer [ 327.135790][ T9688] hsr0: entered promiscuous mode [ 327.140897][ T9688] macsec1: entered allmulticast mode [ 327.162741][ T9688] hsr0: entered allmulticast mode [ 327.167885][ T9688] hsr_slave_0: entered allmulticast mode [ 327.202338][ T9688] hsr_slave_1: entered allmulticast mode [ 327.233754][ T9688] hsr0: left allmulticast mode [ 327.238971][ T9688] hsr_slave_0: left allmulticast mode [ 327.244555][ T9688] hsr_slave_1: left allmulticast mode [ 327.546385][ T9763] ipip0: entered promiscuous mode [ 328.578376][ T9768] loop0: detected capacity change from 0 to 40427 [ 328.622445][ T9768] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 328.630630][ T9768] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 328.746371][ T9768] F2FS-fs (loop0): invalid crc value [ 328.755675][ T9768] F2FS-fs (loop0): Found nat_bits in checkpoint [ 329.004471][ T9768] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 329.021965][ T9768] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 329.045004][ T9770] loop1: detected capacity change from 0 to 32768 [ 329.068028][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 329.093930][ T9768] F2FS-fs (loop0): Stopped filesystem due to reason: 0 [ 329.106840][ T9770] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 329.295659][ T9795] netlink: 'syz.9.1117': attribute type 4 has an invalid length. [ 329.303692][ T5916] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 329.348533][ T5916] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 329.363709][ T9796] netlink: 'syz.9.1117': attribute type 4 has an invalid length. [ 329.415221][ T9770] XFS (loop1): Ending clean mount [ 330.413966][ T7900] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 330.966098][ T9803] loop0: detected capacity change from 0 to 32768 [ 330.974162][ T9803] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1102 (9803) [ 330.994125][ T9803] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 331.004564][ T9803] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 331.013285][ T9803] BTRFS info (device loop0): using free-space-tree [ 331.069198][ T29] audit: type=1800 audit(1736448903.753:136): pid=9803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1102" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 331.227964][ T9119] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 332.598550][ T9834] sctp: [Deprecated]: syz.0.1103 (pid 9834) Use of int in max_burst socket option deprecated. [ 332.598550][ T9834] Use struct sctp_assoc_value instead [ 332.940392][ T9843] loop1: detected capacity change from 0 to 764 [ 332.958019][ T9843] iso9660: Bad value for 'sbsector' [ 334.167768][ T9863] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 334.234739][ T9849] loop0: detected capacity change from 0 to 32768 [ 334.257221][ T9849] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1105 (9849) [ 334.274096][ T9869] serio: Serial port ptm0 [ 334.322476][ T9849] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 334.345045][ T9849] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 334.362086][ T9849] BTRFS info (device loop0): using free-space-tree [ 334.372052][ T9861] loop4: detected capacity change from 0 to 32768 [ 334.392512][ T9861] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1109 (9861) [ 334.428672][ T9861] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 334.460698][ T9861] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 334.483938][ T9861] BTRFS info (device loop4): using free-space-tree [ 334.692236][ T9855] loop8: detected capacity change from 0 to 32768 [ 334.705035][ T9855] XFS: ikeep mount option is deprecated. [ 334.771039][ T9855] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 334.970747][ T8087] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 335.083632][ T9855] XFS (loop8): Ending clean mount [ 335.102776][ T9855] XFS (loop8): Quotacheck needed: Please wait. [ 335.216993][ T9119] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 335.231908][ T9855] XFS (loop8): Quotacheck: Done. [ 335.532174][ T29] audit: type=1804 audit(1736448908.193:137): pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1106" name="/newroot/15/file0/bus" dev="loop8" ino=9290 res=1 errno=0 [ 335.585981][ T29] audit: type=1804 audit(1736448908.193:138): pid=9919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.1106" name="/newroot/15/file0/bus" dev="loop8" ino=9290 res=1 errno=0 [ 335.700039][ T29] audit: type=1804 audit(1736448908.373:139): pid=9919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.1106" name="/newroot/15/file0/bus" dev="loop8" ino=9290 res=1 errno=0 [ 336.032764][ T9151] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 336.056487][ T9937] loop9: detected capacity change from 0 to 764 [ 336.084664][ T9937] iso9660: Bad value for 'sbsector' [ 336.126401][ T9935] loop4: detected capacity change from 0 to 1024 [ 336.206868][ T9935] EXT4-fs: Ignoring removed i_version option [ 336.243024][ T9935] EXT4-fs: inline encryption not supported [ 336.248989][ T9935] EXT4-fs: Ignoring removed mblk_io_submit option [ 336.335074][ T9935] EXT4-fs (loop4): Test dummy encryption mode enabled [ 336.368270][ T9935] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 337.046914][ T9935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.505256][ T8087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.032672][ T9966] syz.9.1144[9966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.032790][ T9966] syz.9.1144[9966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.044472][ T9966] syz.9.1144[9966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.118649][ T9966] tunl0: entered promiscuous mode [ 338.184605][ T9966] vlan0: entered promiscuous mode [ 338.198920][ T9966] vlan0: entered allmulticast mode [ 338.234398][ T9966] tunl0: entered allmulticast mode [ 338.284567][ T9966] tunl0: left allmulticast mode [ 338.300011][ T9966] tunl0: left promiscuous mode [ 339.237920][ T9967] loop7: detected capacity change from 0 to 32768 [ 339.257117][ T9967] (syz.7.1143,9967,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 339.286908][ T9963] loop1: detected capacity change from 0 to 32768 [ 339.291887][ T9967] (syz.7.1143,9967,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 339.314019][ T9963] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1140 (9963) [ 339.332896][ T9969] loop8: detected capacity change from 0 to 32768 [ 339.343695][ T9963] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 339.354818][ T9963] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 339.358709][ T9967] JBD2: Ignoring recovery information on journal [ 339.363418][ T9969] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1142 (9969) [ 339.384486][ T9963] BTRFS info (device loop1): using free-space-tree [ 339.412221][ T9969] BTRFS info (device loop8): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 339.422706][ T9969] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 339.431458][ T9969] BTRFS info (device loop8): using free-space-tree [ 339.461525][ T9967] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 339.498538][ T9971] loop0: detected capacity change from 0 to 32768 [ 339.639554][ T9971] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 339.810555][ T7900] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 339.927904][ T9971] XFS (loop0): Ending clean mount [ 340.009277][ T9132] ocfs2: Unmounting device (7,7) on (node local) [ 340.093440][ T29] audit: type=1804 audit(1736448912.783:140): pid=10025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1145" name="/newroot/15/file0/bus" dev="loop0" ino=9289 res=1 errno=0 [ 340.405310][T10028] loop1: detected capacity change from 0 to 512 [ 340.431149][ T9119] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 340.448740][T10028] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 340.535578][T10028] EXT4-fs (loop1): 1 truncate cleaned up [ 340.582365][T10028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.614574][ T9151] BTRFS info (device loop8): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 341.092949][T10022] loop4: detected capacity change from 0 to 32768 [ 341.100223][T10022] XFS: ikeep mount option is deprecated. [ 341.186010][ T7900] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.243189][T10041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 341.303336][T10039] loop9: detected capacity change from 0 to 1024 [ 341.310648][T10039] EXT4-fs: Ignoring removed i_version option [ 341.343230][T10039] EXT4-fs: inline encryption not supported [ 341.352321][T10039] EXT4-fs: Ignoring removed mblk_io_submit option [ 341.412502][T10050] tipc: Started in network mode [ 341.417741][T10050] tipc: Node identity 664f2e49cfa2, cluster identity 4711 [ 341.425873][T10050] tipc: Enabled bearer , priority 0 [ 341.455881][T10039] EXT4-fs (loop9): Test dummy encryption mode enabled [ 341.463607][T10022] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 341.464518][T10050] syzkaller0: entered promiscuous mode [ 341.473066][T10039] EXT4-fs (loop9): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 341.478091][T10050] syzkaller0: entered allmulticast mode [ 341.494480][T10050] tipc: Resetting bearer [ 341.616191][T10049] tipc: Resetting bearer [ 341.633762][T10039] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.799471][T10032] loop7: detected capacity change from 0 to 32768 [ 341.812586][T10032] XFS: ikeep mount option is deprecated. [ 341.872026][ T29] audit: type=1800 audit(1736448914.543:141): pid=10039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1154" name="bus" dev="loop9" ino=18 res=0 errno=0 [ 341.957678][T10022] XFS (loop4): Ending clean mount [ 341.976671][T10022] XFS (loop4): Quotacheck needed: Please wait. [ 342.051733][T10032] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 342.067583][ T7316] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.272694][T10022] XFS (loop4): Quotacheck: Done. [ 342.309171][T10032] XFS (loop7): Ending clean mount [ 342.320693][T10032] XFS (loop7): Quotacheck needed: Please wait. [ 342.478275][T10032] XFS (loop7): Quotacheck: Done. [ 342.501813][ T29] audit: type=1804 audit(1736448915.183:142): pid=10022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1161" name="/newroot/111/file0/bus" dev="loop4" ino=9290 res=1 errno=0 [ 342.524130][ T5898] tipc: Node number set to 2850893385 [ 342.533722][ T29] audit: type=1804 audit(1736448915.223:143): pid=10022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1161" name="/newroot/111/file0/bus" dev="loop4" ino=9290 res=1 errno=0 [ 342.619975][ T8087] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 342.668909][ T29] audit: type=1804 audit(1736448915.353:144): pid=10032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1149" name="/newroot/22/file0/bus" dev="loop7" ino=9290 res=1 errno=0 [ 342.726440][ T29] audit: type=1804 audit(1736448915.413:145): pid=10032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1149" name="/newroot/22/file0/bus" dev="loop7" ino=9290 res=1 errno=0 [ 342.879269][ T9132] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 343.316229][T10071] loop7: detected capacity change from 0 to 764 [ 343.337616][T10071] iso9660: Bad value for 'sbsector' [ 343.695676][T10076] syz.1.1160[10076] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.695796][T10076] syz.1.1160[10076] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.730660][T10076] syz.1.1160[10076] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 344.273698][T10083] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 344.427770][ T5836] Bluetooth: hci6: command 0x0406 tx timeout [ 344.635755][T10091] loop4: detected capacity change from 0 to 2048 [ 344.660329][T10092] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 345.697569][T10096] loop9: detected capacity change from 0 to 32768 [ 345.769500][T10096] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 345.914974][T10096] XFS (loop9): Ending clean mount [ 345.923195][T10096] XFS (loop9): Quotacheck needed: Please wait. [ 346.053109][T10096] XFS (loop9): Quotacheck: Done. [ 346.059293][T10092] NILFS (loop4): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 346.082010][T10092] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=2) [ 346.144943][T10092] Remounting filesystem read-only [ 346.166054][ T8087] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 346.290005][ T7316] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 346.639016][T10111] loop9: detected capacity change from 0 to 512 [ 346.671079][T10111] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 346.759326][T10111] EXT4-fs (loop9): 1 truncate cleaned up [ 346.812172][T10111] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.004279][ T7316] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.098102][T10115] loop4: detected capacity change from 0 to 256 [ 347.162160][T10115] FAT-fs (loop4): Directory bread(block 64) failed [ 347.171572][T10115] FAT-fs (loop4): Directory bread(block 65) failed [ 347.179473][T10115] FAT-fs (loop4): Directory bread(block 66) failed [ 347.186592][T10115] FAT-fs (loop4): Directory bread(block 67) failed [ 347.194870][T10115] FAT-fs (loop4): Directory bread(block 68) failed [ 347.201702][T10115] FAT-fs (loop4): Directory bread(block 69) failed [ 347.208983][T10115] FAT-fs (loop4): Directory bread(block 70) failed [ 347.216298][T10115] FAT-fs (loop4): Directory bread(block 71) failed [ 347.223805][T10115] FAT-fs (loop4): Directory bread(block 72) failed [ 347.230595][T10115] FAT-fs (loop4): Directory bread(block 73) failed [ 347.345311][T10115] syz.4.1182: attempt to access beyond end of device [ 347.345311][T10115] loop4: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 347.373719][T10115] syz.4.1182: attempt to access beyond end of device [ 347.373719][T10115] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 347.400300][ T29] audit: type=1800 audit(1736448920.083:146): pid=10115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1182" name="file1" dev="loop4" ino=1048662 res=0 errno=0 [ 347.431797][T10115] syz.4.1182: attempt to access beyond end of device [ 347.431797][T10115] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 347.470544][T10115] syz.4.1182: attempt to access beyond end of device [ 347.470544][T10115] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 