last executing test programs: 2m38.218697513s ago: executing program 1 (id=31): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000600)={'tunl0\x00', 0x0, 0x8000, 0x8, 0xc, 0x635abf0b, {{0x8, 0x4, 0x0, 0x31, 0x20, 0x64, 0x0, 0xf, 0x1b6475eeb6b846f, 0x0, @rand_addr=0x64010101, @remote, {[@lsrr={0x83, 0x3, 0xfb}, @generic={0x94, 0x4, "d7bd"}, @ra={0x94, 0x4}]}}}}}) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0xcc000) r5 = socket$inet6(0xa, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=r7, @ANYBLOB="2c63726561746f723dbd3d66f12c63726561746f723d64eb8ba92c6e6f6465636f6d706f73652c756d61736b3d3030303030303030303030303030303030303030303032000000003d", @ANYRESHEX=r6, @ANYRESOCT], 0x3, 0x6a4, &(0x7f0000001b40)="$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") sendmsg$nl_xfrm(r1, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000940)=@updsa={0x308, 0x1a, 0x8, 0x70bd2b, 0x25dfdbfe, {{@in6=@mcast2, @in6=@empty, 0x4e20, 0x4, 0x4e24, 0xfff5, 0xa, 0x20, 0x40, 0x3b, r2, r4}, {@in=@broadcast, 0x4d4, 0x32}, @in=@local, {0x2, 0xf7ba, 0x0, 0x0, 0x9, 0x4, 0x80000000, 0x3ff}, {0x90, 0x0, 0x1, 0x3ff}, {0xfff, 0x7f, 0x1}, 0x70bd29, 0x3503, 0x2, 0x3, 0x0, 0x8}, [@tfcpad={0x8, 0x16, 0xda4e9d67}, @sa={0xe4, 0x6, {{@in6=@mcast2, @in6=@loopback, 0x4e23, 0x0, 0x4e21, 0x8, 0xa, 0x0, 0x0, 0x24, 0x0, r6}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d3, 0xff}, @in=@multicast1, {0x7, 0xf, 0xf285, 0x80000001, 0xc0b2, 0x4, 0x6, 0x6}, {0x3, 0x7, 0x2, 0xa01d}, {0x6, 0xffffffff, 0x2}, 0x8, 0x0, 0x0, 0x1, 0x9, 0x8}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}, @policy_type={0xa}, @algo_comp={0x5b, 0x3, {{'deflate\x00'}, 0x98, "529f191dd2806e016940b8d8c3d5c28aa5a24f"}}, @replay_thresh={0x8, 0xb, 0x5}, @sec_ctx={0xac, 0x8, {0xa8, 0x8, 0x1, 0x0, 0xa0, "ae2e013521e2a8325541dc980110c002a33f699a6952c2d84da92dd918db8e1390d6efd8a94ddb64983f77a0af5ca42423ce8ac2e559bafa655a163ee08f117d949efb7f8881d1060f2c1d95364fcfd7c7043b71c0c9a8fbbf6c940f2fa3cb71506cdd043a6d6bd3db724b28d373c54cb7fbda00eb36ff8a34493d6fb17dff8c0063e05c84b13315abdaadb24e0c406bb569bcb3f8ded69f14b196e46594bf7a"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}]}, 0x308}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000014) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r9 = syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000200)='./bus\x00', 0x4, &(0x7f0000000000)={[{@debug}, {@nouser_xattr}]}, 0x4, 0x236, &(0x7f0000000300)="$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") setreuid(0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r9, 0x800c6613, &(0x7f00000005c0)=@v2={0x2, @aes128, 0x8, '\x00', @c}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r10, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETSW2(r10, 0x402c542c, &(0x7f0000000200)={0x0, 0x2, 0x7c, 0xfffffffa, 0xc6, "84b53f5dc1d996e6e7d479db86fe609ea2029b", 0x80, 0x2}) ioctl$TCSETAF(r10, 0x5408, &(0x7f0000000100)={0x3, 0x2, 0xae2e, 0x5, 0x15, "1e138cc9534fc777"}) 2m32.764036809s ago: executing program 1 (id=36): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) fallocate(r6, 0x0, 0x0, 0x8) fcntl$addseals(r6, 0x409, 0xe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000340)=0x64, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 2m31.038110972s ago: executing program 1 (id=38): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_pts(0xffffffffffffffff, 0x70000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x6) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000001300)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000340)="fd", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}], 0x2, 0x4000000) socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) fallocate(r2, 0x11, 0x9, 0xfd) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shutdown(r3, 0x2) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2m30.131646651s ago: executing program 1 (id=44): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000001200)={[{@block_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x200) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r2, 0x100, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001140040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r3 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) bind$inet6(r0, &(0x7f0000000d00)={0xa, 0x4e22, 0x3, @mcast1, 0x7}, 0x1c) 2m29.461984612s ago: executing program 1 (id=46): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) 2m28.481244232s ago: executing program 1 (id=55): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/467], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe1}, 0x48) 2m27.61049037s ago: executing program 32 (id=55): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61128c00000000006113740000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf67000000000000160602000fff52007607faff10000000d60600000ee60000bf050000000000001f63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070400000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999f9d60bb39d0af449deaa27ea949e8f9000d885dfea2783835e29eb532ba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f2686ee970d6482a2e7ddbf51c74ccac1c7b21bde7d1af255d6ebff9bff35e3888a0e356d82e43407a6d7fa94b2100204000000000000009ab62d7b07ba0a71a72145edade9941f04000000000000004ea9e4c70ef8b7407740ab3312edee62a4dc2fc85755d387bfa1bc8eb71fbe11b2216cc8d1f0160c237d929b49da28724b95555b74be2f76fb5f330b015a68587a75c01300"/467], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe1}, 0x48) 2m11.345220384s ago: executing program 0 (id=145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) prlimit64(0x0, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)={0x50, r1, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7}, @broadcast, @device_a, @from_mac=@broadcast, {0x2}, @value=@ver_80211n={0x0, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x0, 0xe}}, @val={0x3e, 0x1, 0x1}, @val={0x76, 0x6, {0xd, 0x1, 0x30, 0x494}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x44050) 2m10.758585455s ago: executing program 0 (id=147): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x40040) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r5, 0x112, 0x13, 0x0, 0x2) 2m9.253896975s ago: executing program 0 (id=155): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x1000c1f, &(0x7f0000000040)={[{@mblk_io_submit}, {@norecovery}, {@orlov}, {@test_dummy_encryption}]}, 0x4, 0x5cd, &(0x7f0000001400)="$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") 2m7.791112178s ago: executing program 0 (id=165): sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000180)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@nojournal_checksum}, {@acl}, {@usrjquota, 0x2e}, {@grpquota}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x84, 0x459, &(0x7f0000000900)="$eJzs20tvG1UbAOB3Jknv/ZKvlEsvgKEgIi5Jkxbogg0IpG6QkGBRliFNq1K3QU2QaFXRgFBZov4CYInEL2AFGwSsQGxhj5Aq1A2FBRo09tgYxw527NRp/TzSxOfMjH3e1zMnPjPHDmBolfI/ScSuiPgpIsYjYqR5h1L14eaNy/N/3Lg8n0SWvfpbkj8tfr9xeb62a1I87iwqk2lE+kESB1q0u3Tx0tm5cnnhQlGfXj731vTSxUtPnTk3d3rh9ML52WPHjh6ZefaZ2af7kufuPNb97y4e3Hf89Wsvz5+49sa3n+fx7iq2N+ZRNdFzm6Uo1d+TZo/2/Oqby+7isV2+bE55Xx+NiLFK/x+PkUqtajxeen+gwQEbKsuybOuqtfURwEoG3MGSGHQEwGDUPujz69/acguHHwN3/fnqBVCe981iqW4ZjbTYZ6zh+rbfShFxYuXPj/MlWt6HAADory/z8c+TrcZ/adzTsN//irmhiYj4f0TsiYi7ImJvRNwdUdn33oi4r8v2S0311eOfH7avK7EO5eO/54q5rX+P/2qjv5gYKWq7K/mPJafOlBcOF+/JZIxtzesza7Tx1Ys/ftRuW+P4L1/y9mtjwSKOX0ebbtCdnFue6yXnRtffq9wDvLI6/6Q+E5BExL6I2L+O198WEWce/+xgu+3/nf8aRtcRUJPs04jHqsd/JZryr0nWnp+c3hblhcPTtbNite++v/pKu/Z7yr8P8uO/o+X5X89/Immcr13qvo2rP3/Y9ppmvef/luS1SnlLse6dueXlCzMRW5KV1etn/3lurV7bP89/8lDr/r8n4q9PiucdiIj8JL4/Ih6IiAeL2B+KiIcj4tAa+X/zwiNvrj//jZXnf7Kr4999YeTs11+0a7+z43+0Upos1nTy/6/TAHt57wAAAOB2kVa+A5+kU/Vymk5NVb/Dvzd2pOXFpeUnTi2+ff5k9bvyEzGW1u50jTfcD50p7g3X6rNN9SOV+8ZZlmXbK/Wp+cXyRs2pA53Z2ab/534ZGXR0wIbrah7NL7zgjtKHeXTgNqX/w/DS/2F46f8wvFr1/ysRNwcQCnCL+fyH4aX/w/DS/2F46f8wlHr5Xf9ahT3HN+qV77TCyOYIo+tCpJsijI4KY8XZXl+TbpLAKoWtEdHpzlfiVgU24H9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAffJ3AAAA//+7l+jE") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x1c7102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000003c0)={0x17c04, 0xffffffffffffffff, 0x200000ba, 0x41000ff7ff, 0xdc, 0x6d3}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@init_itable}, {@resuid}, {@stripe}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r2 = open(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086607, 0x0) 2m6.399707777s ago: executing program 0 (id=175): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="7851160007"]) 2m4.767421387s ago: executing program 0 (id=184): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) 2m3.121218872s ago: executing program 33 (id=184): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) 1m58.919790577s ago: executing program 3 (id=202): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000002c0)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) syz_emit_ethernet(0x1fa, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd665ff63e01c484"], 0x0) 1m58.718829468s ago: executing program 3 (id=203): r0 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={0x0}, 0x18) r1 = syz_pidfd_open(r0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 1m58.22884495s ago: executing program 3 (id=205): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@dioread_lock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@usrjquota}, {@nomblk_io_submit}]}, 0x3, 0x57e, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0xe9, 0x800000, 0x0, 0xfffffffc, 0x40001000}) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 1m57.687420674s ago: executing program 3 (id=208): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000040)='./file0\x00', 0x1008408, &(0x7f0000000ac0)=ANY=[@ANYBLOB='nojoliet,dmode=0x000000007fffffff,dmode=0x0000000000000009,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,hide,nocompress,utf8,norock,overriderockperm,mode=0xffffffffffffffff,cruft,map=off,iocharset=macinuit,fund=BPRM_CHECK,\x00', @ANYRESDEC], 0xff, 0x5ac, &(0x7f0000002940)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x5, @remote, 0x4}}, 0x0, 0x0, 0x50, 0x0, "a27eeb1839106138172ad1ed7d1d9bfbaeed4520662584241c0e774a4cad546325b89dfb9d33f6fb7f45545dc77c8dcbab7120d7aa88e3f6d21c20b0f00807c80cb089d6c97b63f247377bbfad8c40a1"}, 0xd8) open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 1m56.801187005s ago: executing program 3 (id=214): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x400, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@quota}, {@sysvgroups}, {@nouid32}, {@dioread_lock}]}, 0x1, 0x4ed, &(0x7f00000002c0)="$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") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x0, 0x268, 0x33a, 0x258, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x1f8, 0x220, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit2={{0x150}, {'pimreg\x00', {0x0, 0x8, 0x0, 0x1, 0x10000000, 0x5, 0x9}}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 1m55.099830519s ago: executing program 3 (id=218): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_trie\x00') pread64(r0, &(0x7f0000000080)=""/82, 0x52, 0x6) 1m54.154053309s ago: executing program 34 (id=218): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_trie\x00') pread64(r0, &(0x7f0000000080)=""/82, 0x52, 0x6) 1m39.303783956s ago: executing program 5 (id=268): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="120002"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1m39.193659351s ago: executing program 5 (id=270): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, 0x0, 0x48041, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) truncate(&(0x7f0000000180)='./file1\x00', 0x9) fallocate(r0, 0x0, 0x11, 0x1afd) 1m37.436715506s ago: executing program 5 (id=273): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0200000002"], 0x10) socket$igmp6(0xa, 0x3, 0x2) 1m36.611271526s ago: executing program 5 (id=275): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0xc000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r2, 0x400454ce, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1m33.75554664s ago: executing program 5 (id=282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 56.800845726s ago: executing program 5 (id=282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 54.227332842s ago: executing program 8 (id=405): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0xff, 0x6e5, &(0x7f0000000f00)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x64) rename(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 53.470854902s ago: executing program 8 (id=408): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048050) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000fc"], 0x0}, 0x0) 50.801648613s ago: executing program 8 (id=417): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000b80), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 