347.482063][ T29] audit: type=1800 audit(1736448920.143:147): pid=10115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1182" name="file1" dev="loop4" ino=1048662 res=0 errno=0 [ 347.572002][T10118] syz.4.1182: attempt to access beyond end of device [ 347.572002][T10118] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 347.716192][T10117] loop9: detected capacity change from 0 to 32768 [ 347.756275][T10117] (syz.9.1169,10117,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 347.798473][T10117] (syz.9.1169,10117,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 347.834255][T10117] JBD2: Ignoring recovery information on journal [ 347.894987][T10117] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 348.304282][ T7316] ocfs2: Unmounting device (7,9) on (node local) [ 348.952148][ T5470] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 349.103907][ T5470] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.132378][ T5470] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.142563][ T5470] usb 10-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 349.152268][ T5470] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.179111][ T5470] usb 10-1: config 0 descriptor?? [ 349.436097][T10049] tipc: Disabling bearer [ 349.445466][T10048] tap0: tun_chr_ioctl cmd 1074025677 [ 349.451140][T10048] tap0: linktype set to 0 [ 349.472691][T10076] tunl0: entered promiscuous mode [ 349.477982][T10076] vlan2: entered promiscuous mode [ 349.483679][T10076] vlan2: entered allmulticast mode [ 349.489024][T10076] tunl0: entered allmulticast mode [ 349.561698][T10076] tunl0: left allmulticast mode [ 349.567283][T10076] tunl0: left promiscuous mode [ 349.909270][ T5470] usbhid 10-1:0.0: can't add hid device: -71 [ 349.918635][ T5470] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 349.937128][T10135] tipc: Enabling of bearer rejected, failed to enable media [ 349.978874][ T5470] usb 10-1: USB disconnect, device number 6 [ 350.051314][T10132] loop0: detected capacity change from 0 to 32768 [ 350.060592][T10132] XFS: ikeep mount option is deprecated. [ 350.217516][T10132] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 350.504690][T10159] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1180'. [ 350.539810][T10132] XFS (loop0): Ending clean mount [ 350.577868][T10132] XFS (loop0): Quotacheck needed: Please wait. [ 350.669704][T10164] netlink: 'syz.8.1180': attribute type 2 has an invalid length. [ 350.696455][T10132] XFS (loop0): Quotacheck: Done. [ 350.933884][ T29] audit: type=1804 audit(1736448923.623:148): pid=10132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1174" name="/newroot/18/file0/bus" dev="loop0" ino=9290 res=1 errno=0 [ 351.068337][T10170] sctp: [Deprecated]: syz.7.1184 (pid 10170) Use of int in max_burst socket option deprecated. [ 351.068337][T10170] Use struct sctp_assoc_value instead [ 351.109387][ T29] audit: type=1804 audit(1736448923.793:149): pid=10176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1174" name="/newroot/18/file0/bus" dev="loop0" ino=9290 res=1 errno=0 [ 351.214482][T10173] loop1: detected capacity change from 0 to 4096 [ 351.417772][ T9119] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 352.039103][T10162] loop4: detected capacity change from 0 to 32768 [ 352.151653][T10162] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 352.401969][T10162] XFS (loop4): Ending clean mount [ 352.519248][ T29] audit: type=1804 audit(1736448925.203:150): pid=10162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1183" name="/newroot/120/file0/bus" dev="loop4" ino=9289 res=1 errno=0 [ 352.581816][ T8087] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 352.605686][ T29] audit: type=1804 audit(1736448925.203:151): pid=10162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1183" name="/newroot/120/file0/bus" dev="loop4" ino=9289 res=1 errno=0 [ 352.614147][T10202] tipc: Started in network mode [ 352.632291][T10202] tipc: Node identity ba448cdab01b, cluster identity 4711 [ 352.639733][T10202] tipc: Enabled bearer , priority 0 [ 352.801195][T10202] syzkaller0: entered promiscuous mode [ 352.842085][T10202] syzkaller0: entered allmulticast mode [ 352.874087][T10202] tipc: Resetting bearer [ 353.051639][T10201] tipc: Resetting bearer [ 353.235275][T10209] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 353.580380][T10196] loop1: detected capacity change from 0 to 32768 [ 353.588622][T10196] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1192 (10196) [ 353.636821][T10196] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 353.651968][T10196] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 353.660680][T10196] BTRFS info (device loop1): using free-space-tree [ 353.752150][ T5892] tipc: Node number set to 174034138 [ 354.054941][T10245] loop0: detected capacity change from 0 to 2048 [ 354.387933][T10196] BTRFS info (device loop1): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 354.402554][T10270] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 354.983968][ T7900] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 355.072205][T10279] loop8: detected capacity change from 0 to 4096 [ 355.892545][T10270] NILFS (loop0): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 355.916689][T10270] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=2) [ 355.996186][T10270] Remounting filesystem read-only [ 356.002725][ T9119] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 356.159844][T10286] loop1: detected capacity change from 0 to 8192 [ 356.167298][T10286] vfat: Unknown parameter '0177777777777777777777718446744073709551615' [ 357.330695][T10292] loop9: detected capacity change from 0 to 32768 [ 357.460743][T10294] loop8: detected capacity change from 0 to 32768 [ 357.509160][T10294] XFS: ikeep mount option is deprecated. [ 357.521238][T10292] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 357.639597][T10292] XFS (loop9): Ending clean mount [ 357.639661][T10294] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 357.738157][ T29] audit: type=1804 audit(1736448930.423:152): pid=10292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1210" name="/newroot/155/file0/bus" dev="loop9" ino=9289 res=1 errno=0 [ 357.808871][ T29] audit: type=1804 audit(1736448930.453:153): pid=10292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.1210" name="/newroot/155/file0/bus" dev="loop9" ino=9289 res=1 errno=0 [ 357.933826][T10294] XFS (loop8): Ending clean mount [ 357.935550][ T7316] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 357.950661][T10294] XFS (loop8): Quotacheck needed: Please wait. [ 358.066199][T10294] XFS (loop8): Quotacheck: Done. [ 358.133710][ T29] audit: type=1804 audit(1736448930.823:154): pid=10294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1209" name="/newroot/26/file0/bus" dev="loop8" ino=9290 res=1 errno=0 [ 358.169514][ T29] audit: type=1804 audit(1736448930.823:155): pid=10294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.1209" name="/newroot/26/file0/bus" dev="loop8" ino=9290 res=1 errno=0 [ 358.257913][ T9151] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 359.170682][T10331] loop4: detected capacity change from 0 to 8 [ 359.181179][T10331] SQUASHFS error: zlib decompression failed, data probably corrupt [ 359.189451][T10331] SQUASHFS error: Failed to read block 0x9b: -5 [ 359.196815][T10331] SQUASHFS error: Unable to read metadata cache entry [99] [ 359.204965][T10331] SQUASHFS error: Unable to read inode 0x127 [ 360.119940][T10344] loop4: detected capacity change from 0 to 4096 [ 360.491746][T10345] loop8: detected capacity change from 0 to 32768 [ 360.517206][T10345] (syz.8.1222,10345,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 360.533977][T10345] (syz.8.1222,10345,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 360.679860][T10345] JBD2: Ignoring recovery information on journal [ 360.762758][T10345] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 361.161101][ T9151] ocfs2: Unmounting device (7,8) on (node local) [ 362.077207][T10201] tipc: Disabling bearer [ 362.098869][T10297] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1211'. [ 363.112018][ T5831] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 363.118151][T10369] loop4: detected capacity change from 0 to 40427 [ 363.283590][ T5831] usb 9-1: config 0 has an invalid interface number: 225 but max is 0 [ 363.301253][T10369] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1fffff [ 363.372101][ T5831] usb 9-1: config 0 has no interface number 0 [ 363.444064][ T5831] usb 9-1: New USB device found, idVendor=9846, idProduct=9041, bcdDevice=e1.cb [ 363.486705][ T5831] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.533674][T10369] F2FS-fs (loop4): invalid crc value [ 363.571168][ T5831] usb 9-1: Product: syz [ 363.588049][ T5831] usb 9-1: Manufacturer: syz [ 363.618418][ T5831] usb 9-1: SerialNumber: syz [ 363.664612][ T5831] usb 9-1: config 0 descriptor?? [ 363.731996][T10369] F2FS-fs (loop4): Found nat_bits in checkpoint [ 363.812064][T10369] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 363.904253][T10409] loop7: detected capacity change from 0 to 8 [ 363.904766][T10379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.929504][T10409] SQUASHFS error: zlib decompression failed, data probably corrupt [ 363.929804][ T5898] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 363.937726][T10409] SQUASHFS error: Failed to read block 0x9b: -5 [ 363.972193][T10409] SQUASHFS error: Unable to read metadata cache entry [99] [ 363.987261][T10369] F2FS-fs (loop4): inject orphan in f2fs_acquire_orphan_inode of f2fs_unlink+0x432/0x8c0 [ 363.997796][T10369] overlayfs: cleanup of 'work/#7b' failed (-28) [ 363.998047][T10379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.006916][T10369] overlayfs: conflicting lowerdir path [ 364.019834][T10409] SQUASHFS error: Unable to read inode 0x127 [ 364.177609][ T5831] usb 9-1: USB disconnect, device number 7 [ 364.198924][ T8087] syz-executor: attempt to access beyond end of device [ 364.198924][ T8087] loop4: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 364.225646][ T5898] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 364.243816][ T5898] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.247809][ T8087] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 364.253870][ T5898] usb 1-1: config 0 interface 0 has no altsetting 0 [ 364.253933][ T5898] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 364.271330][ T8087] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 364.278199][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.330208][ T8087] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 364.338449][ T5898] usb 1-1: config 0 descriptor?? [ 364.792278][ T5898] usbhid 1-1:0.0: can't add hid device: -71 [ 364.798734][ T5898] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 364.822525][ T5898] usb 1-1: USB disconnect, device number 5 [ 365.086762][T10425] loop8: detected capacity change from 0 to 2048 [ 365.165546][T10431] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 365.421222][T10436] sctp: [Deprecated]: syz.4.1236 (pid 10436) Use of int in max_burst socket option deprecated. [ 365.421222][T10436] Use struct sctp_assoc_value instead [ 365.934200][T10444] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 366.099581][T10429] loop7: detected capacity change from 0 to 32768 [ 366.200154][T10429] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 366.391073][T10431] NILFS (loop8): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 366.411966][T10431] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=2) [ 366.462699][T10431] Remounting filesystem read-only [ 366.482140][ T9151] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer [ 366.700586][T10429] XFS (loop7): Ending clean mount [ 366.712818][T10429] XFS (loop7): Quotacheck needed: Please wait. [ 366.788739][T10429] XFS (loop7): Quotacheck: Done. [ 367.201363][T10478] loop8: detected capacity change from 0 to 2048 [ 367.322332][T10487] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 367.373169][ T29] audit: type=1800 audit(1736448940.063:156): pid=10478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1250" name="bus" dev="loop8" ino=2097152 res=0 errno=0 [ 367.405664][ T9132] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 367.432444][ T5892] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 367.569589][T10492] NILFS error (device loop8): nilfs_lookup: deleted inode referenced: 12 [ 367.611235][T10492] Remounting filesystem read-only [ 367.638165][ T5892] usb 5-1: config 0 has an invalid interface number: 225 but max is 0 [ 367.652724][ T5892] usb 5-1: config 0 has no interface number 0 [ 367.693530][ T5892] usb 5-1: New USB device found, idVendor=9846, idProduct=9041, bcdDevice=e1.cb [ 367.712301][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.731090][ T5892] usb 5-1: Product: syz [ 367.751970][ T5892] usb 5-1: Manufacturer: syz [ 367.760292][ T29] audit: type=1804 audit(1736448940.443:157): pid=10478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1250" name="/newroot/35/file0/bus" dev="loop8" ino=2097152 res=1 errno=0 [ 367.762948][ T5892] usb 5-1: SerialNumber: syz [ 367.841519][ T5892] usb 5-1: config 0 descriptor?? [ 367.898638][ T9151] NILFS (loop8): disposed unprocessed dirty file(s) when detaching log writer [ 368.090476][T10480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.141636][T10480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.312252][ T5892] usb 5-1: USB disconnect, device number 10 [ 368.499176][T10510] loop9: detected capacity change from 0 to 2048 [ 368.527667][T10512] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 369.020771][T10523] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 369.233426][T10514] loop7: detected capacity change from 0 to 32768 [ 369.374282][T10514] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1261 (10514) [ 369.562498][T10514] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 369.578069][T10514] BTRFS info (device loop7): using sha256 (sha256-ni) checksum algorithm [ 369.621454][T10514] BTRFS info (device loop7): using free-space-tree [ 369.907045][T10512] NILFS (loop9): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 369.951629][T10514] BTRFS info (device