49.352201311s ago: executing program 8 (id=428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r3, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r3, &(0x7f00000008c0)}, 0x20) 47.649161602s ago: executing program 8 (id=431): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x4, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick, {0x0, 0x1}, {}, @result}], 0x1c) 46.967555216s ago: executing program 8 (id=435): ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "299547f8a09eeacac3c4130f97f2cb9dc34b04"}) keyctl$setperm(0x5, 0x0, 0x6203000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x4, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x62040200) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000080)={'mangle\x00', 0x2, [{}, {}]}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) eventfd(0x8008) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 31.220975988s ago: executing program 35 (id=435): ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "299547f8a09eeacac3c4130f97f2cb9dc34b04"}) keyctl$setperm(0x5, 0x0, 0x6203000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x4, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x62040200) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000080)={'mangle\x00', 0x2, [{}, {}]}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) eventfd(0x8008) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11.97887234s ago: executing program 4 (id=509): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0x4fed0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0x14, 0x0, &(0x7f00000026c0)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', 'cifs.idmap\x00'}, 0x36, 0xfffffffffffffffc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) r6 = getpid() process_vm_readv(r6, &(0x7f0000002240)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001000)=""/101, 0x65}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x3, &(0x7f00000035c0)=[{&(0x7f0000002300)=""/235, 0xeb}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x2, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r6, &(0x7f0000000080), 0x4003) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x6, 0x100000001}) 10.455313822s ago: executing program 6 (id=511): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x20000400) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) timer_create(0x7, &(0x7f0000000280)={0x0, 0x21}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r6, &(0x7f0000000440)=""/235, 0xeb) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r8, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c084}, 0xc084) sendmsg$NL80211_CMD_GET_KEY(r0, 0x0, 0x0) 9.355059429s ago: executing program 6 (id=513): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013b00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000d0000000e000000ff7f000000040000", @ANYRES32, @ANYBLOB="9206000000007a74490000000000000000000000ab133cf0b6bce88304881843e8f76f3414094511d48277a2cc97c4f29ba9f0471d98cb3b5be9a6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x18) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0x0, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0) 8.543455804s ago: executing program 4 (id=514): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0, 0x5a, &(0x7f0000000100)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xa2, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f00000000c0)={[{@quota}]}, 0x1, 0x448, &(0x7f00000009c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000)=0x59cc, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x20, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r4}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0x703, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 8.251540812s ago: executing program 2 (id=515): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring) syz_open_dev$usbmon(&(0x7f0000003880), 0x2, 0x4800) r5 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r5) 7.619423675s ago: executing program 6 (id=516): syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x5ff, &(0x7f0000000040)=0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x400) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) getpid() ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, r4, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "4d5336c3a8"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x4050) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 7.440767356s ago: executing program 7 (id=517): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 6.293974894s ago: executing program 2 (id=518): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000600)={'tunl0\x00', 0x0, 0x8000, 0x8, 0xc, 0x635abf0b, {{0x8, 0x4, 0x0, 0x31, 0x20, 0x64, 0x0, 0xf, 0x1b6475eeb6b846f, 0x0, @rand_addr=0x64010101, @remote, {[@lsrr={0x83, 0x3, 0xfb}, @generic={0x94, 0x4, "d7bd"}, @ra={0x94, 0x4}]}}}}}) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0xcc000) r5 = socket$inet6(0xa, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=r7, @ANYBLOB="2c63726561746f723dbd3d66f12c63726561746f723d64eb8ba92c6e6f6465636f6d706f73652c756d61736b3d3030303030303030303030303030303030303030303032000000003d", @ANYRESHEX=r6, @ANYRESOCT], 0x3, 0x6a4, &(0x7f0000001b40)="$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") sendmsg$nl_xfrm(r1, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000940)=@updsa={0x308, 0x1a, 0x8, 0x70bd2b, 0x25dfdbfe, {{@in6=@mcast2, @in6=@empty, 0x4e20, 0x4, 0x4e24, 0xfff5, 0xa, 0x20, 0x40, 0x3b, r2, r4}, {@in=@broadcast, 0x4d4, 0x32}, @in=@local, {0x2, 0xf7ba, 0x0, 0x0, 0x9, 0x4, 0x80000000, 0x3ff}, {0x90, 0x0, 0x1, 0x3ff}, {0xfff, 0x7f, 0x1}, 0x70bd29, 0x3503, 0x2, 0x3, 0x0, 0x8}, [@tfcpad={0x8, 0x16, 0xda4e9d67}, @sa={0xe4, 0x6, {{@in6=@mcast2, @in6=@loopback, 0x4e23, 0x0, 0x4e21, 0x8, 0xa, 0x0, 0x0, 0x24, 0x0, r6}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d3, 0xff}, @in=@multicast1, {0x7, 0xf, 0xf285, 0x80000001, 0xc0b2, 0x4, 0x6, 0x6}, {0x3, 0x7, 0x2, 0xa01d}, {0x6, 0xffffffff, 0x2}, 0x8, 0x0, 0x0, 0x1, 0x9, 0x8}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}, @policy_type={0xa}, @algo_comp={0x5b, 0x3, {{'deflate\x00'}, 0x98, "529f191dd2806e016940b8d8c3d5c28aa5a24f"}}, @replay_thresh={0x8, 0xb, 0x5}, @sec_ctx={0xac, 0x8, {0xa8, 0x8, 0x1, 0x0, 0xa0, "ae2e013521e2a8325541dc980110c002a33f699a6952c2d84da92dd918db8e1390d6efd8a94ddb64983f77a0af5ca42423ce8ac2e559bafa655a163ee08f117d949efb7f8881d1060f2c1d95364fcfd7c7043b71c0c9a8fbbf6c940f2fa3cb71506cdd043a6d6bd3db724b28d373c54cb7fbda00eb36ff8a34493d6fb17dff8c0063e05c84b13315abdaadb24e0c406bb569bcb3f8ded69f14b196e46594bf7a"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}]}, 0x308}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000014) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r9 = syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000200)='./bus\x00', 0x4, &(0x7f0000000000)={[{@debug}, {@nouser_xattr}]}, 0x4, 0x236, &(0x7f0000000300)="$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") setreuid(0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r9, 0x800c6613, &(0x7f00000005c0)=@v2={0x2, @aes128, 0x8, '\x00', @c}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r10, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETSW2(r10, 0x402c542c, &(0x7f0000000200)={0x0, 0x2, 0x7c, 0xfffffffa, 0xc6, "84b53f5dc1d996e6e7d479db86fe609ea2029b", 0x80, 0x2}) ioctl$TCSETAF(r10, 0x5408, &(0x7f0000000100)={0x3, 0x2, 0xae2e, 0x5, 0x15, "1e138cc9534fc777"}) 6.274934088s ago: executing program 7 (id=519): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, 0x0, 0x0, 0xe7b, 0x0, 0x2) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1d8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x18c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x174, 0x1, [@m_simple={0x30, 0x1d, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x64, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0x32, 0x6, "a94ea8cd2c456f46b73d2f1ac29d83f865a819e50400b3d23efd1d2a87d8037aa7bab08f772e03d6847d1f0c98a2"}, {0xc, 0x7, {0x48022b82b4dfdb53}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_connmark={0xdc, 0x15, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffff0d, 0x8, 0x10000002, 0xfff, 0x8}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x6, 0x10000000, 0x0, 0xb}, 0xa}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0x7, 0x10000000, 0x800009, 0x6}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x2, 0x10001, 0x8}, 0x8b59}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x10000000, 0x8, 0x401}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfff, 0x3, 0x1, 0x9, 0x8}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_pts(0xffffffffffffffff, 0x70000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x6) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000001300)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000340)="fd", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}], 0x2, 0x4000000) socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) fallocate(r2, 0x11, 0x9, 0xfd) socket$nl_generic(0x10, 0x3, 0x10) shutdown(r3, 0x2) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 5.522407869s ago: executing program 4 (id=520): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x4020bc10, &(0x7f0000000280)=0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000034000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x23, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.533149343s ago: executing program 2 (id=521): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) sendmsg$netlink(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=ANY=[], 0x1b8}, {0x0, 0x1f88}], 0x2}, 0x0) 3.639850144s ago: executing program 4 (id=522): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc044}, 0x40) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f00000013c0)={0xffffffffffffffff, 0x1, 0xa, r3, 0x7ff}, 0xc) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c0928", 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) recvmsg(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f0000001300)=""/146, 0x92}], 0x2, &(0x7f0000000240)=""/127, 0x7f}, 0x40) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet6(0xa, 0x3, 0x5) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200000400000000, 0x4, 0x344}, 0x0, 0x0) 3.550837994s ago: executing program 7 (id=523): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r1}}, 0x48) 3.350339524s ago: executing program 6 (id=524): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x9a, 0xb6, 0xb6, 0x20, 0x15ba, 0x2a, 0x11bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x9, 0x40, 0x6, [{{0x9, 0x4, 0x1, 0x6, 0x0, 0x2d, 0x14, 0x14, 0x7}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 3.312364439s ago: executing program 2 (id=525): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000600)={'tunl0\x00', 0x0, 0x8000, 0x8, 0xc, 0x635abf0b, {{0x8, 0x4, 0x0, 0x31, 0x20, 0x64, 0x0, 0xf, 0x1b6475eeb6b846f, 0x0, @rand_addr=0x64010101, @remote, {[@lsrr={0x83, 0x3, 0xfb}, @generic={0x94, 0x4, "d7bd"}, @ra={0x94, 0x4}]}}}}}) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0xcc000) r5 = socket$inet6(0xa, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=r7, @ANYBLOB="2c63726561746f723dbd3d66f12c63726561746f723d64eb8ba92c6e6f6465636f6d706f73652c756d61736b3d3030303030303030303030303030303030303030303032000000003d", @ANYRESHEX=r6, @ANYRESOCT], 0x3, 0x6a4, &(0x7f0000001b40)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=") sendmsg$nl_xfrm(r1, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000940)=@updsa={0x308, 0x1a, 0x8, 0x70bd2b, 0x25dfdbfe, {{@in6=@mcast2, @in6=@empty, 0x4e20, 0x4, 0x4e24, 0xfff5, 0xa, 0x20, 0x40, 0x3b, r2, r4}, {@in=@broadcast, 0x4d4, 0x32}, @in=@local, {0x2, 0xf7ba, 0x0, 0x0, 0x9, 0x4, 0x80000000, 0x3ff}, {0x90, 0x0, 0x1, 0x3ff}, {0xfff, 0x7f, 0x1}, 0x70bd29, 0x3503, 0x2, 0x3, 0x0, 0x8}, [@tfcpad={0x8, 0x16, 0xda4e9d67}, @sa={0xe4, 0x6, {{@in6=@mcast2, @in6=@loopback, 0x4e23, 0x0, 0x4e21, 0x8, 0xa, 0x0, 0x0, 0x24, 0x0, r6}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d3, 0xff}, @in=@multicast1, {0x7, 0xf, 0xf285, 0x80000001, 0xc0b2, 0x4, 0x6, 0x6}, {0x3, 0x7, 0x2, 0xa01d}, {0x6, 0xffffffff, 0x2}, 0x8, 0x0, 0x0, 0x1, 0x9, 0x8}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}, @policy_type={0xa}, @algo_comp={0x5b, 0x3, {{'deflate\x00'}, 0x98, "529f191dd2806e016940b8d8c3d5c28aa5a24f"}}, @replay_thresh={0x8, 0xb, 0x5}, @sec_ctx={0xac, 0x8, {0xa8, 0x8, 0x1, 0x0, 0xa0, "ae2e013521e2a8325541dc980110c002a33f699a6952c2d84da92dd918db8e1390d6efd8a94ddb64983f77a0af5ca42423ce8ac2e559bafa655a163ee08f117d949efb7f8881d1060f2c1d95364fcfd7c7043b71c0c9a8fbbf6c940f2fa3cb71506cdd043a6d6bd3db724b28d373c54cb7fbda00eb36ff8a34493d6fb17dff8c0063e05c84b13315abdaadb24e0c406bb569bcb3f8ded69f14b196e46594bf7a"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}]}, 0x308}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000014) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r9 = syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000200)='./bus\x00', 0x4, &(0x7f0000000000)={[{@debug}, {@nouser_xattr}]}, 0x4, 0x236, &(0x7f0000000300)="$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") setreuid(0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r9, 0x800c6613, &(0x7f00000005c0)=@v2={0x2, @aes128, 0x8, '\x00', @c}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r10, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETSW2(r10, 0x402c542c, &(0x7f0000000200)={0x0, 0x2, 0x7c, 0xfffffffa, 0xc6, "84b53f5dc1d996e6e7d479db86fe609ea2029b", 0x80, 0x2}) ioctl$TCSETAF(r10, 0x5408, &(0x7f0000000100)={0x3, 0x2, 0xae2e, 0x5, 0x15, "1e138cc9534fc777"}) 3.182450028s ago: executing program 7 (id=526): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2.252462585s ago: executing program 2 (id=527): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$eJzs3MtvVFUYAPDvTh+8aUVEQdAqGomPlhZUFi7UaOJCExNd4LK2BZGBGloTIY0WY3BpSNwblyb+Be7cGHVhTNxq4tKQEG1MKK5q7gum02mZlpYpnd8vmc45c1/nu+eemXPv6b0BtK2+9E8SsT0ifo+Injw7f4a+/G12Zmrk+szUSBJzc2/9nWTzXZuZGilnLZfbVmQOVSIqnyXxYrJwuxPnL5werlbHzhX5gckzHwxMnL/wzKkzwyfHTo6dHTp27OiRweefG3p2VeJM47q27+Px/Xtfe+fyGyPHL7/707dpsfYcyKfXxnFL1xsE1EBfutf+mcvUT3t8GWW/G+yoSSedLSwIy9IREWl1dWXtvyc64mbl9cSrn7a0cMCaSn+bNi0+eXoO2MCSaHUJgNYof+jT89/ydYe6HuvC1Zciuov07MzUyOyN+DujUnzetYbb74uI49P/fZW+YrnXIQAAViDr2zzdqP9XiT3Zez7WsbMYQ+mNiHsiYldE3BsRuyPivohs3vujOx7IF57raXL7fXX5hf2fypWGZV4laf/vhZq+32xN/MVbb0eR25HF35WcOFUdO1zsk0PRtSnNDy6xje9f+e2LxabV9v/SV7r9si9YFOBKZ90FutHhyeHV2glXL0bs62wUf3JjJCA9AvZGxL7lrXpnmTj15Df7F5vp1vEvYRXGmea+jngir//pqIu/lCw9PjmwOapjhwfKo2Khn3+99GaR7K6fdlvxr4K0/rfOP/6LKReL955/k3y8tiuq1bFzE8vfxqU/Pl/0nGalx3938nY2Zv3Le/lnHw1PTp4bjOhOXs/y5Y7OPh+6uWyZL+dP4z90sHH731Usk8b/YESkB/GBiHgoIh4uyv5IRDwaEQeXiP/Hlx97f4n4k0iipfU/2vD7L4nYnCV6k9rx+hUkOk7/8N1iI+bN1f/RmM6+a3PZ998tNFvA29+DAAAAsP5VImJ7JJX+PN23PSqV/v78f/h3x9ZKdXxi8qkT4x+eHc3vEeiNrkp5paun5nroYDJdrDHPDxXXisvpR4rrxl92bMny/SPj1dEWxw7tbtv89h9l+0/91dHq0gFrzv1a0L7q23+lReUA7rxmfv+dC8DG1KD9b2lFOYA7z/k/tK9G7f+Turz+P2xMC9v/nw0eWQdsRPr/0L60f2hf2j+0pWbv4i+fp7DihwDMS5Q3C6x8PZubvsN//SX61mTNZQ2tZeG3xM1PorJqa55eB5WyzhNpi1nJ4rGz+WdhzE80eFgNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAXej/AAAA//+q8eIl") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0x4fed0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0x14, 0x0, &(0x7f00000026c0)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', 'cifs.idmap\x00'}, 0x36, 0xfffffffffffffffc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) process_vm_readv(0x0, &(0x7f0000002240)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001000)=""/101, 0x65}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x3, &(0x7f00000035c0)=[{&(0x7f0000002300)=""/235, 0xeb}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x2, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, &(0x7f0000000080), 0x4003) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x6, 0x100000001}) 2.109077285s ago: executing program 4 (id=528): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x20000400) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20018840}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x9) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f000001fac0)=[{{&(0x7f00000002c0)=@alg, 0x80, &(0x7f0000000380)=[{&(0x7f0000000a80)=""/199, 0xc7}, {&(0x7f0000000b80)=""/132, 0x84}], 0x2, &(0x7f0000000c40)=""/15, 0xf}, 0xfffffbff}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f000001b680)=""/4096, 0x1000}, {&(0x7f000001c680)=""/4096, 0x1000}, {&(0x7f0000000d00)=""/246, 0xf6}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)=""/63, 0x3f}, {&(0x7f0000000e80)=""/123, 0x7b}], 0x6}, 0xa8f}, {{&(0x7f0000000f80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001140)=[{&(0x7f0000001000)=""/22, 0x16}, {&(0x7f0000001040)=""/201, 0xc9}], 0x2, &(0x7f0000001180)=""/211, 0xd3}, 0x48}, {{&(0x7f0000001280)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001300)=""/130, 0x82}, {&(0x7f00000013c0)=""/47, 0x2f}, {&(0x7f0000001400)=""/43, 0x2b}, {&(0x7f0000001440)=""/72, 0x48}, {&(0x7f000001d680)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/88, 0x58}], 0x6, &(0x7f00000015c0)=""/109, 0x6d}, 0xffffffff}, {{&(0x7f0000001640)=@hci, 0x80, &(0x7f0000001700)=[{&(0x7f00000016c0)=""/19, 0x13}], 0x1, &(0x7f0000001740)=""/231, 0xe7}, 0x80000001}, {{0x0, 0x0, &(0x7f000001f980)=[{&(0x7f0000001840)=""/101, 0x65}, {0x0}, {&(0x7f0000001940)=""/81, 0x51}, {&(0x7f000001e680)=""/195, 0xc3}, {&(0x7f000001e780)=""/227, 0xe3}, {0x0}, {&(0x7f000001e980)=""/4096, 0x1000}], 0x7, &(0x7f000001fa00)=""/183, 0xb7}, 0x9}], 0x6, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000a00), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES64=0x0], 0x1, 0xc32, &(0x7f000001aa40)="$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") r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x43, 0x0, 0x1}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe8, r5, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_SOPASS={0x99, 0x3, "60c415aca976d9427a5790c4fbf11a6653adc9331b1ac9eb303b9f6fae5fb7badbe3768871148984dc63babdf89d764e9e7cfa04c6adcb37c72b24f4d045720bbfa6518356d8369eda818d0c2dfa07e3d8ecb37b8c367ba20e8e82bf70af2f519d7dee4b6a76e5bc6c7f6644b7d4ec2e45bef7a579d00abd14c09779b98d377f5271ea7c0b5ff442cee6ad1cb887b0cbf5ab002609"}, @ETHTOOL_A_WOL_SOPASS={0x21, 0x3, "a965fc4919f2c53b7cd1fdd66eba875dc2caaa9732ceb3fb14047e1453"}, @ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40840}, 0x4008800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xffe00000}, [@ldst={0x1, 0x2, 0x4, 0x24027b6f4c300628, 0x0, 0xffffffffffffffc0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ldst={0x3, 0x0, 0x3, 0x0, 0x8, 0x50, 0x1}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x6}]}, &(0x7f0000000500)='syzkaller\x00', 0x6, 0x58, &(0x7f0000000540)=""/88, 0x41100, 0x74, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x2, 0xc, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000600)=[r2, r2, r2], &(0x7f0000000640)=[{0x5, 0x2, 0x10, 0x2}, {0x3, 0x3, 0x1, 0xa}, {0x1, 0x3, 0x0, 0x1}, {0x1, 0x1, 0x1, 0xd}, {0x5, 0x2, 0x4, 0x9}, {0x3, 0x2, 0x4, 0x6}], 0x10, 0x5}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x1, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x13, 0x0, 0x1, [@generic=' \bho']}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 2.076822035s ago: executing program 7 (id=529): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000a0caccf05a94a66bb55a2a630b00c145f94cd977", 0xf0e4, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[], 0xff2e) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000540)={'#! ', './cgroup/../file0', [{0x20, 'jqfmt=vfsv1'}, {0x20, ',^$]'}, {0x20, 'sched_switch\x00'}]}, 0x34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = socket(0x10, 0x803, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.131743529s ago: executing program 6 (id=530): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 431.381837ms ago: executing program 4 (id=531): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0, 0x5a, &(0x7f0000000100)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xa2, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f00000000c0)={[{@quota}]}, 0x1, 0x448, &(0x7f00000009c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000)=0x59cc, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x20, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r4}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0x703, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 371.583671ms ago: executing program 6 (id=532): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring) syz_open_dev$usbmon(&(0x7f0000003880), 0x2, 0x4800) 155.601681ms ago: executing program 2 (id=533): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 0s ago: executing program 7 (id=534): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000071a62e6236ec949d7910d73f009b4bee0159cf4fe1018100000006000000000007002000", @ANYRES32=r4], 0x18}, 0x1, 0x0, 0x0, 0x4000010}, 0x20008000) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) unshare(0x28040680) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200), 0x0, 0x0, 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) pwritev(r2, &(0x7f00000004c0)=[{&(0x7f0000000300)="d6797d81d003d865f4e5370b98bda4", 0xf}, {&(0x7f00000003c0)="84bb586c", 0x4}, {&(0x7f0000000400)="ddeef737571211a3800a9503664d1e6f4ca6cfe662bef1b833c574a9e0fd57e167a6d13c79a0cd335c1be2d33b5f458a94d81f1609f7c21ea6bf5e619c62", 0x3e}], 0x3, 0x3, 0x8000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r7}) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x2, 0xf, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @remote}}, @sadb_key={0x1, 0x8}, @sadb_sa={0x2, 0x1, 0x0, 0xfe, 0x0, 0x3, 0x2}, @sadb_lifetime={0x4, 0x3, 0xffffffff, 0x6, 0x5, 0x2}]}, 0x78}, 0x1, 0x7}, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r7], &(0x7f0000000040), &(0x7f0000000040)=[r9, r8], &(0x7f0000000340)}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000006c0)="27050100000000000000", 0xa}, {&(0x7f0000000480)="1c393502dda1a67d93b1ceccbe97", 0xe}], 0x2}, 0x800) kernel console output (not intermixed with test programs): =0, SerialNumber=0 [ 128.764699][ T30] audit: type=1804 audit(1751449098.743:2): pid=6179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.44" name="/newroot/6/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 128.766280][ T9] usb 4-1: config 0 descriptor?? [ 128.934480][ T6184] loop2: detected capacity change from 0 to 256 [ 129.025568][ T5830] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 129.035588][ T6184] FAT-fs (loop2): Directory bread(block 64) failed [ 129.094249][ T6184] FAT-fs (loop2): Directory bread(block 65) failed [ 129.094371][ T5830] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 129.114768][ T6184] FAT-fs (loop2): Directory bread(block 66) failed [ 129.139904][ T6184] FAT-fs (loop2): Directory bread(block 67) failed [ 129.156794][ T6184] FAT-fs (loop2): Directory bread(block 68) failed [ 129.183318][ T6184] FAT-fs (loop2): Directory bread(block 69) failed [ 129.204873][ T6184] FAT-fs (loop2): Directory bread(block 70) failed [ 129.214161][ T6184] FAT-fs (loop2): Directory bread(block 71) failed [ 129.220773][ T6184] FAT-fs (loop2): Directory bread(block 72) failed [ 129.225963][ T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 129.229783][ T6184] FAT-fs (loop2): Directory bread(block 73) failed [ 129.261122][ T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 129.284541][ T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 129.317960][ T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 129.351018][ T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 129.388691][ T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 129.411247][ T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 129.458269][ T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 129.473504][ T6191] loop5: detected capacity change from 0 to 512 [ 129.476033][ T6184] tmpfs: Unknown parameter 'hash,9øe!ªD³Qo5«½7…Õ¤›/ÆR”c!