loop7): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 369.972395][T10512] NILFS error (device loop9): nilfs_bmap_propagate: broken bmap (inode number=2) [ 369.996815][T10512] Remounting filesystem read-only [ 370.012153][ T7316] NILFS (loop9): disposed unprocessed dirty file(s) when stopping log writer [ 370.192045][ T5892] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 370.279677][ T9132] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 370.365667][ T5892] usb 1-1: config 0 has an invalid interface number: 225 but max is 0 [ 370.374147][ T5892] usb 1-1: config 0 has no interface number 0 [ 370.424447][ T5892] usb 1-1: New USB device found, idVendor=9846, idProduct=9041, bcdDevice=e1.cb [ 370.434045][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.445659][ T5892] usb 1-1: Product: syz [ 370.451077][ T5892] usb 1-1: Manufacturer: syz [ 370.458907][ T5892] usb 1-1: SerialNumber: syz [ 370.471399][ T5892] usb 1-1: config 0 descriptor?? [ 370.713026][T10546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.737028][T10546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.850948][ T5892] usb 1-1: USB disconnect, device number 6 [ 371.195357][T10561] loop7: detected capacity change from 0 to 2048 [ 371.263617][T10566] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 371.317875][ T29] audit: type=1800 audit(1736448944.003:158): pid=10561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1268" name="bus" dev="loop7" ino=2097152 res=0 errno=0 [ 371.398241][T10569] NILFS error (device loop7): nilfs_lookup: deleted inode referenced: 12 [ 371.453307][T10569] Remounting filesystem read-only [ 371.510868][ T29] audit: type=1804 audit(1736448944.193:159): pid=10569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1268" name="/newroot/38/file0/bus" dev="loop7" ino=2097152 res=1 errno=0 [ 371.532844][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.583001][ T29] audit: type=1804 audit(1736448944.193:160): pid=10571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1268" name="/newroot/38/file0/bus" dev="loop7" ino=2097152 res=1 errno=0 [ 371.666335][ T29] audit: type=1804 audit(1736448944.193:161): pid=10571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1268" name="/newroot/38/file0/bus" dev="loop7" ino=2097152 res=1 errno=0 [ 371.874556][ T9132] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 371.982493][T10582] Process accounting resumed [ 372.065581][T10585] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 372.482853][T10593] loop4: detected capacity change from 0 to 2048 [ 372.494032][T10592] loop7: detected capacity change from 0 to 2048 [ 372.528532][T10597] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 372.535899][T10598] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 372.570655][ T29] audit: type=1800 audit(1736448945.253:162): pid=10593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1291" name="bus" dev="loop4" ino=2097152 res=0 errno=0 [ 372.678968][T10599] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 372.763277][T10599] Remounting filesystem read-only [ 372.833431][ T29] audit: type=1804 audit(1736448945.513:163): pid=10593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1291" name="/newroot/140/file0/bus" dev="loop4" ino=2097152 res=1 errno=0 [ 372.983348][ T8087] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 373.282673][T10616] tipc: Enabled bearer , priority 0 [ 373.382421][ T5470] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 373.414719][T10616] syzkaller0: entered promiscuous mode [ 373.422077][T10616] syzkaller0: entered allmulticast mode [ 373.443116][T10616] tipc: Resetting bearer [ 373.544461][ T5470] usb 2-1: config 0 has an invalid interface number: 225 but max is 0 [ 373.553088][ T5470] usb 2-1: config 0 has no interface number 0 [ 373.566080][ T5470] usb 2-1: New USB device found, idVendor=9846, idProduct=9041, bcdDevice=e1.cb [ 373.611987][ T5470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.630669][ T5470] usb 2-1: Product: syz [ 373.639856][T10614] tipc: Resetting bearer [ 373.646751][ T5470] usb 2-1: Manufacturer: syz [ 373.672092][ T5470] usb 2-1: SerialNumber: syz [ 373.713129][ T5470] usb 2-1: config 0 descriptor?? [ 373.874260][T10598] NILFS (loop7): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 373.909135][T10598] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=2) [ 373.938116][T10605] loop8: detected capacity change from 0 to 32768 [ 373.964623][T10605] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1283 (10605) [ 373.993641][T10611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.005239][T10598] Remounting filesystem read-only [ 374.013137][ T9132] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 374.070352][T10611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.136050][T10605] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 374.161964][T10605] BTRFS info (device loop8): using sha256 (sha256-ni) checksum algorithm [ 374.170529][T10605] BTRFS info (device loop8): using free-space-tree [ 374.202153][T10627] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1289'. [ 374.265736][ T5470] usb 2-1: USB disconnect, device number 6 [ 374.413831][T10605] BTRFS info (device loop8): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 374.613973][T10649] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 374.791545][ T9151] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 375.479977][T10655] loop8: detected capacity change from 0 to 1024 [ 375.525618][ T5831] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 375.772780][ T5831] usb 2-1: Using ep0 maxpacket: 8 [ 375.794977][ T5831] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 375.804753][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.850439][ T5831] usb 2-1: config 0 descriptor?? [ 376.069648][ T5831] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 376.083238][ T5831] asix 2-1:0.0: probe with driver asix failed with error -32 [ 376.132670][ T5831] usb 2-1: USB disconnect, device number 7 [ 376.730055][T10662] loop8: detected capacity change from 0 to 32768 [ 376.776835][T10662] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 376.991548][T10662] XFS (loop8): Ending clean mount [ 377.027076][T10662] XFS (loop8): Quotacheck needed: Please wait. [ 377.278937][T10662] XFS (loop8): Quotacheck: Done. [ 377.521163][ T9151] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 379.657398][T10614] tipc: Disabling bearer [ 380.028328][T10687] loop9: detected capacity change from 0 to 2048 [ 380.091736][T10694] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 380.131215][ T29] audit: type=1800 audit(1736448952.813:164): pid=10687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1301" name="bus" dev="loop9" ino=2097152 res=0 errno=0 [ 380.235193][T10687] NILFS error (device loop9): nilfs_lookup: deleted inode referenced: 12 [ 380.254779][T10685] loop1: detected capacity change from 0 to 40427 [ 380.263533][T10685] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 380.263568][T10687] Remounting filesystem read-only [ 380.271327][T10685] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 380.292041][T10685] F2FS-fs (loop1): invalid crc value [ 380.303246][T10685] F2FS-fs (loop1): Found nat_bits in checkpoint [ 380.340964][ T29] audit: type=1804 audit(1736448953.023:165): pid=10687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1301" name="/newroot/169/file0/bus" dev="loop9" ino=2097152 res=1 errno=0 [ 380.379421][T10685] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 380.386688][T10685] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 380.402017][ T5831] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 380.480544][ T7316] NILFS (loop9): disposed unprocessed dirty file(s) when detaching log writer [ 380.557706][ T5916] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 380.566900][ T5831] usb 5-1: Using ep0 maxpacket: 32 [ 380.584606][ T5916] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 380.616274][ T5831] usb 5-1: unable to get BOS descriptor or descriptor too short [ 380.625313][ T5831] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 380.642028][ T5831] usb 5-1: can't read configurations, error -71 [ 380.907265][T10705] loop7: detected capacity change from 0 to 2048 [ 380.936906][T10705] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.950810][T10705] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.971311][T10704] loop0: detected capacity change from 0 to 2048 [ 381.053804][T10709] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 381.069642][T10711] loop9: detected capacity change from 0 to 128 [ 381.277556][T10711] syz.9.1306: attempt to access beyond end of device [ 381.277556][T10711] loop9: rw=2049, sector=145, nr_sectors = 152 limit=128 [ 381.340907][T10718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1307'. [ 381.532713][ T9132] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.850714][T10726] loop8: detected capacity change from 0 to 2048 [ 381.902038][T10726] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 382.255257][T10709] NILFS (loop0): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 382.272676][T10709] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=2) [ 382.369476][T10709] Remounting filesystem read-only [ 382.444244][ T9119] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 382.614273][T10741] loop1: detected capacity change from 0 to 2048 [ 382.902487][T10743] tipc: Started in network mode [ 382.919778][T10743] tipc: Node identity 9251390e681, cluster identity 4711 [ 382.985884][T10743] tipc: Enabled bearer , priority 0 [ 383.092401][T10748] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 383.313811][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.320270][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.378058][T10750] syzkaller0: entered promiscuous mode [ 383.428570][T10750] syzkaller0: entered allmulticast mode [ 383.455453][T10750] tipc: Resetting bearer [ 383.566198][T10757] loop0: detected capacity change from 0 to 2048 [ 383.914592][T10760] loop9: detected capacity change from 0 to 40427 [ 383.925274][T10760] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 383.934517][T10760] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 383.945059][T10760] F2FS-fs (loop9): invalid crc value [ 383.965758][T10760] F2FS-fs (loop9): Found nat_bits in checkpoint [ 383.966081][T10742] tipc: Resetting bearer [ 384.013387][ T5892] tipc: Node number set to 4198578446 [ 384.023046][T10764] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 384.038481][T10760] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 384.045889][T10760] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 384.105717][ T29] audit: type=1800 audit(1736448956.773:166): pid=10757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1316" name="bus" dev="loop0" ino=2097152 res=0 errno=0 [ 384.163932][T10766] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 384.254371][T10766] Remounting filesystem read-only [ 384.312250][ T29] audit: type=1804 audit(1736448956.993:167): pid=10766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1316" name="/newroot/35/file0/bus" dev="loop0" ino=2097152 res=1 errno=0 [ 384.490935][T10748] NILFS (loop1): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 384.509636][T10748] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=2) [ 384.586460][T10748] Remounting filesystem read-only [ 384.626835][ T7900] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 384.662694][ T5916] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 384.678580][ T9119] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 384.824148][ T5916] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 385.311748][T10780] loop1: detected capacity change from 0 to 128 [ 385.484863][T10782] loop8: detected capacity change from 0 to 1024 [ 385.512709][T10782] EXT4-fs: Ignoring removed orlov option [ 385.518465][T10782] EXT4-fs: Ignoring removed nomblk_io_submit option [ 385.610874][T10782] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 385.621277][T10782] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.640202][T10780] syz.1.1324: attempt to access beyond end of device [ 385.640202][T10780] loop1: rw=2049, sector=145, nr_sectors = 512 limit=128 [ 385.748767][T10780] syz.1.1324: attempt to access beyond end of device [ 385.748767][T10780] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 385.782107][ T968] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 385.791789][T10780] syz.1.1324: attempt to access beyond end of device [ 385.791789][T10780] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 385.892766][T10780] syz.1.1324: attempt to access beyond end of device [ 385.892766][T10780] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 385.947587][ T9151] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.962362][ T968] usb 1-1: Using ep0 maxpacket: 32 [ 386.081271][ T968] usb 1-1: unable to get BOS descriptor or descriptor too short [ 386.090500][ T968] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 386.099016][ T968] usb 1-1: can't read configurations, error -71 [ 389.022317][T10742] tipc: Disabling bearer [ 389.195495][T10792] loop7: detected capacity change from 0 to 2048 [ 389.291046][T10792] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 389.465382][T10808] binder_alloc: 10807: binder_alloc_buf, no vma [ 390.047732][T10804] loop4: detected capacity change from 0 to 32768 [ 390.108046][T10804] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1326 (10804) [ 390.125728][T10804] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 390.136642][T10804] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 390.146504][T10804] BTRFS info (device loop4): using free-space-tree [ 390.185617][T10824] loop8: detected capacity change from 0 to 1024 [ 390.354288][T10845] loop1: detected capacity change from 0 to 512 [ 390.409778][T10804] BTRFS info (device loop4): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 390.451172][T10850] tipc: Failed to remove unknown binding: 66,1,1/1008362594:1802279380/1802279382 [ 390.465676][T10850] tipc: Failed to remove unknown binding: 66,1,1/1008362594:1802279380/1802279382 [ 390.476117][T10850] tipc: Failed to remove unknown binding: 66,1,1/1008362594:1802279380/1802279382 [ 390.535270][T10845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.572224][T10845] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.664964][T10845] EXT4-fs error (device loop1): ext4_readdir:259: inode #2: block 3: comm syz.1.1347: path /143/file0: bad entry in directory: rec_len % 4 != 0 - offset=12, inode=2197815810, rec_len=21, size=2048 fake=0 [ 390.710503][ T8087] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 390.713249][T10845] EXT4-fs error (device loop1): ext4_readdir:259: inode #2: block 12: comm syz.1.1347: path /143/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 390.753962][T10857] block device autoloading is deprecated and will be removed. [ 390.766817][T10845] EXT4-fs error (device loop1): ext4_readdir:259: inode #2: block 13: comm syz.1.1347: path /143/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 390.806840][T10863] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #2: block 18: comm syz.1.1347: lblock 23 mapped to illegal pblock 18 (length 1) [ 390.864121][T10845] EXT4-fs error (device loop1): ext4_readdir:259: inode #2: block 14: comm syz.1.1347: path /143/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 390.928925][T10845] EXT4-fs error (device loop1): ext4_readdir:259: inode #2: block 15: comm syz.1.1347: path /143/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 390.995681][T10845] EXT4-fs error (device loop1): ext4_readdir:259: inode #2: block 16: comm syz.1.1347: path /143/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 391.018436][T10845] EXT4-fs error (device loop1): ext4_readdir:259: inode #2: block 17: comm syz.1.1347: path /143/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 391.041931][T10845] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #2: block 18: comm syz.1.1347: lblock 23 mapped to illegal pblock 18 (length 1) [ 391.067336][T10845] EXT4-fs error (device loop1): ext4_readdir:259: inode #2: block 19: comm syz.1.1347: path /143/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 391.111545][ T5836] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 391.265537][T10872] binder: BINDER_SET_CONTEXT_MGR already set [ 391.272641][T10872] binder: 10871:10872 ioctl 4018620d 20000040 returned -16 [ 391.575732][ T7900] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.586516][T10883] loop9: detected capacity change from 0 to 1024 [ 391.594162][T10883] EXT4-fs: Ignoring removed nobh option [ 391.600143][T10883] EXT4-fs: Ignoring removed bh option [ 392.144525][T10883] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.582069][ T29] audit: type=1804 audit(1736448965.233:168): pid=10883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1360" name="/newroot/185/file1/bus" dev="loop9" ino=18 res=1 errno=0 [ 392.601893][T10893] binder: BINDER_SET_CONTEXT_MGR already set [ 392.609972][T10893] binder: 10892:10893 ioctl 4018620d 200001c0 returned -16 [ 392.713378][T10896] loop1: detected capacity change from 0 to 512 [ 392.722091][ T29] audit: type=1804 audit(1736448965.393:169): pid=10883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.1360" name="/newroot/185/file1/bus" dev="loop9" ino=18 res=1 errno=0 [ 392.768729][T10896] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 392.782032][T10896] UDF-fs: Scanning with blocksize 512 failed [ 392.802925][T10896] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 392.835969][T10896] UDF-fs: Scanning with blocksize 1024 failed [ 392.861991][T10896] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 392.879991][T10896] UDF-fs: Scanning with blocksize 2048 failed [ 392.894858][T10896] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 392.913582][ T7316] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.936202][T10896] UDF-fs: warning (device loop1): udf_fill_super: No fileset found [ 393.086921][T10896] overlayfs: bad index found (index=index/00fb21000122c9f354f2bb44faa5cdbe83dfd806603fa144046903000000000000, ftype=2000, origin ftype=a000). [ 393.524769][T10919] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 393.716112][T10923] tipc: Enabled bearer , priority 10 [ 393.773698][T10927] loop9: detected capacity change from 0 to 2048 [ 393.814241][T10927] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.012353][T10934] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1376'. [ 394.152301][ T7316] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.482634][ T968] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 394.702063][ T968] usb 10-1: Using ep0 maxpacket: 8 [ 394.748634][ T968] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 394.752642][T10958] loop1: detected capacity change from 0 to 256 [ 394.771265][ T968] usb 10-1: config 179 has no interface number 0 [ 394.792419][ T968] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 394.795230][T10958] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 394.825103][ T5831] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 394.832672][ T968] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 394.832739][ T968] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 394.832794][ T968] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 394.832852][ T968] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 394.852248][ T5836] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 394.927145][T10958] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 394.953896][ T968] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 394.963945][T10958] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 394.971647][T10958] UDF-fs: Scanning with blocksize 512 failed [ 395.006155][ T968] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.045821][ T5831] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 395.047064][T10958] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 395.054811][ T5831] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.090657][T10943] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 395.102184][ T5831] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 395.133443][ T5831] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 395.146245][ T29] audit: type=1800 audit(1736448967.833:170): pid=10962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1388" name="/" dev="9p" ino=2 res=0 errno=0 [ 395.158891][ T5831] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 173, changing to 11 [ 395.170716][T10958] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 395.207311][ T5831] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 17911, setting to 1024 [ 395.260307][ T5831] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 395.280281][ T5831] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 395.303149][ T5831] usb 9-1: Product: syz [ 395.312964][ T5831] usb 9-1: Manufacturer: syz [ 395.335040][T10952] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 395.344487][ T5831] cdc_wdm 9-1:1.0: skipping garbage [ 395.371993][ T5831] cdc_wdm 9-1:1.0: skipping garbage [ 395.400729][ T5831] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 395.425081][ T5831] cdc_wdm 9-1:1.0: Unknown control protocol [ 395.495744][ T5831] usb 10-1: USB disconnect, device number 7 [ 395.495854][ C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 395.510374][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 395.520038][ C0] ================================================================== [ 395.528222][ C0] BUG: KASAN: slab-use-after-free in register_lock_class+0x1033/0x1240 [ 395.536534][ C0] Read of size 1 at addr ffff88807ac2e091 by task syz.1.1386/10957 [ 395.544463][ C0] [ 395.546809][ C0] CPU: 0 UID: 0 PID: 10957 Comm: syz.1.1386 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 395.557627][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 395.567719][ C0] Call Trace: [ 395.571022][ C0] [ 395.573897][ C0] dump_stack_lvl+0x116/0x1f0 [ 395.578630][ C0] print_report+0xc3/0x620 [ 395.583095][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.588772][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.594463][ C0] ? __phys_addr+0xc6/0x150 [ 395.599038][ C0] kasan_report+0xd9/0x110 [ 395.603504][ C0] ? register_lock_class+0x1033/0x1240 [ 395.609094][ C0] ? register_lock_class+0x1033/0x1240 [ 395.614592][ C0] register_lock_class+0x1033/0x1240 [ 395.619919][ C0] ? __pfx_register_lock_class+0x10/0x10 [ 395.625590][ C0] __lock_acquire+0x135/0x3c40 [ 395.630398][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 395.635635][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 395.640868][ C0] lock_acquire.part.0+0x11b/0x380 [ 395.646041][ C0] ? __wake_up+0x1c/0x60 [ 395.650403][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 395.656074][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.661737][ C0] ? rcu_is_watching+0x12/0xc0 [ 395.666548][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.672215][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 395.677466][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 395.683142][ C0] ? __wake_up+0x1c/0x60 [ 395.687431][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.693091][ C0] ? lock_acquire+0x2f/0xb0 [ 395.697627][ C0] ? __wake_up+0x1c/0x60 [ 395.701903][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 395.707153][ C0] ? __wake_up+0x1c/0x60 [ 395.711428][ C0] __wake_up+0x1c/0x60 [ 395.715528][ C0] usb_anchor_resume_wakeups+0xc2/0xe0 [ 395.721040][ C0] __usb_hcd_giveback_urb+0x3b7/0x6e0 [ 395.726451][ C0] usb_hcd_giveback_urb+0x396/0x450 [ 395.731685][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.737367][ C0] dummy_timer+0x17f7/0x3960 [ 395.742001][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.747667][ C0] ? mark_lock+0xb5/0xc60 [ 395.752038][ C0] ? __pfx_lock_release+0x10/0x10 [ 395.757110][ C0] ? lock_acquire+0x2f/0xb0 [ 395.761646][ C0] ? debug_object_deactivate+0x13b/0x370 [ 395.767318][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.773157][ C0] ? find_held_lock+0x2d/0x110 [ 395.777972][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.783649][ C0] ? __hrtimer_run_queues+0x53d/0xae0 [ 395.789076][ C0] ? __pfx_lock_release+0x10/0x10 [ 395.794142][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 395.799127][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.804796][ C0] ? mark_held_locks+0x9f/0xe0 [ 395.809597][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 395.815457][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 395.820438][ C0] __hrtimer_run_queues+0x20d/0xae0 [ 395.825688][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 395.831450][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.837117][ C0] hrtimer_run_softirq+0x17d/0x350 [ 395.842281][ C0] handle_softirqs+0x216/0x8f0 [ 395.847087][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 395.852412][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.858077][ C0] __irq_exit_rcu+0x109/0x170 [ 395.862793][ C0] irq_exit_rcu+0x9/0x30 [ 395.867071][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 395.872771][ C0] [ 395.875714][ C0] [ 395.878658][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 395.884696][ C0] RIP: 0010:unwind_get_return_address+0x4e/0xa0 [ 395.890976][ C0] Code: 7e 59 8b 03 85 c0 75 09 5b 31 c0 5d e9 86 07 07 0a 48 8d 6b 48 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 3c 02 00 <75> 36 48 8b 7b 48 e8 37 3f 1b 00 85 c0 74 cf 48 b8 00 00 00 00 00 [ 395.910799][ C0] RSP: 0018:ffffc9000be67488 EFLAGS: 00000246 [ 395.916898][ C0] RAX: dffffc0000000000 RBX: ffffc9000be674a0 RCX: 0000000000000000 [ 395.924896][ C0] RDX: 1ffff920017cce9d RSI: 0000000000000006 RDI: ffffc9000be674a0 [ 395.932888][ C0] RBP: ffffc9000be674e8 R08: ffffffff91a54cb2 R09: ffffffff91a54bf0 [ 395.940882][ C0] R10: ffffc9000be674ff R11: 00000000000a4001 R12: ffffffff8185d2b0 [ 395.948883][ C0] R13: ffffc9000be67560 R14: 0000000000000000 R15: ffff888070e89e00 [ 395.956885][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 395.963113][ C0] arch_stack_walk+0xa7/0x100 [ 395.967926][ C0] stack_trace_save+0x95/0xd0 [ 395.972651][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 395.978097][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.983789][ C0] save_stack+0x162/0x1f0 [ 395.988171][ C0] ? __pfx_save_stack+0x10/0x10 [ 395.993072][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 395.998737][ C0] ? free_unref_folios+0xa7b/0x14f0 [ 396.003963][ C0] ? folios_put_refs+0x587/0x7b0 [ 396.008954][ C0] ? free_pages_and_swap_cache+0x36d/0x510 [ 396.014819][ C0] ? __tlb_batch_free_encoded_pages+0xf9/0x290 [ 396.021006][ C0] ? tlb_finish_mmu+0x168/0x7b0 [ 396.025885][ C0] ? exit_mmap+0x3df/0xb20 [ 396.030349][ C0] ? __mmput+0x12a/0x4c0 [ 396.034623][ C0] ? mmput+0x62/0x70 [ 396.038546][ C0] ? do_exit+0x9ba/0x2d70 [ 396.042919][ C0] ? do_group_exit+0xd3/0x2a0 [ 396.047641][ C0] ? __x64_sys_exit_group+0x3e/0x50 [ 396.052885][ C0] ? x64_sys_call+0x151f/0x1720 [ 396.057776][ C0] ? do_syscall_64+0xcd/0x250 [ 396.062541][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.068776][ C0] __reset_page_owner+0x8d/0x400 [ 396.073783][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.079461][ C0] free_unref_folios+0xa7b/0x14f0 [ 396.084541][ C0] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 396.090402][ C0] folios_put_refs+0x587/0x7b0 [ 396.095236][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 396.100579][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.106511][ C0] ? lock_acquire+0x2f/0xb0 [ 396.111050][ C0] ? mlock_drain_local+0x6f/0x4f0 [ 396.116134][ C0] free_pages_and_swap_cache+0x36d/0x510 [ 396.121832][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 396.128067][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.133746][ C0] ? native_tlb_remove_table+0x2e/0x50 [ 396.139282][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.144972][ C0] ? __pfx___might_resched+0x10/0x10 [ 396.150317][ C0] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 396.156354][ C0] tlb_finish_mmu+0x168/0x7b0 [ 396.161079][ C0] exit_mmap+0x3df/0xb20 [ 396.165389][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 396.170205][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.175881][ C0] ? __pfx_mark_lock+0x10/0x10 [ 396.180695][ C0] __mmput+0x12a/0x4c0 [ 396.184805][ C0] mmput+0x62/0x70 [ 396.188567][ C0] do_exit+0x9ba/0x2d70 [ 396.192779][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.198447][ C0] ? __pfx_do_exit+0x10/0x10 [ 