Ïgƒ|ÒÉ/uó•ˆØiuçz¡Y' [ 129.491887][ T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 129.499119][ T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 129.506698][ T6192] loop4: detected capacity change from 0 to 16 [ 129.514822][ T6191] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 129.526728][ T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 129.546124][ T6192] erofs (device loop4): mounted with root inode @ nid 36. [ 129.557302][ T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 129.590183][ T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 129.642929][ T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 129.648810][ T6191] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 129.668181][ T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 129.703059][ T6191] EXT4-fs (loop5): 1 truncate cleaned up [ 129.710559][ T6191] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.739437][ T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 129.774798][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.828795][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.846319][ T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 129.898598][ T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 129.953323][ T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 129.967373][ T1331] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.011088][ T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 130.018367][ T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 130.080512][ T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 130.111013][ T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 130.118261][ T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 130.191009][ T9] microsoft 0003:045E:07DA.0001: unbalanced collection at end of report description [ 130.235933][ T6208] loop3: detected capacity change from 0 to 128 [ 130.254366][ T9] microsoft 0003:045E:07DA.0001: parse failed [ 130.260563][ T9] microsoft 0003:045E:07DA.0001: probe with driver microsoft failed with error -22 [ 130.283530][ T6208] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 130.308796][ T1331] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.322998][ T6208] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.367256][ T9] usb 4-1: USB disconnect, device number 3 [ 130.390221][ T30] audit: type=1800 audit(1751449100.373:3): pid=6208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.58" name="file1" dev="loop3" ino=104 res=0 errno=0 [ 130.430179][ T5911] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 130.584510][ T1331] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.621346][ T5911] usb 5-1: Using ep0 maxpacket: 32 [ 130.635240][ T5911] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 130.644989][ T5911] usb 5-1: config 0 has no interface number 0 [ 130.669735][ T5911] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 52, changing to 9 [ 130.687944][ T5911] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid maxpacket 8241, setting to 1024 [ 130.708813][ T5911] usb 5-1: config 0 interface 85 has no altsetting 0 [ 130.722387][ T1331] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.747116][ T5911] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 130.764932][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.773735][ T5911] usb 5-1: Product: syz [ 130.778143][ T5911] usb 5-1: Manufacturer: syz [ 130.785157][ T5911] usb 5-1: SerialNumber: syz [ 130.876673][ T5911] usb 5-1: config 0 descriptor?? [ 130.906457][ T6215] loop2: detected capacity change from 0 to 8 [ 131.294286][ T1331] bridge_slave_1: left allmulticast mode [ 131.300136][ T1331] bridge_slave_1: left promiscuous mode [ 131.328469][ T1331] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.495948][ T1331] bridge_slave_0: left allmulticast mode [ 131.503272][ T6226] loop5: detected capacity change from 0 to 1024 [ 131.528861][ T1331] bridge_slave_0: left promiscuous mode [ 131.588846][ T1331] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.628947][ T6226] syz.5.67: attempt to access beyond end of device [ 131.628947][ T6226] loop5: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 131.650749][ T6232] loop3: detected capacity change from 0 to 1024 [ 131.705998][ T6232] EXT4-fs: Ignoring removed nobh option [ 131.710364][ T5911] appletouch 5-1:0.85: Geyser mode initialized. [ 131.720237][ T5911] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input6 [ 131.724946][ T6235] syz.5.67: attempt to access beyond end of device [ 131.724946][ T6235] loop5: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 131.751206][ T6232] EXT4-fs: Ignoring removed bh option [ 131.793179][ T6237] loop0: detected capacity change from 0 to 128 [ 131.804372][ C0] appletouch 5-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 131.869630][ T6237] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 131.947324][ T6232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.004968][ T6237] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.036129][ T3401] usb 5-1: USB disconnect, device number 3 [ 132.090035][ T6232] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 132.172813][ T3401] appletouch 5-1:0.85: input: appletouch disconnected [ 132.285463][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 132.293823][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 132.305564][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 132.324165][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 132.335393][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 132.470894][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.509492][ T6252] loop5: detected capacity change from 0 to 1024 [ 132.594638][ T6252] hfsplus: xattr searching failed [ 132.847583][ T6260] loop0: detected capacity change from 0 to 256 [ 132.888942][ T6260] vfat: Bad value for 'fmask' [ 133.467444][ T6278] mmap: syz.3.81 (6278) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 133.649183][ T1331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.679347][ T1331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.731472][ T1331] bond0 (unregistering): Released all slaves [ 133.901306][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 134.412406][ T5837] Bluetooth: hci4: command tx timeout [ 134.716849][ T6286] loop2: detected capacity change from 0 to 256 [ 134.762649][ T6288] loop5: detected capacity change from 0 to 2048 [ 134.789627][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.807039][ T6290] loop0: detected capacity change from 0 to 256 [ 134.817531][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.836149][ T6286] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 134.837804][ T9] usb 5-1: Product: syz [ 134.878463][ T9] usb 5-1: Manufacturer: syz [ 134.922330][ T9] usb 5-1: SerialNumber: syz [ 134.926136][ T6290] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 135.386704][ T6299] loop5: detected capacity change from 0 to 256 [ 135.444985][ T6299] exfat: Bad value for 'uid' [ 135.460867][ T6296] loop2: detected capacity change from 0 to 2048 [ 135.485486][ T6299] exfat: Bad value for 'uid' [ 135.550489][ T6296] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 135.596598][ T6296] UDF-fs: Scanning with blocksize 512 failed [ 135.683345][ T6306] warning: `syz.3.92' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 135.709334][ T6296] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.018518][ T9] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 136.048819][ T9] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 136.058940][ T1331] hsr_slave_0: left promiscuous mode [ 136.090879][ T1331] hsr_slave_1: left promiscuous mode [ 136.132106][ T1331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.178143][ T1331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.208843][ T6321] loop0: detected capacity change from 0 to 512 [ 136.258562][ T6321] EXT4-fs: quotafile must be on filesystem root [ 136.289707][ T6295] UDF-fs: error (device loop2): udf_truncate_tail_extent: Extent after EOF in inode 818 [ 136.302090][ T9] cdc_ncm 5-1:1.0: setting tx_max = 16384 [ 136.373651][ T1331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.392586][ T1331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.579509][ T5837] Bluetooth: hci4: command tx timeout [ 137.369673][ T1331] veth1_macvtap: left promiscuous mode [ 137.393276][ T1331] veth0_macvtap: left promiscuous mode [ 137.423890][ T1331] veth1_vlan: left promiscuous mode [ 137.430171][ T1331] veth0_vlan: left promiscuous mode [ 137.662358][ T6329] kworker/u8:13: attempt to access beyond end of device [ 137.662358][ T6329] loop2: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 137.709917][ T6329] Buffer I/O error on dev loop2, logical block 1024, lost async page write [ 137.748130][ T6329] kworker/u8:13: attempt to access beyond end of device [ 137.748130][ T6329] loop2: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 137.802754][ T6329] Buffer I/O error on dev loop2, logical block 1024, lost async page write [ 137.834058][ T6329] kworker/u8:13: attempt to access beyond end of device [ 137.834058][ T6329] loop2: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 137.939482][ T6329] Buffer I/O error on dev loop2, logical block 1024, lost async page write [ 137.987083][ T6339] loop4: detected capacity change from 0 to 1024 [ 137.993647][ T6329] kworker/u8:13: attempt to access beyond end of device [ 137.993647][ T6329] loop2: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 137.993693][ T6329] Buffer I/O error on dev loop2, logical block 1024, lost async page write [ 137.993800][ T6329] kworker/u8:13: attempt to access beyond end of device [ 137.993800][ T6329] loop2: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 137.993827][ T6329] Buffer I/O error on dev loop2, logical block 1025, lost async page write [ 137.994234][ T6329] kworker/u8:13: attempt to access beyond end of device [ 137.994234][ T6329] loop2: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 138.045711][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.075184][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.112337][ T6339] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.207876][ T6329] Buffer I/O error on dev loop2, logical block 1025, lost async page write [ 138.233709][ T6339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.254051][ T6329] kworker/u8:13: attempt to access beyond end of device [ 138.254051][ T6329] loop2: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 138.349757][ T6329] Buffer I/O error on dev loop2, logical block 1025, lost async page write [ 138.404271][ T6329] kworker/u8:13: attempt to access beyond end of device [ 138.404271][ T6329] loop2: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 138.418694][ T6329] Buffer I/O error on dev loop2, logical block 1025, lost async page write [ 138.430184][ T6329] kworker/u8:13: attempt to access beyond end of device [ 138.430184][ T6329] loop2: rw=1, sector=2052, nr_sectors = 2 limit=2048 [ 138.452471][ T6022] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 138.457499][ T6329] Buffer I/O error on dev loop2, logical block 1026, lost async page write [ 138.489588][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.501128][ T6329] kworker/u8:13: attempt to access beyond end of device [ 138.501128][ T6329] loop2: rw=1, sector=2052, nr_sectors = 2 limit=2048 [ 138.532994][ T6329] Buffer I/O error on dev loop2, logical block 1026, lost async page write [ 138.641540][ T6022] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.654004][ T5837] Bluetooth: hci4: command tx timeout [ 138.669101][ T6022] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 138.681545][ T6022] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.706352][ T6022] usb 4-1: config 0 descriptor?? [ 138.757032][ T6350] loop5: detected capacity change from 0 to 2048 [ 138.813770][ T6350] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 139.025602][ T6357] loop2: detected capacity change from 0 to 512 [ 139.065936][ T6357] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 139.090567][ T6357] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0102] [ 139.311266][ T6357] System zones: 1-12 [ 139.464451][ T6357] EXT4-fs (loop2): orphan cleanup on readonly fs [ 139.581273][ T6022] lg-g15 0003:046D:C222.0002: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 139.615403][ T6357] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.106: bg 0: block 361: padding at end of block bitmap is not set [ 139.659656][ T6357] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 139.691462][ T6357] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.106: invalid indirect mapped block 12 (level 1) [ 139.700205][ T6022] usb 4-1: USB disconnect, device number 4 [ 139.747788][ T6357] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.106: invalid indirect mapped block 2 (level 2) [ 139.767631][ T6357] EXT4-fs (loop2): 1 truncate cleaned up [ 139.779935][ T6357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 139.872034][ T6357] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 139.934085][ T6364] fido_id[6364]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 139.948449][ T6366] loop5: detected capacity change from 0 to 512 [ 139.980458][ T6366] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 140.002333][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 140.049235][ T6366] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 140.077258][ T6366] System zones: 1-12 [ 140.109303][ T6366] EXT4-fs (loop5): orphan cleanup on readonly fs [ 140.122187][ T6366] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.108: invalid indirect mapped block 12 (level 1) [ 140.183796][ T6366] EXT4-fs (loop5): Remounting filesystem read-only [ 140.202741][ T6366] EXT4-fs (loop5): 1 truncate cleaned up [ 140.246405][ T6366] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 140.397990][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.111'. [ 140.408108][ T6373] binder: Bad value for 'max' [ 140.424258][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 140.693572][ T1331] team0 (unregistering): Port device team_slave_1 removed [ 140.710592][ T6381] loop3: detected capacity change from 0 to 512 [ 140.731121][ T5837] Bluetooth: hci4: command tx timeout [ 140.737783][ T6381] EXT4-fs: Ignoring removed mblk_io_submit option [ 140.768724][ T6381] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 140.793752][ T6381] EXT4-fs (loop3): blocks per group (256) and clusters per group (32768) inconsistent [ 140.810388][ T1331] team0 (unregistering): Port device team_slave_0 removed [ 141.014303][ T6387] loop5: detected capacity change from 0 to 1024 [ 141.058685][ T6387] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.154303][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.247758][ T6022] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 141.431330][ T6022] usb 4-1: Using ep0 maxpacket: 8 [ 141.444691][ T6022] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 141.475480][ T6022] usb 4-1: config 179 has no interface number 0 [ 141.490020][ T6022] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 141.504564][ T6022] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 141.528237][ T6022] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 141.546298][ T6022] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 141.564714][ T6022] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 141.601055][ T6022] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 141.610116][ T6022] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.628070][ T9] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 141.688829][ T6385] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 141.809324][ T6375] netlink: 152 bytes leftover after parsing attributes in process `syz.2.111'. [ 141.829162][ T9] usb 5-1: USB disconnect, device number 4 [ 141.900119][ T9] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 142.113251][ T6022] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input7 [ 142.351924][ T5919] usb 4-1: USB disconnect, device number 5 [ 142.351924][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 142.366048][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 142.439552][ T5919] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 142.523609][ T6243] chnl_net:caif_netlink_parms(): no params data found [ 144.759934][ T6429] loop5: detected capacity change from 0 to 512 [ 144.836309][ T6429] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 144.955991][ T6436] loop4: detected capacity change from 0 to 1024 [ 145.010150][ T6436] syz.4.135: attempt to access beyond end of device [ 145.010150][ T6436] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 145.042773][ T30] audit: type=1800 audit(1751449114.983:4): pid=6436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.135" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 145.135057][ T6429] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.135416][ T6436] Buffer I/O error on dev loop4, logical block 2889, async page read [ 145.179846][ T6436] syz.4.135: attempt to access beyond end of device [ 145.179846][ T6436] loop4: rw=0, sector=393216, nr_sectors = 2 limit=1024 [ 145.194476][ T6436] Buffer I/O error on dev loop4, logical block 196608, async page read [ 145.301531][ T6429] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.819245][ T6436] syz.4.135: attempt to access beyond end of device [ 145.819245][ T6436] loop4: rw=0, sector=393218, nr_sectors = 2 limit=1024 [ 145.875934][ T6436] Buffer I/O error on dev loop4, logical block 196609, async page read [ 145.898099][ T6430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.131'. [ 145.981277][ T6436] syz.4.135: attempt to access beyond end of device [ 145.981277][ T6436] loop4: rw=0, sector=393220, nr_sectors = 2 limit=1024 [ 145.994783][ T6436] Buffer I/O error on dev loop4, logical block 196610, async page read [ 146.022883][ T6436] syz.4.135: attempt to access beyond end of device [ 146.022883][ T6436] loop4: rw=0, sector=393222, nr_sectors = 2 limit=1024 [ 146.055068][ T6436] Buffer I/O error on dev loop4, logical block 196611, async page read [ 146.124134][ T6436] syz.4.135: attempt to access beyond end of device [ 146.124134][ T6436] loop4: rw=0, sector=393224, nr_sectors = 2 limit=1024 [ 146.245475][ T6436] Buffer I/O error on dev loop4, logical block 196612, async page read [ 146.306555][ T6436] syz.4.135: attempt to access beyond end of device [ 146.306555][ T6436] loop4: rw=0, sector=393226, nr_sectors = 2 limit=1024 [ 146.354239][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.391328][ T6436] Buffer I/O error on dev loop4, logical block 196613, async page read [ 146.432426][ T6436] syz.4.135: attempt to access beyond end of device [ 146.432426][ T6436] loop4: rw=0, sector=393228, nr_sectors = 2 limit=1024 [ 146.462985][ T6243] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.472286][ T6243] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.479588][ T6243] bridge_slave_0: entered allmulticast mode [ 146.488043][ T6243] bridge_slave_0: entered promiscuous mode [ 146.495077][ T6436] Buffer I/O error on dev loop4, logical block 196614, async page read [ 146.522432][ T6243] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.534758][ T6436] syz.4.135: attempt to access beyond end of device [ 146.534758][ T6436] loop4: rw=0, sector=393230, nr_sectors = 2 limit=1024 [ 146.577477][ T6243] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.611362][ T6243] bridge_slave_1: entered allmulticast mode [ 146.635135][ T6243] bridge_slave_1: entered promiscuous mode [ 146.691072][ T6436] Buffer I/O error on dev loop4, logical block 196615, async page read [ 146.720449][ T6436] syz.4.135: attempt to access beyond end of device [ 146.720449][ T6436] loop4: rw=0, sector=393232, nr_sectors = 2 limit=1024 [ 146.771273][ T6468] loop0: detected capacity change from 0 to 128 [ 146.777504][ T6465] loop5: detected capacity change from 0 to 256 [ 146.801099][ T6436] Buffer I/O error on dev loop4, logical block 196616, async page read [ 146.813061][ T6468] vfat: Bad value for 'gid' [ 146.839053][ T6468] vfat: Bad value for 'gid' [ 146.921180][ T6468] loop0: detected capacity change from 0 to 128 [ 146.974176][ T6243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.002914][ T6472] loop2: detected capacity change from 0 to 512 [ 147.011787][ T6243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.077010][ T6472] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 147.140549][ T6472] System zones: 1-12 [ 147.147023][ T6472] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 33261: comm syz.2.142: invalid block [ 147.173626][ T6472] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.142: invalid indirect mapped block 8 (level 2) [ 147.260595][ T6472] EXT4-fs (loop2): 1 truncate cleaned up [ 147.328375][ T6472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.505043][ T6243] team0: Port device team_slave_0 added [ 147.563181][ T6243] team0: Port device team_slave_1 added [ 147.692932][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.213639][ T6243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.546478][ T6500] loop2: detected capacity change from 0 to 1024 [ 148.905112][ T6243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.933549][ T6243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.937038][ T6500] hfsplus: xattr searching failed [ 148.997040][ T6500] process 'syz.2.148' launched './file0' with NULL argv: empty string added [ 149.006894][ T6500] hfsplus: xattr searching failed [ 149.014697][ T6500] hfsplus: xattr searching failed [ 149.101465][ T6243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.120086][ T6516] loop0: detected capacity change from 0 to 1024 [ 149.155530][ T6243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.184339][ T6516] EXT4-fs: Ignoring removed mblk_io_submit option [ 149.190802][ T6516] EXT4-fs: Ignoring removed orlov option [ 149.247643][ T6243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.351525][ T6520] loop5: detected capacity change from 0 to 256 [ 149.405962][ T6520] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 149.407481][ T6522] loop4: detected capacity change from 0 to 1024 [ 149.461635][ T6520] FAT-fs (loop5): Filesystem has been set read-only [ 149.475670][ T6522] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.506218][ T6520] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 149.578191][ T6523] loop2: detected capacity change from 0 to 4096 [ 149.584966][ T6520] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 149.603618][ T6522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.629606][ T6516] EXT4-fs (loop0): Test dummy encryption mode enabled [ 149.638843][ T6523] EXT4-fs (loop2): Test dummy encryption mode enabled [ 149.678317][ T6243] hsr_slave_0: entered promiscuous mode [ 149.687794][ T30] audit: type=1800 audit(1751449119.683:5): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.156" name="file1" dev="loop5" ino=1048610 res=0 errno=0 [ 149.712880][ T6243] hsr_slave_1: entered promiscuous mode [ 149.716389][ T6516] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 149.737795][ T6243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.744158][ T6523] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 149.745615][ T6523] System zones: 0-5 [ 149.751574][ T6523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.780147][ T6243] Cannot create hsr debugfs directory [ 149.803324][ T6516] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 149.887894][ T6516] EXT4-fs error (device loop0): __ext4_iget:5379: inode #2: block 127754: comm syz.0.155: invalid block [ 149.945075][ T6516] EXT4-fs (loop0): no journal found [ 149.971189][ T6516] EXT4-fs (loop0): can't get journal size [ 150.003517][ T6516] EXT4-fs error (device loop0): __ext4_iget:5379: inode #2: block 127754: comm syz.0.155: invalid block [ 150.246812][ T6516] EXT4-fs (loop0): get root inode failed [ 150.261972][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.273658][ T6516] EXT4-fs (loop0): mount failed [ 150.403836][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.788474][ T6552] loop0: detected capacity change from 0 to 512 [ 150.859474][ T6552] EXT4-fs: Ignoring removed nobh option [ 151.022136][ T6552] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 151.047495][ T6561] loop4: detected capacity change from 0 to 512 [ 151.068154][ T6552] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.165: invalid indirect mapped block 2683928664 (level 1) [ 151.168133][ T6552] EXT4-fs (loop0): 1 truncate cleaned up [ 151.184959][ T6561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.206011][ T6564] loop3: detected capacity change from 0 to 128 [ 151.218817][ T6552] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.296696][ T6561] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.407510][ T6561] Quota error (device loop4): do_check_range: Getting block 128 out of range 1-5 [ 151.441518][ T6561] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 151.460440][ T6574] loop5: detected capacity change from 0 to 1024 [ 151.489725][ T6561] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.168: Failed to acquire dquot type 1 [ 151.519522][ T6574] EXT4-fs: inline encryption not supported [ 151.578722][ T6574] EXT4-fs: Ignoring removed i_version option [ 151.589779][ T36] bio_check_eod: 450 callbacks suppressed [ 151.589987][ T36] kworker/u8:2: attempt to access beyond end of device [ 151.589987][ T36] loop3: rw=1, sector=129, nr_sectors = 3 limit=128 [ 151.609347][ T6561] EXT4-fs (loop4): Remounting filesystem read-only [ 151.644168][ T6574] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 151.773252][ T30] audit: type=1800 audit(1751449121.763:6): pid=6552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.165" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 151.774001][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.798543][ T6243] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 151.875412][ T6243] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 151.916653][ T6581] loop2: detected capacity change from 0 to 2048 [ 151.926940][ T5826] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 151.929606][ T6243] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 151.961204][ T6574] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.171: lblock 2 mapped to illegal pblock 2 (length 1) [ 152.019710][ T5826] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz-executor: Invalid block bitmap block 3 in block_group 0 [ 152.044679][ T6574] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 152.067793][ T6243] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 152.097099][ T5826] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 152.111268][ T6574] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm syz.5.171: lblock 0 mapped to illegal pblock 48 (length 1) [ 152.139338][ T6581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.157750][ T6574] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 152.168429][ T6574] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.171: Failed to acquire