396.203094][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.208767][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 396.214184][ C0] do_group_exit+0xd3/0x2a0 [ 396.218753][ C0] __x64_sys_exit_group+0x3e/0x50 [ 396.223839][ C0] x64_sys_call+0x151f/0x1720 [ 396.228569][ C0] do_syscall_64+0xcd/0x250 [ 396.233124][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.239070][ C0] RIP: 0033:0x7f05a6d85d29 [ 396.243609][ C0] Code: Unable to access opcode bytes at 0x7f05a6d85cff. [ 396.250747][ C0] RSP: 002b:00007ffcadce0958 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 396.259212][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f05a6d85d29 [ 396.267225][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 396.275227][ C0] RBP: 00007ffcadce09ac R08: 00007ffcadce0a3f R09: 00000000000604cc [ 396.283227][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000032 [ 396.291250][ C0] R13: 00000000000604cc R14: 00007ffcadce0a00 R15: 00007ffcadce0a00 [ 396.299263][ C0] [ 396.302308][ C0] [ 396.304643][ C0] Allocated by task 968: [ 396.308892][ C0] kasan_save_stack+0x33/0x60 [ 396.313637][ C0] kasan_save_track+0x14/0x30 [ 396.318346][ C0] __kasan_kmalloc+0xaa/0xb0 [ 396.323497][ C0] xpad_probe+0x27e/0x1f50 [ 396.328037][ C0] usb_probe_interface+0x303/0x9c0 [ 396.333185][ C0] really_probe+0x241/0xa90 [ 396.337732][ C0] __driver_probe_device+0x1de/0x440 [ 396.343061][ C0] driver_probe_device+0x4c/0x1b0 [ 396.348136][ C0] __device_attach_driver+0x1df/0x310 [ 396.353728][ C0] bus_for_each_drv+0x15a/0x1e0 [ 396.358612][ C0] __device_attach+0x1e8/0x4b0 [ 396.363427][ C0] bus_probe_device+0x17f/0x1c0 [ 396.368314][ C0] device_add+0x114b/0x1a70 [ 396.372870][ C0] usb_set_configuration+0x10cb/0x1c50 [ 396.378356][ C0] usb_generic_driver_probe+0xb1/0x110 [ 396.383867][ C0] usb_probe_device+0xef/0x3e0 [ 396.388673][ C0] really_probe+0x241/0xa90 [ 396.393223][ C0] __driver_probe_device+0x1de/0x440 [ 396.398549][ C0] driver_probe_device+0x4c/0x1b0 [ 396.403700][ C0] __device_attach_driver+0x1df/0x310 [ 396.409110][ C0] bus_for_each_drv+0x15a/0x1e0 [ 396.413997][ C0] __device_attach+0x1e8/0x4b0 [ 396.418896][ C0] bus_probe_device+0x17f/0x1c0 [ 396.423795][ C0] device_add+0x114b/0x1a70 [ 396.428352][ C0] usb_new_device+0xd90/0x1a10 [ 396.433146][ C0] hub_event+0x2d9a/0x4e10 [ 396.437596][ C0] process_one_work+0x9c8/0x1ba0 [ 396.442574][ C0] worker_thread+0x6c8/0xf00 [ 396.447204][ C0] kthread+0x2c4/0x3a0 [ 396.451332][ C0] ret_from_fork+0x48/0x80 [ 396.455793][ C0] ret_from_fork_asm+0x1a/0x30 [ 396.460777][ C0] [ 396.463114][ C0] Freed by task 5831: [ 396.467103][ C0] kasan_save_stack+0x33/0x60 [ 396.471813][ C0] kasan_save_track+0x14/0x30 [ 396.476519][ C0] kasan_save_free_info+0x3b/0x60 [ 396.481584][ C0] __kasan_slab_free+0x51/0x70 [ 396.486371][ C0] kfree+0x14f/0x4b0 [ 396.490305][ C0] xpad_disconnect+0x1cf/0x580 [ 396.495196][ C0] usb_unbind_interface+0x1e5/0x960 [ 396.500481][ C0] device_remove+0x125/0x170 [ 396.505123][ C0] device_release_driver_internal+0x44a/0x610 [ 396.511227][ C0] bus_remove_device+0x22f/0x420 [ 396.516209][ C0] device_del+0x396/0x9f0 [ 396.520560][ C0] usb_disable_device+0x36c/0x7f0 [ 396.525595][ C0] usb_disconnect+0x2e1/0x920 [ 396.530309][ C0] hub_event+0x1da5/0x4e10 [ 396.534827][ C0] process_one_work+0x9c8/0x1ba0 [ 396.539782][ C0] worker_thread+0x6c8/0xf00 [ 396.544392][ C0] kthread+0x2c4/0x3a0 [ 396.548478][ C0] ret_from_fork+0x48/0x80 [ 396.552907][ C0] ret_from_fork_asm+0x1a/0x30 [ 396.557697][ C0] [ 396.560048][ C0] The buggy address belongs to the object at ffff88807ac2e000 [ 396.560048][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 396.574211][ C0] The buggy address is located 145 bytes inside of [ 396.574211][ C0] freed 1024-byte region [ffff88807ac2e000, ffff88807ac2e400) [ 396.588174][ C0] [ 396.590507][ C0] The buggy address belongs to the physical page: [ 396.596934][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ac28 [ 396.605713][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 396.614221][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 396.621769][ C0] page_type: f5(slab) [ 396.625791][ C0] raw: 00fff00000000040 ffff88801b041dc0 ffffea0001553c00 dead000000000002 [ 396.634388][ C0] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 396.643027][ C0] head: 00fff00000000040 ffff88801b041dc0 ffffea0001553c00 dead000000000002 [ 396.651717][ C0] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 396.660402][ C0] head: 00fff00000000003 ffffea0001eb0a01 ffffffffffffffff 0000000000000000 [ 396.669087][ C0] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 396.677768][ C0] page dumped because: kasan: bad access detected [ 396.684192][ C0] page_owner tracks the page as allocated [ 396.689905][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 64, tgid 64 (kworker/u8:5), ts 100896424986, free_ts 100755842294 [ 396.709123][ C0] post_alloc_hook+0x2d1/0x350 [ 396.713977][ C0] get_page_from_freelist+0xfce/0x2f80 [ 396.719456][ C0] __alloc_pages_noprof+0x223/0x25b0 [ 396.724848][ C0] alloc_pages_mpol_noprof+0x2c9/0x610 [ 396.730334][ C0] new_slab+0x2c9/0x410 [ 396.734518][ C0] ___slab_alloc+0xd7d/0x17a0 [ 396.739238][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 396.744667][ C0] __kmalloc_noprof+0x2ec/0x510 [ 396.749730][ C0] ieee802_11_parse_elems_full+0xea/0x1680 [ 396.755571][ C0] ieee80211_ibss_rx_queued_mgmt+0xc4f/0x2f50 [ 396.761664][ C0] ieee80211_iface_work+0xc0b/0xf00 [ 396.766887][ C0] cfg80211_wiphy_work+0x3e1/0x560 [ 396.772289][ C0] process_one_work+0x9c8/0x1ba0 [ 396.777337][ C0] worker_thread+0x6c8/0xf00 [ 396.781970][ C0] kthread+0x2c4/0x3a0 [ 396.786083][ C0] ret_from_fork+0x48/0x80 [ 396.790546][ C0] page last free pid 5198 tgid 5198 stack trace: [ 396.796875][ C0] free_unref_page+0x661/0x1080 [ 396.801760][ C0] __put_partials+0x14c/0x170 [ 396.806466][ C0] qlist_free_all+0x4e/0x120 [ 396.811085][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 396.816586][ C0] __kasan_slab_alloc+0x69/0x90 [ 396.821467][ C0] kmem_cache_alloc_noprof+0x226/0x3d0 [ 396.826956][ C0] getname_flags.part.0+0x4c/0x550 [ 396.832194][ C0] getname+0x8d/0xe0 [ 396.836129][ C0] do_sys_openat2+0x104/0x1e0 [ 396.841031][ C0] __x64_sys_openat+0x175/0x210 [ 396.846163][ C0] do_syscall_64+0xcd/0x250 [ 396.850692][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.856618][ C0] [ 396.858986][ C0] Memory state around the buggy address: [ 396.864615][ C0] ffff88807ac2df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 396.872767][ C0] ffff88807ac2e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 396.880925][ C0] >ffff88807ac2e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 396.889076][ C0] ^ [ 396.893667][ C0] ffff88807ac2e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 396.901746][ C0] ffff88807ac2e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 396.909814][ C0] ================================================================== [ 396.917885][ C0] Disabling lock debugging due to kernel taint [ 396.924031][ C0] ================================================================== [ 396.932094][ C0] BUG: KASAN: slab-use-after-free in register_lock_class+0x1089/0x1240 [ 396.940357][ C0] Read of size 1 at addr ffff88807ac2e090 by task syz.1.1386/10957 [ 396.948253][ C0] [ 396.950579][ C0] CPU: 0 UID: 0 PID: 10957 Comm: syz.1.1386 Tainted: G B 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 396.963038][ C0] Tainted: [B]=BAD_PAGE [ 396.967191][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 396.977270][ C0] Call Trace: [ 396.980900][ C0] [ 396.983924][ C0] dump_stack_lvl+0x116/0x1f0 [ 396.988715][ C0] print_report+0xc3/0x620 [ 396.993149][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.998790][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.004441][ C0] ? __phys_addr+0xc6/0x150 [ 397.009257][ C0] kasan_report+0xd9/0x110 [ 397.013687][ C0] ? register_lock_class+0x1089/0x1240 [ 397.019166][ C0] ? register_lock_class+0x1089/0x1240 [ 397.024655][ C0] register_lock_class+0x1089/0x1240 [ 397.029969][ C0] ? __pfx_register_lock_class+0x10/0x10 [ 397.035627][ C0] __lock_acquire+0x135/0x3c40 [ 397.040414][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 397.045635][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 397.050858][ C0] lock_acquire.part.0+0x11b/0x380 [ 397.055986][ C0] ? __wake_up+0x1c/0x60 [ 397.060240][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 397.065897][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.071544][ C0] ? rcu_is_watching+0x12/0xc0 [ 397.076342][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.081993][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 397.087224][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 397.092622][ C0] ? __wake_up+0x1c/0x60 [ 397.096877][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.102523][ C0] ? lock_acquire+0x2f/0xb0 [ 397.107039][ C0] ? __wake_up+0x1c/0x60 [ 397.111297][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 397.116546][ C0] ? __wake_up+0x1c/0x60 [ 397.120835][ C0] __wake_up+0x1c/0x60 [ 397.124927][ C0] usb_anchor_resume_wakeups+0xc2/0xe0 [ 397.130420][ C0] __usb_hcd_giveback_urb+0x3b7/0x6e0 [ 397.135832][ C0] usb_hcd_giveback_urb+0x396/0x450 [ 397.141058][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.146775][ C0] dummy_timer+0x17f7/0x3960 [ 397.151401][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.157076][ C0] ? mark_lock+0xb5/0xc60 [ 397.161427][ C0] ? __pfx_lock_release+0x10/0x10 [ 397.166477][ C0] ? lock_acquire+0x2f/0xb0 [ 397.171003][ C0] ? debug_object_deactivate+0x13b/0x370 [ 397.176659][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.182311][ C0] ? find_held_lock+0x2d/0x110 [ 397.187116][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.192773][ C0] ? __hrtimer_run_queues+0x53d/0xae0 [ 397.198281][ C0] ? __pfx_lock_release+0x10/0x10 [ 397.203322][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 397.208284][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.213929][ C0] ? mark_held_locks+0x9f/0xe0 [ 397.218804][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 397.224661][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 397.229636][ C0] __hrtimer_run_queues+0x20d/0xae0 [ 397.234885][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 397.240645][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.246309][ C0] hrtimer_run_softirq+0x17d/0x350 [ 397.251460][ C0] handle_softirqs+0x216/0x8f0 [ 397.256261][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 397.261579][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.267325][ C0] __irq_exit_rcu+0x109/0x170 [ 397.272127][ C0] irq_exit_rcu+0x9/0x30 [ 397.276398][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 397.282247][ C0] [ 397.285182][ C0] [ 397.288202][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 397.294218][ C0] RIP: 0010:unwind_get_return_address+0x4e/0xa0 [ 397.300486][ C0] Code: 7e 59 8b 03 85 c0 75 09 5b 31 c0 5d e9 86 07 07 0a 48 8d 6b 48 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 3c 02 00 <75> 36 48 8b 7b 48 e8 37 3f 1b 00 85 c0 74 cf 48 b8 00 00 00 00 00 [ 397.320209][ C0] RSP: 0018:ffffc9000be67488 EFLAGS: 00000246 [ 397.326378][ C0] RAX: dffffc0000000000 RBX: ffffc9000be674a0 RCX: 0000000000000000 [ 397.334352][ C0] RDX: 1ffff920017cce9d RSI: 0000000000000006 RDI: ffffc9000be674a0 [ 397.342354][ C0] RBP: ffffc9000be674e8 R08: ffffffff91a54cb2 R09: ffffffff91a54bf0 [ 397.350449][ C0] R10: ffffc9000be674ff R11: 00000000000a4001 R12: ffffffff8185d2b0 [ 397.358711][ C0] R13: ffffc9000be67560 R14: 0000000000000000 R15: ffff888070e89e00 [ 397.366700][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 397.372988][ C0] arch_stack_walk+0xa7/0x100 [ 397.377702][ C0] stack_trace_save+0x95/0xd0 [ 397.382412][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 397.387821][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.393470][ C0] save_stack+0x162/0x1f0 [ 397.397931][ C0] ? __pfx_save_stack+0x10/0x10 [ 397.402827][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 397.408490][ C0] ? free_unref_folios+0xa7b/0x14f0 [ 397.413722][ C0] ? folios_put_refs+0x587/0x7b0 [ 397.418706][ C0] ? free_pages_and_swap_cache+0x36d/0x510 [ 397.424546][ C0] ? __tlb_batch_free_encoded_pages+0xf9/0x290 [ 397.430812][ C0] ? tlb_finish_mmu+0x168/0x7b0 [ 397.435693][ C0] ? exit_mmap+0x3df/0xb20 [ 397.440155][ C0] ? __mmput+0x12a/0x4c0 [ 397.444424][ C0] ? mmput+0x62/0x70 [ 397.448340][ C0] ? do_exit+0x9ba/0x2d70 [ 397.452704][ C0] ? do_group_exit+0xd3/0x2a0 [ 397.457408][ C0] ? __x64_sys_exit_group+0x3e/0x50 [ 397.462728][ C0] ? x64_sys_call+0x151f/0x1720 [ 397.467610][ C0] ? do_syscall_64+0xcd/0x250 [ 397.472333][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.478467][ C0] __reset_page_owner+0x8d/0x400 [ 397.483452][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.489107][ C0] free_unref_folios+0xa7b/0x14f0 [ 397.494235][ C0] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 397.500084][ C0] folios_put_refs+0x587/0x7b0 [ 397.504883][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 397.510204][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.515879][ C0] ? lock_acquire+0x2f/0xb0 [ 397.520397][ C0] ? mlock_drain_local+0x6f/0x4f0 [ 397.525447][ C0] free_pages_and_swap_cache+0x36d/0x510 [ 397.531118][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 397.537319][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.543230][ C0] ? native_tlb_remove_table+0x2e/0x50 [ 397.548732][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.554374][ C0] ? __pfx___might_resched+0x10/0x10 [ 397.559689][ C0] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 397.565688][ C0] tlb_finish_mmu+0x168/0x7b0 [ 397.570399][ C0] exit_mmap+0x3df/0xb20 [ 397.574705][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 397.579493][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.585143][ C0] ? __pfx_mark_lock+0x10/0x10 [ 397.589929][ C0] __mmput+0x12a/0x4c0 [ 397.594015][ C0] mmput+0x62/0x70 [ 397.597752][ C0] do_exit+0x9ba/0x2d70 [ 397.601935][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.607585][ C0] ? __pfx_do_exit+0x10/0x10 [ 397.612222][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.618039][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 397.623425][ C0] do_group_exit+0xd3/0x2a0 [ 397.627956][ C0] __x64_sys_exit_group+0x3e/0x50 [ 397.633006][ C0] x64_sys_call+0x151f/0x1720 [ 397.637707][ C0] do_syscall_64+0xcd/0x250 [ 397.642251][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.648169][ C0] RIP: 0033:0x7f05a6d85d29 [ 397.652585][ C0] Code: Unable to access opcode bytes at 0x7f05a6d85cff. [ 397.659620][ C0] RSP: 002b:00007ffcadce0958 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 397.668061][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f05a6d85d29 [ 397.676144][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 397.684217][ C0] RBP: 00007ffcadce09ac R08: 00007ffcadce0a3f R09: 00000000000604cc [ 397.692204][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000032 [ 397.700185][ C0] R13: 00000000000604cc R14: 00007ffcadce0a00 R15: 00007ffcadce0a00 [ 397.708184][ C0] [ 397.711211][ C0] [ 397.713538][ C0] Allocated by task 968: [ 397.717775][ C0] kasan_save_stack+0x33/0x60 [ 397.722474][ C0] kasan_save_track+0x14/0x30 [ 397.727169][ C0] __kasan_kmalloc+0xaa/0xb0 [ 397.731770][ C0] xpad_probe+0x27e/0x1f50 [ 397.736200][ C0] usb_probe_interface+0x303/0x9c0 [ 397.741329][ C0] really_probe+0x241/0xa90 [ 397.745862][ C0] __driver_probe_device+0x1de/0x440 [ 397.751196][ C0] driver_probe_device+0x4c/0x1b0 [ 397.756506][ C0] __device_attach_driver+0x1df/0x310 [ 397.761938][ C0] bus_for_each_drv+0x15a/0x1e0 [ 397.766828][ C0] __device_attach+0x1e8/0x4b0 [ 397.771657][ C0] bus_probe_device+0x17f/0x1c0 [ 397.776532][ C0] device_add+0x114b/0x1a70 [ 397.781066][ C0] usb_set_configuration+0x10cb/0x1c50 [ 397.786578][ C0] usb_generic_driver_probe+0xb1/0x110 [ 397.792074][ C0] usb_probe_device+0xef/0x3e0 [ 397.796853][ C0] really_probe+0x241/0xa90 [ 397.801401][ C0] __driver_probe_device+0x1de/0x440 [ 397.806707][ C0] driver_probe_device+0x4c/0x1b0 [ 397.811754][ C0] __device_attach_driver+0x1df/0x310 [ 397.817145][ C0] bus_for_each_drv+0x15a/0x1e0 [ 397.822034][ C0] __device_attach+0x1e8/0x4b0 [ 397.826839][ C0] bus_probe_device+0x17f/0x1c0 [ 397.831704][ C0] device_add+0x114b/0x1a70 [ 397.836233][ C0] usb_new_device+0xd90/0x1a10 [ 397.841184][ C0] hub_event+0x2d9a/0x4e10 [ 397.845614][ C0] process_one_work+0x9c8/0x1ba0 [ 397.850563][ C0] worker_thread+0x6c8/0xf00 [ 397.855167][ C0] kthread+0x2c4/0x3a0 [ 397.859256][ C0] ret_from_fork+0x48/0x80 [ 397.863685][ C0] ret_from_fork_asm+0x1a/0x30 [ 397.868473][ C0] [ 397.870791][ C0] Freed by task 5831: [ 397.874777][ C0] kasan_save_stack+0x33/0x60 [ 397.879475][ C0] kasan_save_track+0x14/0x30 [ 397.884248][ C0] kasan_save_free_info+0x3b/0x60 [ 397.889307][ C0] __kasan_slab_free+0x51/0x70 [ 397.894081][ C0] kfree+0x14f/0x4b0 [ 397.898002][ C0] xpad_disconnect+0x1cf/0x580 [ 397.902867][ C0] usb_unbind_interface+0x1e5/0x960 [ 397.908130][ C0] device_remove+0x125/0x170 [ 397.912736][ C0] device_release_driver_internal+0x44a/0x610 [ 397.918823][ C0] bus_remove_device+0x22f/0x420 [ 397.923794][ C0] device_del+0x396/0x9f0 [ 397.928151][ C0] usb_disable_device+0x36c/0x7f0 [ 397.933182][ C0] usb_disconnect+0x2e1/0x920 [ 397.937865][ C0] hub_event+0x1da5/0x4e10 [ 397.942322][ C0] process_one_work+0x9c8/0x1ba0 [ 397.947316][ C0] worker_thread+0x6c8/0xf00 [ 397.951950][ C0] kthread+0x2c4/0x3a0 [ 397.956041][ C0] ret_from_fork+0x48/0x80 [ 397.960467][ C0] ret_from_fork_asm+0x1a/0x30 [ 397.965255][ C0] [ 397.967572][ C0] The buggy address belongs to the object at ffff88807ac2e000 [ 397.967572][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 397.981654][ C0] The buggy address is located 144 bytes inside of [ 397.981654][ C0] freed 1024-byte region [ffff88807ac2e000, ffff88807ac2e400) [ 397.995554][ C0] [ 397.997888][ C0] The buggy address belongs to the physical page: [ 398.004299][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ac28 [ 398.013062][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 398.021724][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 398.029276][ C0] page_type: f5(slab) [ 398.033268][ C0] raw: 00fff00000000040 ffff88801b041dc0 ffffea0001553c00 dead000000000002 [ 398.041862][ C0] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 398.050452][ C0] head: 00fff00000000040 ffff88801b041dc0 ffffea0001553c00 dead000000000002 [ 398.059129][ C0] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 398.067804][ C0] head: 00fff00000000003 ffffea0001eb0a01 ffffffffffffffff 0000000000000000 [ 398.076914][ C0] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 398.085670][ C0] page dumped because: kasan: bad access detected [ 398.092098][ C0] page_owner tracks the page as allocated [ 398.097805][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 64, tgid 64 (kworker/u8:5), ts 100896424986, free_ts 100755842294 [ 398.116944][ C0] post_alloc_hook+0x2d1/0x350 [ 398.121736][ C0] get_page_from_freelist+0xfce/0x2f80 [ 398.127227][ C0] __alloc_pages_noprof+0x223/0x25b0 [ 398.132523][ C0] alloc_pages_mpol_noprof+0x2c9/0x610 [ 398.137996][ C0] new_slab+0x2c9/0x410 [ 398.142179][ C0] ___slab_alloc+0xd7d/0x17a0 [ 398.146886][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 398.152290][ C0] __kmalloc_noprof+0x2ec/0x510 [ 398.157149][ C0] ieee802_11_parse_elems_full+0xea/0x1680 [ 398.162973][ C0] ieee80211_ibss_rx_queued_mgmt+0xc4f/0x2f50 [ 398.169054][ C0] ieee80211_iface_work+0xc0b/0xf00 [ 398.174266][ C0] cfg80211_wiphy_work+0x3e1/0x560 [ 398.179657][ C0] process_one_work+0x9c8/0x1ba0 [ 398.184607][ C0] worker_thread+0x6c8/0xf00 [ 398.189297][ C0] kthread+0x2c4/0x3a0 [ 398.193390][ C0] ret_from_fork+0x48/0x80 [ 398.197817][ C0] page last free pid 5198 tgid 5198 stack trace: [ 398.204142][ C0] free_unref_page+0x661/0x1080 [ 398.209003][ C0] __put_partials+0x14c/0x170 [ 398.213703][ C0] qlist_free_all+0x4e/0x120 [ 398.218315][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 398.223799][ C0] __kasan_slab_alloc+0x69/0x90 [ 398.228654][ C0] kmem_cache_alloc_noprof+0x226/0x3d0 [ 398.234296][ C0] getname_flags.part.0+0x4c/0x550 [ 398.239419][ C0] getname+0x8d/0xe0 [ 398.243615][ C0] do_sys_openat2+0x104/0x1e0 [ 398.248343][ C0] __x64_sys_openat+0x175/0x210 [ 398.253234][ C0] do_syscall_64+0xcd/0x250 [ 398.257761][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.263682][ C0] [ 398.265999][ C0] Memory state around the buggy address: [ 398.271627][ C0] ffff88807ac2df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 398.279700][ C0] ffff88807ac2e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 398.287788][ C0] >ffff88807ac2e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 398.295853][ C0] ^ [ 398.300441][ C0] ffff88807ac2e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 398.308511][ C0] ffff88807ac2e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 398.316581][ C0] ================================================================== [ 398.324636][ C0] ================================================================== [ 398.332692][ C0] BUG: KASAN: slab-use-after-free in register_lock_class+0x10df/0x1240 [ 398.341038][ C0] Read of size 1 at addr ffff88807ac2e092 by task syz.1.1386/10957 [ 398.348932][ C0] [ 398.351256][ C0] CPU: 0 UID: 0 PID: 10957 Comm: syz.1.1386 Tainted: G B 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 398.363511][ C0] Tainted: [B]=BAD_PAGE [ 398.367679][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 398.377755][ C0] Call Trace: [ 398.381035][ C0] [ 398.383881][ C0] dump_stack_lvl+0x116/0x1f0 [ 398.388582][ C0] print_report+0xc3/0x620 [ 398.393030][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.398766][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.404412][ C0] ? __phys_addr+0xc6/0x150 [ 398.408940][ C0] kasan_report+0xd9/0x110 [ 398.413457][ C0] ? register_lock_class+0x10df/0x1240 [ 398.419116][ C0] ? register_lock_class+0x10df/0x1240 [ 398.424600][ C0] register_lock_class+0x10df/0x1240 [ 398.429903][ C0] ? __pfx_register_lock_class+0x10/0x10 [ 398.435554][ C0] __lock_acquire+0x135/0x3c40 [ 398.440443][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 398.445668][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 398.450893][ C0] lock_acquire.part.0+0x11b/0x380 [ 398.456050][ C0] ? __wake_up+0x1c/0x60 [ 398.460316][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 398.465988][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.471634][ C0] ? rcu_is_watching+0x12/0xc0 [ 398.476425][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.482088][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 398.487352][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 398.492752][ C0] ? __wake_up+0x1c/0x60 [ 398.497034][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.502690][ C0] ? lock_acquire+0x2f/0xb0 [ 398.507212][ C0] ? __wake_up+0x1c/0x60 [ 398.511469][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 398.516688][ C0] ? __wake_up+0x1c/0x60 [ 398.520946][ C0] __wake_up+0x1c/0x60 [ 398.525032][ C0] usb_anchor_resume_wakeups+0xc2/0xe0 [ 398.530527][ C0] __usb_hcd_giveback_urb+0x3b7/0x6e0 [ 398.535928][ C0] usb_hcd_giveback_urb+0x396/0x450 [ 398.541143][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.546791][ C0] dummy_timer+0x17f7/0x3960 [ 398.551403][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.557045][ C0] ? mark_lock+0xb5/0xc60 [ 398.561392][ C0] ? __pfx_lock_release+0x10/0x10 [ 398.566433][ C0] ? lock_acquire+0x2f/0xb0 [ 398.570946][ C0] ? debug_object_deactivate+0x13b/0x370 [ 398.576592][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.582232][ C0] ? find_held_lock+0x2d/0x110 [ 398.587029][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.592670][ C0] ? __hrtimer_run_queues+0x53d/0xae0 [ 398.598062][ C0] ? __pfx_lock_release+0x10/0x10 [ 398.603101][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 398.608056][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.613716][ C0] ? mark_held_locks+0x9f/0xe0 [ 398.618490][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 398.624318][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 398.629276][ C0] __hrtimer_run_queues+0x20d/0xae0 [ 398.634522][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 398.640266][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.646018][ C0] hrtimer_run_softirq+0x17d/0x350 [ 398.651156][ C0] handle_softirqs+0x216/0x8f0 [ 398.656065][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 398.661367][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.667011][ C0] __irq_exit_rcu+0x109/0x170 [ 398.671700][ C0] irq_exit_rcu+0x9/0x30 [ 398.675956][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 398.681609][ C0] [ 398.684537][ C0] [ 398.687551][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 398.693556][ C0] RIP: 0010:unwind_get_return_address+0x4e/0xa0 [ 398.699814][ C0] Code: 7e 59 8b 03 85 c0 75 09 5b 31 c0 5d e9 86 07 07 0a 48 8d 6b 48 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 3c 02 00 <75> 36 48 8b 7b 48 e8 37 3f 1b 00 85 c0 74 cf 48 b8 00 00 00 00 00 [ 398.719430][ C0] RSP: 0018:ffffc9000be67488 EFLAGS: 00000246 [ 398.725507][ C0] RAX: dffffc0000000000 RBX: ffffc9000be674a0 RCX: 0000000000000000 [ 398.733480][ C0] RDX: 1ffff920017cce9d RSI: 0000000000000006 RDI: ffffc9000be674a0 [ 398.741452][ C0] RBP: ffffc9000be674e8 R08: ffffffff91a54cb2 R09: ffffffff91a54bf0 [ 398.749426][ C0] R10: ffffc9000be674ff R11: 00000000000a4001 R12: ffffffff8185d2b0 [ 398.757399][ C0] R13: ffffc9000be67560 R14: 0000000000000000 R15: ffff888070e89e00 [ 398.765382][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 398.771665][ C0] arch_stack_walk+0xa7/0x100 [ 398.776378][ C0] stack_trace_save+0x95/0xd0 [ 398.781096][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 398.786497][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.792165][ C0] save_stack+0x162/0x1f0 [ 398.796524][ C0] ? __pfx_save_stack+0x10/0x10 [ 398.801414][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 398.807150][ C0] ? free_unref_folios+0xa7b/0x14f0 [ 398.812445][ C0] ? folios_put_refs+0x587/0x7b0 [ 398.817408][ C0] ? free_pages_and_swap_cache+0x36d/0x510 [ 398.823241][ C0] ? __tlb_batch_free_encoded_pages+0xf9/0x290 [ 398.829408][ C0] ? tlb_finish_mmu+0x168/0x7b0 [ 398.834280][ C0] ? exit_mmap+0x3df/0xb20 [ 398.838727][ C0] ? __mmput+0x12a/0x4c0 [ 398.842982][ C0] ? mmput+0x62/0x70 [ 398.846895][ C0] ? do_exit+0x9ba/0x2d70 [ 398.851277][ C0] ? do_group_exit+0xd3/0x2a0 [ 398.855976][ C0] ? __x64_sys_exit_group+0x3e/0x50 [ 398.861201][ C0] ? x64_sys_call+0x151f/0x1720 [ 398.866161][ C0] ? do_syscall_64+0xcd/0x250 [ 398.870884][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.877003][ C0] __reset_page_owner+0x8d/0x400 [ 398.881980][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.887631][ C0] free_unref_folios+0xa7b/0x14f0 [ 398.892672][ C0] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 398.898502][ C0] folios_put_refs+0x587/0x7b0 [ 398.903300][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 398.908612][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.914254][ C0] ? lock_acquire+0x2f/0xb0 [ 398.918768][ C0] ? mlock_drain_local+0x6f/0x4f0 [ 398.923810][ C0] free_pages_and_swap_cache+0x36d/0x510 [ 398.929472][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 398.935761][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.941405][ C0] ? native_tlb_remove_table+0x2e/0x50 [ 398.946903][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.952568][ C0] ? __pfx___might_resched+0x10/0x10 [ 398.957887][ C0] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 398.963886][ C0] tlb_finish_mmu+0x168/0x7b0 [ 398.968575][ C0] exit_mmap+0x3df/0xb20 [ 398.972865][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 398.977658][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.983400][ C0] ? __pfx_mark_lock+0x10/0x10 [ 398.988224][ C0] __mmput+0x12a/0x4c0 [ 398.992315][ C0] mmput+0x62/0x70 [ 398.996058][ C0] do_exit+0x9ba/0x2d70 [ 399.000243][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.005887][ C0] ? __pfx_do_exit+0x10/0x10 [ 399.010524][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.016179][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 399.021574][ C0] do_group_exit+0xd3/0x2a0 [ 399.026113][ C0] __x64_sys_exit_group+0x3e/0x50 [ 399.031171][ C0] x64_sys_call+0x151f/0x1720 [ 399.035889][ C0] do_syscall_64+0xcd/0x250 [ 399.040423][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.046342][ C0] RIP: 0033:0x7f05a6d85d29 [ 399.050760][ C0] Code: Unable to