dquot type 0 [ 152.184637][ T6574] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 152.231111][ T6584] loop4: detected capacity change from 0 to 1024 [ 152.238351][ T5826] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 152.269203][ T6574] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.171: mark_inode_dirty error [ 152.330552][ T5826] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 152.331913][ T6574] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 152.366421][ T6581] EXT4-fs (loop2): shut down requested (0) [ 152.390036][ T6594] loop3: detected capacity change from 0 to 256 [ 152.441664][ T6574] EXT4-fs (loop5): 1 orphan inode deleted [ 152.466153][ T6329] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 152.493138][ T6574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.537334][ T6594] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 152.542077][ T6329] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 152.588380][ T6329] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:13: Failed to release dquot type 0 [ 152.616127][ T6594] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 152.639118][ T1331] hfsplus: b-tree write err: -5, ino 4 [ 152.701282][ T6594] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 152.734234][ T6574] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz.5.171: Invalid inode table block 1 in block_group 0 [ 152.776500][ T6574] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 152.827711][ T6594] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 152.836327][ T30] audit: type=1800 audit(1751449122.803:7): pid=6594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.176" name="file1" dev="loop3" ino=1048613 res=0 errno=0 [ 152.863781][ T6574] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.171: mark_inode_dirty error [ 152.896234][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.069030][ T65] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm kworker/u8:4: Invalid inode table block 1 in block_group 0 [ 153.205863][ T6243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.214584][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.271678][ T5824] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 153.313866][ T6614] loop4: detected capacity change from 0 to 512 [ 153.321292][ T5824] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 153.341826][ T6614] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 153.402137][ T5824] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 153.446872][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.478546][ T6614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.637854][ T6614] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 153.739307][ T6621] loop2: detected capacity change from 0 to 256 [ 153.806251][ T6621] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0xfff8ffff) [ 153.816926][ T6621] exFAT-fs (loop2): Filesystem has been set read-only [ 153.823807][ T6621] exFAT-fs (loop2): failed to load upcase table [ 153.830105][ T6621] exFAT-fs (loop2): failed to recognize exfat type [ 154.592083][ T6629] loop5: detected capacity change from 0 to 512 [ 154.625501][ T6629] ext4: Unknown parameter 'nouser_xattr' [ 154.688688][ T65] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.751854][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.889640][ T6243] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.973790][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.982141][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.144610][ T65] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.198118][ T6121] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.205353][ T6121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.356266][ T65] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.413656][ T6641] netlink: 'syz.3.187': attribute type 9 has an invalid length. [ 156.513462][ T65] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.587368][ T6653] loop3: detected capacity change from 0 to 256 [ 157.084974][ T6662] loop4: detected capacity change from 0 to 512 [ 157.924772][ T6662] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 157.998111][ T6671] loop3: detected capacity change from 0 to 512 [ 158.251333][ T6671] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.195: casefold flag without casefold feature [ 158.344957][ T6671] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.195: couldn't read orphan inode 15 (err -117) [ 158.413452][ T6671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.543101][ T65] bridge_slave_1: left allmulticast mode [ 158.569321][ T5911] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 158.581664][ T65] bridge_slave_1: left promiscuous mode [ 158.597670][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.613504][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.622554][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.630137][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.642129][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.650036][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 158.688121][ T65] bridge_slave_0: left allmulticast mode [ 158.697034][ T65] bridge_slave_0: left promiscuous mode [ 158.706744][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.720308][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.730351][ T6685] loop5: detected capacity change from 0 to 512 [ 158.761943][ T6685] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 158.776034][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 158.808460][ T5911] usb 5-1: config 0 interface 0 has no altsetting 0 [ 158.836398][ T6685] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 158.851035][ T5911] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 158.885739][ T6685] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 158.906241][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.922907][ T6685] System zones: 0-2, 18-18, 34-35 [ 158.931044][ T6685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.965459][ T5911] usb 5-1: config 0 descriptor?? [ 159.047320][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.236135][ T6695] loop5: detected capacity change from 0 to 128 [ 159.259795][ T6679] loop4: detected capacity change from 0 to 1024 [ 159.278847][ T6679] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 159.314287][ T6697] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 159.395278][ T6700] syz.5.200: attempt to access beyond end of device [ 159.395278][ T6700] loop5: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 159.471832][ T6700] syz.5.200: attempt to access beyond end of device [ 159.471832][ T6700] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 159.521373][ T6700] syz.5.200: attempt to access beyond end of device [ 159.521373][ T6700] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 159.525908][ T5911] hid (null): nested delimiters [ 159.560194][ T5911] hid (null): global environment stack underflow [ 159.604414][ T6700] syz.5.200: attempt to access beyond end of device [ 159.604414][ T6700] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 159.673375][ T6700] syz.5.200: attempt to access beyond end of device [ 159.673375][ T6700] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 159.721964][ T6700] syz.5.200: attempt to access beyond end of device [ 159.721964][ T6700] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 159.728919][ T5911] usb 5-1: USB disconnect, device number 5 [ 159.907197][ T6705] loop3: detected capacity change from 0 to 128 [ 159.940702][ T6705] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 159.960056][ T6705] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 160.019020][ T6711] loop5: detected capacity change from 0 to 1024 [ 160.051753][ T6705] ptrace attach of ""[6707] was attempted by "./syz-executor exec"[6705] [ 160.220186][ T5832] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.325119][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.393315][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.420551][ T65] bond0 (unregistering): Released all slaves [ 160.449506][ T6716] loop3: detected capacity change from 0 to 1024 [ 160.458922][ T6716] EXT4-fs: Ignoring removed orlov option [ 160.467782][ T6716] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.478062][ T6717] loop4: detected capacity change from 0 to 512 [ 160.498425][ T6716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.529435][ T6717] EXT4-fs: Ignoring removed nobh option [ 160.549091][ T6243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.628962][ T6717] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.731196][ T5837] Bluetooth: hci2: command tx timeout [ 160.835128][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.929264][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.995780][ T6725] loop2: detected capacity change from 0 to 1024 [ 161.190900][ T6729] loop3: detected capacity change from 0 to 736 [ 161.203460][ T6730] loop5: detected capacity change from 0 to 1764 [ 161.222490][ T6730] iso9660: Bad value for 'sbsector' [ 161.252079][ T6729] iso9660: Bad value for 'mode' [ 161.341864][ T6732] loop4: detected capacity change from 0 to 512 [ 161.406864][ T6732] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 161.554373][ T6732] EXT4-fs (loop4): 1 truncate cleaned up [ 161.576765][ T6735] loop2: detected capacity change from 0 to 2048 [ 161.650707][ T6732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.722848][ T6735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.861390][ T6735] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.019093][ T6735] fs-verity: sha512 using implementation "sha512-avx2" [ 162.881204][ T5837] Bluetooth: hci2: command tx timeout [ 162.923201][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.041008][ T5911] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 163.177295][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.229060][ T65] hsr_slave_0: left promiscuous mode [ 163.282611][ T65] hsr_slave_1: left promiscuous mode [ 163.289028][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.296787][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.335176][ T5911] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.371314][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.391046][ T5911] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.400189][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.431488][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.438924][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.464960][ T6767] loop2: detected capacity change from 0 to 128 [ 163.512161][ T5911] usb 6-1: config 0 descriptor?? [ 163.523049][ T6768] loop4: detected capacity change from 0 to 1024 [ 163.571194][ T6768] EXT4-fs: Ignoring removed nobh option [ 163.574214][ T6767] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 163.576804][ T6768] EXT4-fs: Ignoring removed bh option [ 163.645790][ T65] veth1_macvtap: left promiscuous mode [ 163.664485][ T65] veth0_macvtap: left promiscuous mode [ 163.678921][ T6768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.704345][ T6768] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 163.722358][ T65] veth1_vlan: left promiscuous mode [ 163.727701][ T65] veth0_vlan: left promiscuous mode [ 163.788436][ T30] audit: type=1800 audit(1751449133.773:8): pid=6773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.217" name="file1" dev="loop2" ino=94 res=0 errno=0 [ 163.835876][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.995595][ T5911] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 164.038376][ T5911] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 164.061018][ T5911] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 164.068453][ T5911] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 164.111017][ T5911] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 164.151857][ T5911] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 164.332732][ T5918] usb 6-1: USB disconnect, device number 3 [ 164.355496][ T6775] fido_id[6775]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 165.362464][ T51] Bluetooth: hci2: command tx timeout [ 165.369381][ T6782] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 166.549962][ T6787] loop4: detected capacity change from 0 to 128 [ 166.616612][ T6787] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 166.688507][ T6787] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.531389][ T51] Bluetooth: hci2: command tx timeout [ 167.846530][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 167.868914][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 167.877907][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 167.886511][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 167.894768][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 