access opcode bytes at 0x7f05a6d85cff. [ 399.057775][ C0] RSP: 002b:00007ffcadce0958 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 399.066294][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f05a6d85d29 [ 399.074276][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 399.082253][ C0] RBP: 00007ffcadce09ac R08: 00007ffcadce0a3f R09: 00000000000604cc [ 399.090227][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000032 [ 399.098397][ C0] R13: 00000000000604cc R14: 00007ffcadce0a00 R15: 00007ffcadce0a00 [ 399.106477][ C0] [ 399.109498][ C0] [ 399.111815][ C0] Allocated by task 968: [ 399.116056][ C0] kasan_save_stack+0x33/0x60 [ 399.120743][ C0] kasan_save_track+0x14/0x30 [ 399.125427][ C0] __kasan_kmalloc+0xaa/0xb0 [ 399.130018][ C0] xpad_probe+0x27e/0x1f50 [ 399.134448][ C0] usb_probe_interface+0x303/0x9c0 [ 399.139572][ C0] really_probe+0x241/0xa90 [ 399.144090][ C0] __driver_probe_device+0x1de/0x440 [ 399.149404][ C0] driver_probe_device+0x4c/0x1b0 [ 399.154449][ C0] __device_attach_driver+0x1df/0x310 [ 399.159861][ C0] bus_for_each_drv+0x15a/0x1e0 [ 399.164721][ C0] __device_attach+0x1e8/0x4b0 [ 399.169520][ C0] bus_probe_device+0x17f/0x1c0 [ 399.174379][ C0] device_add+0x114b/0x1a70 [ 399.178903][ C0] usb_set_configuration+0x10cb/0x1c50 [ 399.184375][ C0] usb_generic_driver_probe+0xb1/0x110 [ 399.189861][ C0] usb_probe_device+0xef/0x3e0 [ 399.194637][ C0] really_probe+0x241/0xa90 [ 399.199159][ C0] __driver_probe_device+0x1de/0x440 [ 399.204728][ C0] driver_probe_device+0x4c/0x1b0 [ 399.209767][ C0] __device_attach_driver+0x1df/0x310 [ 399.215155][ C0] bus_for_each_drv+0x15a/0x1e0 [ 399.220037][ C0] __device_attach+0x1e8/0x4b0 [ 399.224839][ C0] bus_probe_device+0x17f/0x1c0 [ 399.229703][ C0] device_add+0x114b/0x1a70 [ 399.234229][ C0] usb_new_device+0xd90/0x1a10 [ 399.238999][ C0] hub_event+0x2d9a/0x4e10 [ 399.243609][ C0] process_one_work+0x9c8/0x1ba0 [ 399.248563][ C0] worker_thread+0x6c8/0xf00 [ 399.253163][ C0] kthread+0x2c4/0x3a0 [ 399.257249][ C0] ret_from_fork+0x48/0x80 [ 399.261675][ C0] ret_from_fork_asm+0x1a/0x30 [ 399.266484][ C0] [ 399.268805][ C0] Freed by task 5831: [ 399.272784][ C0] kasan_save_stack+0x33/0x60 [ 399.277471][ C0] kasan_save_track+0x14/0x30 [ 399.282152][ C0] kasan_save_free_info+0x3b/0x60 [ 399.287295][ C0] __kasan_slab_free+0x51/0x70 [ 399.292073][ C0] kfree+0x14f/0x4b0 [ 399.296084][ C0] xpad_disconnect+0x1cf/0x580 [ 399.300872][ C0] usb_unbind_interface+0x1e5/0x960 [ 399.306083][ C0] device_remove+0x125/0x170 [ 399.310711][ C0] device_release_driver_internal+0x44a/0x610 [ 399.316891][ C0] bus_remove_device+0x22f/0x420 [ 399.321843][ C0] device_del+0x396/0x9f0 [ 399.326190][ C0] usb_disable_device+0x36c/0x7f0 [ 399.331216][ C0] usb_disconnect+0x2e1/0x920 [ 399.335897][ C0] hub_event+0x1da5/0x4e10 [ 399.340317][ C0] process_one_work+0x9c8/0x1ba0 [ 399.345274][ C0] worker_thread+0x6c8/0xf00 [ 399.349882][ C0] kthread+0x2c4/0x3a0 [ 399.353971][ C0] ret_from_fork+0x48/0x80 [ 399.358399][ C0] ret_from_fork_asm+0x1a/0x30 [ 399.363184][ C0] [ 399.365500][ C0] The buggy address belongs to the object at ffff88807ac2e000 [ 399.365500][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 399.379556][ C0] The buggy address is located 146 bytes inside of [ 399.379556][ C0] freed 1024-byte region [ffff88807ac2e000, ffff88807ac2e400) [ 399.393559][ C0] [ 399.395882][ C0] The buggy address belongs to the physical page: [ 399.402308][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ac28 [ 399.411076][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 399.419576][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 399.427122][ C0] page_type: f5(slab) [ 399.431107][ C0] raw: 00fff00000000040 ffff88801b041dc0 ffffea0001553c00 dead000000000002 [ 399.439706][ C0] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 399.448305][ C0] head: 00fff00000000040 ffff88801b041dc0 ffffea0001553c00 dead000000000002 [ 399.457072][ C0] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 399.465751][ C0] head: 00fff00000000003 ffffea0001eb0a01 ffffffffffffffff 0000000000000000 [ 399.474432][ C0] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 399.483109][ C0] page dumped because: kasan: bad access detected [ 399.489526][ C0] page_owner tracks the page as allocated [ 399.495241][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 64, tgid 64 (kworker/u8:5), ts 100896424986, free_ts 100755842294 [ 399.514550][ C0] post_alloc_hook+0x2d1/0x350 [ 399.519440][ C0] get_page_from_freelist+0xfce/0x2f80 [ 399.524920][ C0] __alloc_pages_noprof+0x223/0x25b0 [ 399.530219][ C0] alloc_pages_mpol_noprof+0x2c9/0x610 [ 399.535693][ C0] new_slab+0x2c9/0x410 [ 399.539888][ C0] ___slab_alloc+0xd7d/0x17a0 [ 399.544588][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 399.549983][ C0] __kmalloc_noprof+0x2ec/0x510 [ 399.554839][ C0] ieee802_11_parse_elems_full+0xea/0x1680 [ 399.560663][ C0] ieee80211_ibss_rx_queued_mgmt+0xc4f/0x2f50 [ 399.566747][ C0] ieee80211_iface_work+0xc0b/0xf00 [ 399.571959][ C0] cfg80211_wiphy_work+0x3e1/0x560 [ 399.577082][ C0] process_one_work+0x9c8/0x1ba0 [ 399.582027][ C0] worker_thread+0x6c8/0xf00 [ 399.586643][ C0] kthread+0x2c4/0x3a0 [ 399.590732][ C0] ret_from_fork+0x48/0x80 [ 399.595159][ C0] page last free pid 5198 tgid 5198 stack trace: [ 399.601488][ C0] free_unref_page+0x661/0x1080 [ 399.606437][ C0] __put_partials+0x14c/0x170 [ 399.611140][ C0] qlist_free_all+0x4e/0x120 [ 399.615832][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 399.621524][ C0] __kasan_slab_alloc+0x69/0x90 [ 399.626392][ C0] kmem_cache_alloc_noprof+0x226/0x3d0 [ 399.631858][ C0] getname_flags.part.0+0x4c/0x550 [ 399.636985][ C0] getname+0x8d/0xe0 [ 399.640898][ C0] do_sys_openat2+0x104/0x1e0 [ 399.645627][ C0] __x64_sys_openat+0x175/0x210 [ 399.650493][ C0] do_syscall_64+0xcd/0x250 [ 399.655020][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.660937][ C0] [ 399.663255][ C0] Memory state around the buggy address: [ 399.668883][ C0] ffff88807ac2df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 399.676946][ C0] ffff88807ac2e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 399.685555][ C0] >ffff88807ac2e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 399.693619][ C0] ^ [ 399.698223][ C0] ffff88807ac2e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 399.706290][ C0] ffff88807ac2e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 399.714354][ C0] ================================================================== [ 399.722431][ C0] ================================================================== [ 399.730532][ C0] BUG: KASAN: slab-use-after-free in register_lock_class+0xccf/0x1240 [ 399.738741][ C0] Write of size 8 at addr ffff88807ac2e078 by task syz.1.1386/10957 [ 399.746834][ C0] [ 399.749171][ C0] CPU: 0 UID: 0 PID: 10957 Comm: syz.1.1386 Tainted: G B 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 399.761559][ C0] Tainted: [B]=BAD_PAGE [ 399.765724][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 399.775887][ C0] Call Trace: [ 399.779176][ C0] [ 399.782032][ C0] dump_stack_lvl+0x116/0x1f0 [ 399.786767][ C0] print_report+0xc3/0x620 [ 399.791215][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.796904][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.802941][ C0] ? __phys_addr+0xc6/0x150 [ 399.807579][ C0] kasan_report+0xd9/0x110 [ 399.812036][ C0] ? register_lock_class+0xccf/0x1240 [ 399.817532][ C0] ? register_lock_class+0xccf/0x1240 [ 399.823036][ C0] register_lock_class+0xccf/0x1240 [ 399.828280][ C0] ? __pfx_register_lock_class+0x10/0x10 [ 399.833947][ C0] __lock_acquire+0x135/0x3c40 [ 399.838744][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 399.843975][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 399.849212][ C0] lock_acquire.part.0+0x11b/0x380 [ 399.854360][ C0] ? __wake_up+0x1c/0x60 [ 399.858716][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 399.864383][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.870062][ C0] ? rcu_is_watching+0x12/0xc0 [ 399.874962][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.880705][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 399.885955][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 399.891372][ C0] ? __wake_up+0x1c/0x60 [ 399.895643][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.901310][ C0] ? lock_acquire+0x2f/0xb0 [ 399.905869][ C0] ? __wake_up+0x1c/0x60 [ 399.910156][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 399.915401][ C0] ? __wake_up+0x1c/0x60 [ 399.919681][ C0] __wake_up+0x1c/0x60 [ 399.923777][ C0] usb_anchor_resume_wakeups+0xc2/0xe0 [ 399.929296][ C0] __usb_hcd_giveback_urb+0x3b7/0x6e0 [ 399.934707][ C0] usb_hcd_giveback_urb+0x396/0x450 [ 399.940024][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.945686][ C0] dummy_timer+0x17f7/0x3960 [ 399.950320][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.956066][ C0] ? mark_lock+0xb5/0xc60 [ 399.960428][ C0] ? __pfx_lock_release+0x10/0x10 [ 399.965487][ C0] ? lock_acquire+0x2f/0xb0 [ 399.970025][ C0] ? debug_object_deactivate+0x13b/0x370 [ 399.975692][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.981351][ C0] ? find_held_lock+0x2d/0x110 [ 399.986166][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.991820][ C0] ? __hrtimer_run_queues+0x53d/0xae0 [ 399.997237][ C0] ? __pfx_lock_release+0x10/0x10 [ 400.002297][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 400.007310][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.013003][ C0] ? mark_held_locks+0x9f/0xe0 [ 400.017808][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 400.023735][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 400.028725][ C0] __hrtimer_run_queues+0x20d/0xae0 [ 400.033985][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 400.039857][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.045538][ C0] hrtimer_run_softirq+0x17d/0x350 [ 400.050702][ C0] handle_softirqs+0x216/0x8f0 [ 400.055515][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 400.060840][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.066600][ C0] __irq_exit_rcu+0x109/0x170 [ 400.071321][ C0] irq_exit_rcu+0x9/0x30 [ 400.075620][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 400.081388][ C0] [ 400.084334][ C0] [ 400.087286][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 400.093325][ C0] RIP: 0010:unwind_get_return_address+0x4e/0xa0 [ 400.099706][ C0] Code: 7e 59 8b 03 85 c0 75 09 5b 31 c0 5d e9 86 07 07 0a 48 8d 6b 48 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 3c 02 00 <75> 36 48 8b 7b 48 e8 37 3f 1b 00 85 c0 74 cf 48 b8 00 00 00 00 00 [ 400.119534][ C0] RSP: 0018:ffffc9000be67488 EFLAGS: 00000246 [ 400.125635][ C0] RAX: dffffc0000000000 RBX: ffffc9000be674a0 RCX: 0000000000000000 [ 400.133717][ C0] RDX: 1ffff920017cce9d RSI: 0000000000000006 RDI: ffffc9000be674a0 [ 400.141709][ C0] RBP: ffffc9000be674e8 R08: ffffffff91a54cb2 R09: ffffffff91a54bf0 [ 400.149881][ C0] R10: ffffc9000be674ff R11: 00000000000a4001 R12: ffffffff8185d2b0 [ 400.157892][ C0] R13: ffffc9000be67560 R14: 0000000000000000 R15: ffff888070e89e00 [ 400.165919][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 400.172146][ C0] arch_stack_walk+0xa7/0x100 [ 400.176873][ C0] stack_trace_save+0x95/0xd0 [ 400.181608][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 400.187063][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.192732][ C0] save_stack+0x162/0x1f0 [ 400.197110][ C0] ? __pfx_save_stack+0x10/0x10 [ 400.202007][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 400.207720][ C0] ? free_unref_folios+0xa7b/0x14f0 [ 400.213211][ C0] ? folios_put_refs+0x587/0x7b0 [ 400.218225][ C0] ? free_pages_and_swap_cache+0x36d/0x510 [ 400.224346][ C0] ? __tlb_batch_free_encoded_pages+0xf9/0x290 [ 400.230542][ C0] ? tlb_finish_mmu+0x168/0x7b0 [ 400.235425][ C0] ? exit_mmap+0x3df/0xb20 [ 400.239890][ C0] ? __mmput+0x12a/0x4c0 [ 400.244258][ C0] ? mmput+0x62/0x70 [ 400.248189][ C0] ? do_exit+0x9ba/0x2d70 [ 400.252568][ C0] ? do_group_exit+0xd3/0x2a0 [ 400.257297][ C0] ? __x64_sys_exit_group+0x3e/0x50 [ 400.262615][ C0] ? x64_sys_call+0x151f/0x1720 [ 400.267510][ C0] ? do_syscall_64+0xcd/0x250 [ 400.272235][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.278480][ C0] __reset_page_owner+0x8d/0x400 [ 400.283476][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.289356][ C0] free_unref_folios+0xa7b/0x14f0 [ 400.294414][ C0] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 400.300261][ C0] folios_put_refs+0x587/0x7b0 [ 400.305113][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 400.310455][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.316130][ C0] ? lock_acquire+0x2f/0xb0 [ 400.320668][ C0] ? mlock_drain_local+0x6f/0x4f0 [ 400.325734][ C0] free_pages_and_swap_cache+0x36d/0x510 [ 400.331418][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 400.337629][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.343467][ C0] ? native_tlb_remove_table+0x2e/0x50 [ 400.349083][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.354749][ C0] ? __pfx___might_resched+0x10/0x10 [ 400.360076][ C0] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 400.366099][ C0] tlb_finish_mmu+0x168/0x7b0 [ 400.370811][ C0] exit_mmap+0x3df/0xb20 [ 400.375104][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 400.379916][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.385590][ C0] ? __pfx_mark_lock+0x10/0x10 [ 400.390403][ C0] __mmput+0x12a/0x4c0 [ 400.394513][ C0] mmput+0x62/0x70 [ 400.398268][ C0] do_exit+0x9ba/0x2d70 [ 400.402476][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.408139][ C0] ? __pfx_do_exit+0x10/0x10 [ 400.412778][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.418447][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 400.423864][ C0] do_group_exit+0xd3/0x2a0 [ 400.428420][ C0] __x64_sys_exit_group+0x3e/0x50 [ 400.433489][ C0] x64_sys_call+0x151f/0x1720 [ 400.438210][ C0] do_syscall_64+0xcd/0x250 [ 400.442764][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.448709][ C0] RIP: 0033:0x7f05a6d85d29 [ 400.453143][ C0] Code: Unable to access opcode bytes at 0x7f05a6d85cff. [ 400.460171][ C0] RSP: 002b:00007ffcadce0958 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 400.468621][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f05a6d85d29 [ 400.476632][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 