168.025200][ T6797] loop5: detected capacity change from 0 to 512 [ 168.052526][ T6797] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 168.162345][ T6797] EXT4-fs (loop5): 1 truncate cleaned up [ 168.204182][ T6797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.254159][ T6797] syz.5.227 (pid 6797) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 168.399353][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.587805][ T6806] loop5: detected capacity change from 0 to 512 [ 168.625661][ T6806] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.651212][ T6806] EXT4-fs: Ignoring removed bh option [ 168.689695][ T6806] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 168.786750][ T6806] EXT4-fs (loop5): 1 truncate cleaned up [ 168.852410][ T6806] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.914160][ T65] team0 (unregistering): Port device team_slave_1 removed [ 169.101672][ T65] team0 (unregistering): Port device team_slave_0 removed [ 169.115942][ T6813] loop4: detected capacity change from 0 to 16 [ 169.217717][ T6813] erofs (device loop4): mounted with root inode @ nid 36. [ 169.960275][ T51] Bluetooth: hci5: command tx timeout [ 170.265281][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.780079][ T6827] loop2: detected capacity change from 0 to 512 [ 170.862146][ T6829] loop5: detected capacity change from 0 to 1024 [ 170.909715][ T6827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.940128][ T6827] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.987374][ T6827] EXT4-fs (loop2): shut down requested (2) [ 171.067608][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.081558][ T12] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 171.526365][ T6842] loop5: detected capacity change from 0 to 256 [ 171.573475][ T6842] exFAT-fs (loop5): error, invalid access to FAT (entry 0x00000005) bogus content (0xfff8ffff) [ 171.583921][ T6842] exFAT-fs (loop5): Filesystem has been set read-only [ 171.590731][ T6842] exFAT-fs (loop5): failed to load upcase table [ 171.597259][ T6842] exFAT-fs (loop5): failed to recognize exfat type [ 172.091435][ T51] Bluetooth: hci5: command tx timeout [ 172.100423][ T6846] loop2: detected capacity change from 0 to 8 [ 172.478900][ T6852] loop2: detected capacity change from 0 to 512 [ 172.537919][ T6852] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.245: casefold flag without casefold feature [ 172.561606][ T6852] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.245: couldn't read orphan inode 15 (err -117) [ 172.574085][ T6858] capability: warning: `syz.5.247' uses 32-bit capabilities (legacy support in use) [ 172.598226][ T6852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.703159][ T6857] loop4: detected capacity change from 0 to 4096 [ 172.818223][ T6857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.936115][ T6857] EXT4-fs (loop4): shut down requested (1) [ 173.417749][ T6865] loop5: detected capacity change from 0 to 2048 [ 173.431833][ T6865] EXT4-fs: Ignoring removed mblk_io_submit option [ 173.475802][ T6865] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.540783][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.582846][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.698866][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.735448][ T6682] chnl_net:caif_netlink_parms(): no params data found [ 173.868513][ T6871] loop5: detected capacity change from 0 to 128 [ 173.984854][ T6871] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 174.074294][ T6871] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 174.194915][ T51] Bluetooth: hci5: command tx timeout [ 174.705454][ T6882] loop2: detected capacity change from 0 to 256 [ 175.185429][ T6882] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0xfff8ffff) [ 175.196056][ T6882] exFAT-fs (loop2): Filesystem has been set read-only [ 175.202976][ T6882] exFAT-fs (loop2): failed to load upcase table [ 175.209229][ T6882] exFAT-fs (loop2): failed to recognize exfat type [ 176.027396][ T5824] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.074833][ T6891] loop4: detected capacity change from 0 to 512 [ 176.106964][ T6891] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 176.122294][ T6682] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.140675][ T6682] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.168393][ T6682] bridge_slave_0: entered allmulticast mode [ 176.209476][ T6682] bridge_slave_0: entered promiscuous mode [ 176.242070][ T6682] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.249511][ T6893] loop5: detected capacity change from 0 to 2048 [ 176.256649][ T51] Bluetooth: hci5: command tx timeout [ 176.292803][ T6893] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 176.301157][ T6682] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.310757][ T6682] bridge_slave_1: entered allmulticast mode [ 176.318936][ T6682] bridge_slave_1: entered promiscuous mode [ 176.346200][ T6243] veth0_vlan: entered promiscuous mode [ 176.396390][ T6893] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.431541][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 176.505654][ T6682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.519722][ T6682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.613201][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 176.636186][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 176.648197][ T10] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 176.662741][ T10] usb 5-1: config 4 has an invalid descriptor of length 190, skipping remainder of the config [ 176.712026][ T10] usb 5-1: config 4 has no interface number 0 [ 176.728909][ T10] usb 5-1: string descriptor 0 read error: -22 [ 176.758058][ T10] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 176.774295][ T6243] veth1_vlan: entered promiscuous mode [ 176.785021][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.827130][ T6682] team0: Port device team_slave_0 added [ 176.838629][ T6682] team0: Port device team_slave_1 added [ 176.853614][ T10] usb 5-1: Found UVC 0.02 device (04f2:b746) [ 176.886044][ T10] usb 5-1: No valid video chain found. [ 176.987559][ T6682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.995553][ T6682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.023147][ T5911] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 177.030730][ T6682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.048108][ T10] usb 5-1: USB disconnect, device number 6 [ 177.055121][ T6682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.055139][ T6682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.055211][ T6682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.191886][ T5911] usb 6-1: Using ep0 maxpacket: 16 [ 177.208989][ T5911] usb 6-1: unable to get BOS descriptor or descriptor too short [ 177.221417][ T6792] chnl_net:caif_netlink_parms(): no params data found [ 177.234567][ T5911] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 177.251006][ T5911] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.259895][ T5911] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 177.285852][ T5911] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 177.317456][ T6682] hsr_slave_0: entered promiscuous mode [ 177.330093][ T6682] hsr_slave_1: entered promiscuous mode [ 177.337722][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.346911][ T6682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.354988][ T5911] usb 6-1: Product: syz [ 177.359161][ T5911] usb 6-1: Manufacturer: syz [ 177.363926][ T6682] Cannot create hsr debugfs directory [ 177.381202][ T5911] usb 6-1: SerialNumber: syz [ 177.452468][ T65] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.606742][ T65] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.637296][ T5911] usb 6-1: 0:2 : does not exist [ 177.773121][ T5911] usb 6-1: USB disconnect, device number 4 [ 177.809616][ T6924] loop4: detected capacity change from 0 to 512 [ 177.928102][ T6070] udevd[6070]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.059576][ T65] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.168234][ T6243] veth0_macvtap: entered promiscuous mode [ 178.258755][ T65] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.265481][ T6933] loop5: detected capacity change from 0 to 512 [ 178.283553][ T6792] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.297023][ T6792] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.308204][ T6933] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.315471][ T6792] bridge_slave_0: entered allmulticast mode [ 178.330291][ T6933] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.352919][ T6792] bridge_slave_0: entered promiscuous mode [ 178.434902][ T6243] veth1_macvtap: entered promiscuous mode [ 178.457485][ T6792] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.465777][ T6792] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.476401][ T6792] bridge_slave_1: entered allmulticast mode [ 178.484731][ T6792] bridge_slave_1: entered promiscuous mode [ 178.510742][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.627172][ T6938] loop5: detected capacity change from 0 to 512 [ 178.660478][ T6938] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 178.683554][ T6792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.778524][ T6792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.888261][ T6243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.965547][ T6792] team0: Port device team_slave_0 added [ 179.139109][ T6792] team0: Port device team_slave_1 added [ 179.145379][ T6944] Bluetooth: MGMT ver 1.23 [ 179.282141][ T6243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.340873][ T6948] loop5: detected capacity change from 0 to 1024 [ 179.361976][ T6948] EXT4-fs: Ignoring removed nobh option [ 179.367559][ T6948] EXT4-fs: Ignoring removed bh option [ 179.386098][ T6792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.422521][ T6792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.076775][ T6948] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.088651][ T6792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.110847][ T6792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.151634][ T6792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.196136][ T6948] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 181.004285][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.048035][ T6964] loop2: detected capacity change from 0 to 512 [ 181.127700][ T6964] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 181.189137][ T6792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.208502][ T6964] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 181.223756][ T6243] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.263685][ T6964] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.272: inode #15: comm syz.2.272: iget: illegal inode # [ 181.341085][ T6243] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.360710][ T6243] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.380185][ T6243] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.562299][ T6964] EXT4-fs (loop2): Remounting filesystem read-only [ 181.570705][ T6964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.820062][ T6964] EXT4-fs (loop2): shut down requested (1) [ 182.132563][ T65] bridge_slave_1: left allmulticast mode [ 182.138296][ T65] bridge_slave_1: left promiscuous mode [ 182.164586][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.859938][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.882915][ T65] bridge_slave_0: left allmulticast mode [ 182.888610][ T65] bridge_slave_0: left promiscuous mode [ 182.943257][ T6977] loop4: detected capacity change from 0 to 1024 [ 182.943280][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.128780][ T6121] hfsplus: b-tree write err: -5, ino 4 [ 183.247194][ T6984] loop4: detected capacity change from 0 to 8 [ 184.026365][ T6994] loop2: detected capacity change from 0 to 2048 [ 184.040632][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.065945][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.079987][ T65] bond0 (unregistering): Released all slaves [ 184.102361][ T6994] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 184.118971][ T6994] UDF-fs: Scanning with blocksize 512 failed [ 184.165514][ T6994] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.206579][ T6792] hsr_slave_0: entered promiscuous mode [ 184.229128][ T6792] hsr_slave_1: entered promiscuous mode [ 184.246141][ T6792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.271049][ T6792] Cannot create hsr debugfs directory [ 184.622492][ T6682] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 184.692963][ T6682] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 185.258499][ T6682] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 