400.484626][ C0] RBP: 00007ffcadce09ac R08: 00007ffcadce0a3f R09: 00000000000604cc [ 400.492616][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000032 [ 400.500693][ C0] R13: 00000000000604cc R14: 00007ffcadce0a00 R15: 00007ffcadce0a00 [ 400.508711][ C0] [ 400.511740][ C0] [ 400.514071][ C0] Allocated by task 968: [ 400.518332][ C0] kasan_save_stack+0x33/0x60 [ 400.523047][ C0] kasan_save_track+0x14/0x30 [ 400.527747][ C0] __kasan_kmalloc+0xaa/0xb0 [ 400.532364][ C0] xpad_probe+0x27e/0x1f50 [ 400.536808][ C0] usb_probe_interface+0x303/0x9c0 [ 400.541950][ C0] really_probe+0x241/0xa90 [ 400.546493][ C0] __driver_probe_device+0x1de/0x440 [ 400.551810][ C0] driver_probe_device+0x4c/0x1b0 [ 400.556866][ C0] __device_attach_driver+0x1df/0x310 [ 400.562708][ C0] bus_for_each_drv+0x15a/0x1e0 [ 400.567583][ C0] __device_attach+0x1e8/0x4b0 [ 400.572380][ C0] bus_probe_device+0x17f/0x1c0 [ 400.577254][ C0] device_add+0x114b/0x1a70 [ 400.581796][ C0] usb_set_configuration+0x10cb/0x1c50 [ 400.587285][ C0] usb_generic_driver_probe+0xb1/0x110 [ 400.592802][ C0] usb_probe_device+0xef/0x3e0 [ 400.597590][ C0] really_probe+0x241/0xa90 [ 400.602131][ C0] __driver_probe_device+0x1de/0x440 [ 400.607462][ C0] driver_probe_device+0x4c/0x1b0 [ 400.612525][ C0] __device_attach_driver+0x1df/0x310 [ 400.617935][ C0] bus_for_each_drv+0x15a/0x1e0 [ 400.622811][ C0] __device_attach+0x1e8/0x4b0 [ 400.627609][ C0] bus_probe_device+0x17f/0x1c0 [ 400.632518][ C0] device_add+0x114b/0x1a70 [ 400.637070][ C0] usb_new_device+0xd90/0x1a10 [ 400.641861][ C0] hub_event+0x2d9a/0x4e10 [ 400.646301][ C0] process_one_work+0x9c8/0x1ba0 [ 400.651271][ C0] worker_thread+0x6c8/0xf00 [ 400.655892][ C0] kthread+0x2c4/0x3a0 [ 400.660002][ C0] ret_from_fork+0x48/0x80 [ 400.664485][ C0] ret_from_fork_asm+0x1a/0x30 [ 400.669298][ C0] [ 400.671626][ C0] Freed by task 5831: [ 400.675615][ C0] kasan_save_stack+0x33/0x60 [ 400.680314][ C0] kasan_save_track+0x14/0x30 [ 400.685020][ C0] kasan_save_free_info+0x3b/0x60 [ 400.690087][ C0] __kasan_slab_free+0x51/0x70 [ 400.694889][ C0] kfree+0x14f/0x4b0 [ 400.698835][ C0] xpad_disconnect+0x1cf/0x580 [ 400.703731][ C0] usb_unbind_interface+0x1e5/0x960 [ 400.709659][ C0] device_remove+0x125/0x170 [ 400.714289][ C0] device_release_driver_internal+0x44a/0x610 [ 400.720418][ C0] bus_remove_device+0x22f/0x420 [ 400.725409][ C0] device_del+0x396/0x9f0 [ 400.729778][ C0] usb_disable_device+0x36c/0x7f0 [ 400.734832][ C0] usb_disconnect+0x2e1/0x920 [ 400.739626][ C0] hub_event+0x1da5/0x4e10 [ 400.744106][ C0] process_one_work+0x9c8/0x1ba0 [ 400.749070][ C0] worker_thread+0x6c8/0xf00 [ 400.753699][ C0] kthread+0x2c4/0x3a0 [ 400.757815][ C0] ret_from_fork+0x48/0x80 [ 400.762289][ C0] ret_from_fork_asm+0x1a/0x30 [ 400.767110][ C0] [ 400.769446][ C0] The buggy address belongs to the object at ffff88807ac2e000 [ 400.769446][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 400.783542][ C0] The buggy address is located 120 bytes inside of [ 400.783542][ C0] freed 1024-byte region [ffff88807ac2e000, ffff88807ac2e400) [ 400.797561][ C0] [ 400.799904][ C0] The buggy address belongs to the physical page: [ 400.806414][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ac28 [ 400.815206][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 400.823836][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 400.831437][ C0] page_type: f5(slab) [ 400.835450][ C0] raw: 00fff00000000040 ffff88801b041dc0 ffffea0001553c00 dead000000000002 [ 400.844082][ C0] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 400.852715][ C0] head: 00fff00000000040 ffff88801b041dc0 ffffea0001553c00 dead000000000002 [ 400.861509][ C0] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 400.870272][ C0] head: 00fff00000000003 ffffea0001eb0a01 ffffffffffffffff 0000000000000000 [ 400.879069][ C0] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 400.888042][ C0] page dumped because: kasan: bad access detected [ 400.894564][ C0] page_owner tracks the page as allocated [ 400.900287][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 64, tgid 64 (kworker/u8:5), ts 100896424986, free_ts 100755842294 [ 400.919484][ C0] post_alloc_hook+0x2d1/0x350 [ 400.924315][ C0] get_page_from_freelist+0xfce/0x2f80 [ 400.929820][ C0] __alloc_pages_noprof+0x223/0x25b0 [ 400.935146][ C0] alloc_pages_mpol_noprof+0x2c9/0x610 [ 400.940658][ C0] new_slab+0x2c9/0x410 [ 400.944862][ C0] ___slab_alloc+0xd7d/0x17a0 [ 400.949588][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 400.955009][ C0] __kmalloc_noprof+0x2ec/0x510 [ 400.959883][ C0] ieee802_11_parse_elems_full+0xea/0x1680 [ 400.965834][ C0] ieee80211_ibss_rx_queued_mgmt+0xc4f/0x2f50 [ 400.971947][ C0] ieee80211_iface_work+0xc0b/0xf00 [ 400.977180][ C0] cfg80211_wiphy_work+0x3e1/0x560 [ 400.982322][ C0] process_one_work+0x9c8/0x1ba0 [ 400.987298][ C0] worker_thread+0x6c8/0xf00 [ 400.992010][ C0] kthread+0x2c4/0x3a0 [ 400.996118][ C0] ret_from_fork+0x48/0x80 [ 401.000558][ C0] page last free pid 5198 tgid 5198 stack trace: [ 401.006900][ C0] free_unref_page+0x661/0x1080 [ 401.011777][ C0] __put_partials+0x14c/0x170 [ 401.016501][ C0] qlist_free_all+0x4e/0x120 [ 401.021141][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 401.026659][ C0] __kasan_slab_alloc+0x69/0x90 [ 401.031997][ C0] kmem_cache_alloc_noprof+0x226/0x3d0 [ 401.037716][ C0] getname_flags.part.0+0x4c/0x550 [ 401.042865][ C0] getname+0x8d/0xe0 [ 401.046798][ C0] do_sys_openat2+0x104/0x1e0 [ 401.051762][ C0] __x64_sys_openat+0x175/0x210 [ 401.056655][ C0] do_syscall_64+0xcd/0x250 [ 401.061201][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.067148][ C0] [ 401.069547][ C0] Memory state around the buggy address: [ 401.075280][ C0] ffff88807ac2df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 401.083386][ C0] ffff88807ac2df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 401.091467][ C0] >ffff88807ac2e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 401.099547][ C0] ^ [ 401.107626][ C0] ffff88807ac2e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 401.115724][ C0] ffff88807ac2e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 401.124066][ C0] ================================================================== [ 401.132150][ C0] Kernel panic - not syncing: kasan.fault=panic_on_write set ... [ 401.139993][ C0] CPU: 0 UID: 0 PID: 10957 Comm: syz.1.1386 Tainted: G B 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 401.152286][ C0] Tainted: [B]=BAD_PAGE [ 401.156451][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 401.166533][ C0] Call Trace: [ 401.169826][ C0] [ 401.172689][ C0] dump_stack_lvl+0x3d/0x1f0 [ 401.177323][ C0] panic+0x71d/0x800 [ 401.181269][ C0] ? __pfx_panic+0x10/0x10 [ 401.185734][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.191490][ C0] ? lock_release+0x4e2/0x6f0 [ 401.196203][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.201881][ C0] end_report+0x169/0x180 [ 401.206243][ C0] kasan_report+0xe9/0x110 [ 401.210687][ C0] ? register_lock_class+0xccf/0x1240 [ 401.216095][ C0] ? register_lock_class+0xccf/0x1240 [ 401.221506][ C0] register_lock_class+0xccf/0x1240 [ 401.226763][ C0] ? __pfx_register_lock_class+0x10/0x10 [ 401.232441][ C0] __lock_acquire+0x135/0x3c40 [ 401.237244][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 401.242560][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 401.247794][ C0] lock_acquire.part.0+0x11b/0x380 [ 401.253119][ C0] ? __wake_up+0x1c/0x60 [ 401.257391][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 401.263319][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.269163][ C0] ? rcu_is_watching+0x12/0xc0 [ 401.274061][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.279810][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 401.285059][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 401.290475][ C0] ? __wake_up+0x1c/0x60 [ 401.295092][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.300842][ C0] ? lock_acquire+0x2f/0xb0 [ 401.305901][ C0] ? __wake_up+0x1c/0x60 [ 401.310172][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 401.315417][ C0] ? __wake_up+0x1c/0x60 [ 401.319689][ C0] __wake_up+0x1c/0x60 [ 401.323790][ C0] usb_anchor_resume_wakeups+0xc2/0xe0 [ 401.329511][ C0] __usb_hcd_giveback_urb+0x3b7/0x6e0 [ 401.334928][ C0] usb_hcd_giveback_urb+0x396/0x450 [ 401.340170][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.345865][ C0] dummy_timer+0x17f7/0x3960 [ 401.350701][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.356451][ C0] ? mark_lock+0xb5/0xc60 [ 401.360898][ C0] ? __pfx_lock_release+0x10/0x10 [ 401.366135][ C0] ? lock_acquire+0x2f/0xb0 [ 401.370674][ C0] ? debug_object_deactivate+0x13b/0x370 [ 401.376777][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.382444][ C0] ? find_held_lock+0x2d/0x110 [ 401.387252][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.392948][ C0] ? __hrtimer_run_queues+0x53d/0xae0 [ 401.398374][ C0] ? __pfx_lock_release+0x10/0x10 [ 401.403434][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 401.408408][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.414154][ C0] ? mark_held_locks+0x9f/0xe0 [ 401.418949][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 401.424794][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 401.429766][ C0] __hrtimer_run_queues+0x20d/0xae0 [ 401.435013][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 401.440777][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.446447][ C0] hrtimer_run_softirq+0x17d/0x350 [ 401.451606][ C0] handle_softirqs+0x216/0x8f0 [ 401.456407][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 401.461733][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.467396][ C0] __irq_exit_rcu+0x109/0x170 [ 401.472115][ C0] irq_exit_rcu+0x9/0x30 [ 401.476392][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 401.482065][ C0] [ 401.485012][ C0] [ 401.487954][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 401.494423][ C0] RIP: 0010:unwind_get_return_address+0x4e/0xa0 [ 401.501139][ C0] Code: 7e 59 8b 03 85 c0 75 09 5b 31 c0 5d e9 86 07 07 0a 48 8d 6b 48 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 3c 02 00 <75> 36 48 8b 7b 48 e8 37 3f 1b 00 85 c0 74 cf 48 b8 00 00 00 00 00 [ 401.520834][ C0] RSP: 0018:ffffc9000be67488 EFLAGS: 00000246 [ 401.526945][ C0] RAX: dffffc0000000000 RBX: ffffc9000be674a0 RCX: 0000000000000000 [ 401.534943][ C0] RDX: 1ffff920017cce9d RSI: 0000000000000006 RDI: ffffc9000be674a0 [ 401.542966][ C0] RBP: ffffc9000be674e8 R08: ffffffff91a54cb2 R09: ffffffff91a54bf0 [ 401.550968][ C0] R10: ffffc9000be674ff R11: 00000000000a4001 R12: ffffffff8185d2b0 [ 401.558975][ C0] R13: ffffc9000be67560 R14: 0000000000000000 R15: ffff888070e89e00 [ 401.566986][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 401.573300][ C0] arch_stack_walk+0xa7/0x100 [ 401.578123][ C0] stack_trace_save+0x95/0xd0 [ 401.582854][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 401.588378][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.594085][ C0] save_stack+0x162/0x1f0 [ 401.598468][ C0] ? __pfx_save_stack+0x10/0x10 [ 401.603370][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 401.609046][ C0] ? free_unref_folios+0xa7b/0x14f0 [ 401.614277][ C0] ? folios_put_refs+0x587/0x7b0 [ 401.619268][ C0] ? free_pages_and_swap_cache+0x36d/0x510 [ 401.625128][ C0] ? __tlb_batch_free_encoded_pages+0xf9/0x290 [ 401.631313][ C0] ? tlb_finish_mmu+0x168/0x7b0 [ 401.636202][ C0] ? exit_mmap+0x3df/0xb20 [ 401.640664][ C0] ? __mmput+0x12a/0x4c0 [ 401.644949][ C0] ? mmput+0x62/0x70 [ 401.648921][ C0] ? do_exit+0x9ba/0x2d70 [ 401.653474][ C0] ? do_group_exit+0xd3/0x2a0 [ 401.658201][ C0] ? __x64_sys_exit_group+0x3e/0x50 [ 401.663480][ C0] ? x64_sys_call+0x151f/0x1720 [ 401.668378][ C0] ? do_syscall_64+0xcd/0x250 [ 401.673222][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.679364][ C0] __reset_page_owner+0x8d/0x400 [ 401.684377][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.690043][ C0] free_unref_folios+0xa7b/0x14f0 [ 401.695103][ C0] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 401.700952][ C0] folios_put_refs+0x587/0x7b0 [ 401.705769][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 401.711215][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.716879][ C0] ? lock_acquire+0x2f/0xb0 [ 401.721415][ C0] ? mlock_drain_local+0x6f/0x4f0 [ 401.726483][ C0] free_pages_and_swap_cache+0x36d/0x510 [ 401.732168][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 401.738379][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.744043][ C0] ? native_tlb_remove_table+0x2e/0x50 [ 401.749586][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.755254][ C0] ? __pfx___might_resched+0x10/0x10 [ 401.760585][ C0] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 401.766603][ C0] tlb_finish_mmu+0x168/0x7b0 [ 401.771314][ C0] exit_mmap+0x3df/0xb20 [ 401.775785][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 401.780597][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.786268][ C0] ? __pfx_mark_lock+0x10/0x10 [ 401.791253][ C0] __mmput+0x12a/0x4c0 [ 401.795365][ C0] mmput+0x62/0x70 [ 401.799119][ C0] do_exit+0x9ba/0x2d70 [ 401.803327][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.808992][ C0] ? __pfx_do_exit+0x10/0x10 [ 401.813728][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.819388][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 401.824798][ C0] do_group_exit+0xd3/0x2a0 [ 401.829354][ C0] __x64_sys_exit_group+0x3e/0x50 [ 401.834426][ C0] x64_sys_call+0x151f/0x1720 [ 401.839149][ C0] do_syscall_64+0xcd/0x250 [ 401.843698][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.849642][ C0] RIP: 0033:0x7f05a6d85d29 [ 401.854076][ C0] Code: Unable to access opcode bytes at 0x7f05a6d85cff. [ 401.861104][ C0] RSP: 002b:00007ffcadce0958 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 401.869549][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f05a6d85d29 [ 401.877544][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 401.885535][ C0] RBP: 00007ffcadce09ac R08: 00007ffcadce0a3f R09: 00000000000604cc [ 401.893652][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000032 [ 401.901691][ C0] R13: 00000000000604cc R14: 00007ffcadce0a00 R15: 00007ffcadce0a00 [ 401.909715][ C0] [ 401.913165][ C0] Kernel Offset: disabled [ 401.917504][ C0] Rebooting in 86400 seconds..