185.348057][ T6682] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 185.738010][ T7002] loop2: detected capacity change from 0 to 512 [ 185.792321][ T7002] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 185.808911][ T7002] System zones: 1-12 [ 185.823109][ T7002] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.283: error while reading EA inode 32 err=-116 [ 185.851660][ T65] hsr_slave_0: left promiscuous mode [ 185.867789][ T7002] EXT4-fs (loop2): Remounting filesystem read-only [ 185.874689][ T7002] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 185.911516][ T7002] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 185.927815][ T65] hsr_slave_1: left promiscuous mode [ 185.959163][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.981160][ T7002] EXT4-fs (loop2): 1 orphan inode deleted [ 185.988831][ T7002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.989605][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.068876][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.078184][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.132539][ T65] veth1_macvtap: left promiscuous mode [ 186.138180][ T65] veth0_macvtap: left promiscuous mode [ 186.149728][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.151671][ T65] veth1_vlan: left promiscuous mode [ 186.183345][ T65] veth0_vlan: left promiscuous mode [ 186.359055][ T7012] loop4: detected capacity change from 0 to 2048 [ 186.382548][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 186.419102][ T7014] loop2: detected capacity change from 0 to 2048 [ 186.431225][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 186.439975][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 186.454341][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 186.477187][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 186.522437][ T7014] udf: Bad value for 'volume' [ 186.568754][ T7012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.606427][ T7012] EXT4-fs (loop4): shut down requested (0) [ 186.757711][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.969736][ T7023] loop4: detected capacity change from 0 to 2048 [ 187.072135][ T7023] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.167025][ T7023] EXT4-fs (loop4): shut down requested (0) [ 187.296034][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.440266][ T65] team0 (unregistering): Port device team_slave_1 removed [ 187.528708][ T65] team0 (unregistering): Port device team_slave_0 removed [ 188.356563][ T6007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.365170][ T6007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.571872][ T5837] Bluetooth: hci3: command tx timeout [ 188.817179][ T2995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.851080][ T2995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.129139][ T7050] loop2: detected capacity change from 0 to 1024 [ 190.318923][ T6682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.394763][ T7050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.401077][ T5919] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 190.608912][ T6792] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 190.621374][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 190.651567][ T5837] Bluetooth: hci3: command tx timeout [ 190.683430][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.330356][ T6682] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.428831][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.460577][ T5919] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 191.461785][ T6792] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 191.473018][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.491695][ T5919] usb 5-1: config 0 descriptor?? [ 191.545255][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.562131][ T6792] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 191.588060][ T7072] loop6: detected capacity change from 0 to 512 [ 191.613249][ T6792] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 191.662988][ T7072] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.294: iget: bad i_size value: 38620345925642 [ 191.706639][ T7076] loop2: detected capacity change from 0 to 1024 [ 191.770202][ T7072] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.294: couldn't read orphan inode 15 (err -117) [ 191.789695][ T7072] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.829624][ T2942] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.836808][ T2942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.008252][ T6243] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.041023][ T5919] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 192.105254][ T2942] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.112480][ T2942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.164777][ T7092] loop2: detected capacity change from 0 to 256 [ 192.281116][ T7092] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 192.319678][ T7015] chnl_net:caif_netlink_parms(): no params data found [ 192.339284][ T7092] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 192.379801][ T7092] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 192.405873][ T5919] usb 5-1: USB disconnect, device number 7 [ 192.444303][ T65] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.520112][ T7094] netlink: 16 bytes leftover after parsing attributes in process `syz.6.296'. [ 192.670221][ T65] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.708600][ T7098] loop6: detected capacity change from 0 to 256 [ 192.731221][ T5837] Bluetooth: hci3: command tx timeout [ 192.790620][ T65] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.801538][ T30] audit: type=1800 audit(1751449162.783:9): pid=7098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.299" name="file1" dev="loop6" ino=1048620 res=0 errno=0 [ 192.831043][ T7098] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 192.868297][ T7098] FAT-fs (loop6): Filesystem has been set read-only [ 192.887848][ T7098] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 192.905775][ T7098] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 192.911258][ T5919] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 192.929521][ T7098] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 192.980597][ T7098] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 193.021310][ T7098] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 193.031139][ T65] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.083946][ T7101] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 193.087303][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 193.118950][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.128502][ T7098] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 193.141481][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.151862][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 193.180173][ T7101] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 193.185500][ T5919] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 193.192712][ T7098] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 193.205990][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.234726][ T7107] lo: entered promiscuous mode [ 193.244308][ T7107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.250018][ T5919] usb 3-1: config 0 descriptor?? [ 193.561217][ T7015] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.568399][ T7015] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.599314][ T7015] bridge_slave_0: entered allmulticast mode [ 193.632749][ T7015] bridge_slave_0: entered promiscuous mode [ 193.655788][ T7015] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.671072][ T7015] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.709560][ T7015] bridge_slave_1: entered allmulticast mode [ 193.752994][ T7015] bridge_slave_1: entered promiscuous mode [ 193.774871][ T5919] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 193.837746][ T5919] microsoft 0003:045E:07DA.0006: unbalanced collection at end of report description [ 194.087643][ T5919] microsoft 0003:045E:07DA.0006: parse failed [ 194.111610][ T5919] microsoft 0003:045E:07DA.0006: probe with driver microsoft failed with error -22 [ 194.141695][ T5919] usb 3-1: USB disconnect, device number 2 [ 194.867414][ T5837] Bluetooth: hci3: command tx timeout [ 194.952705][ T7015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.976498][ T7129] loop4: detected capacity change from 0 to 2048 [ 195.004716][ T7132] loop6: detected capacity change from 0 to 256 [ 195.020745][ T7015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.081289][ T7129] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 195.147869][ T7129] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.264956][ T6792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.430330][ T7015] team0: Port device team_slave_0 added [ 195.465291][ T7015] team0: Port device team_slave_1 added [ 195.796811][ T6792] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.923589][ T7015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.947429][ T7015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.546368][ T7154] loop6: detected capacity change from 0 to 256 [ 196.560828][ T7015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.997561][ T7015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.019574][ T7015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.197272][ T7015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.221905][ T7154] exFAT-fs (loop6): error, invalid access to FAT (entry 0x00000005) bogus content (0xfff8ffff) [ 197.232710][ T7154] exFAT-fs (loop6): Filesystem has been set read-only [ 197.239486][ T7154] exFAT-fs (loop6): failed to load upcase table [ 197.245806][ T7154] exFAT-fs (loop6): failed to recognize exfat type [ 197.250645][ T6682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.303598][ T1331] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.310762][ T1331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.380200][ T7157] netlink: 32 bytes leftover after parsing attributes in process `syz.4.314'. [ 197.654182][ T1331] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.661443][ T1331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.805226][ T7163] loop6: detected capacity change from 0 to 1024 [ 197.812799][ T7163] EXT4-fs: Ignoring removed nobh option [ 197.818375][ T7163] EXT4-fs: Ignoring removed bh option [ 198.053373][ T7163] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.157505][ T7163] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 198.469446][ T6243] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.532077][ T65] bridge_slave_1: left allmulticast mode [ 198.537764][ T65] bridge_slave_1: left promiscuous mode [ 198.545830][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.602327][ T65] bridge_slave_0: left allmulticast mode [ 198.631057][ T65] bridge_slave_0: left promiscuous mode [ 198.658005][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.318'. [ 198.667790][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.699494][ T7169] loop4: detected capacity change from 0 to 512 [ 198.732364][ T7169] journal_path: Non-blockdev passed as './file0' [ 198.762244][ T7169] EXT4-fs: error: could not find journal device path [ 198.985388][ T7178] loop4: detected capacity change from 0 to 2048 [ 199.062582][ T7178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.218779][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.493815][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.500279][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.237494][ T7190] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 200.543119][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.559051][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.576115][ T65] bond0 (unregistering): Released all slaves [ 200.722856][ T7015] hsr_slave_0: entered promiscuous mode [ 200.729501][ T7015] hsr_slave_1: entered promiscuous mode [ 201.489201][ T1200] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 201.568921][ T7209] loop4: detected capacity change from 0 to 128 [ 201.664099][ T1200] usb 3-1: config 0 has an invalid interface number: 172 but max is 0 [ 201.680687][ T1200] usb 3-1: config 0 has an invalid interface number: 225 but max is 0 [ 201.682029][ T7209] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.689316][ T1200] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 201.710528][ T1200] usb 3-1: config 0 has no interface number 0 [ 201.716651][ T1200] usb 3-1: config 0 has no interface number 1 [ 201.723103][ T1200] usb 3-1: config 0 interface 172 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 201.734276][ T1200] usb 3-1: too many endpoints for config 0 interface 225 altsetting 15: 106, using maximum allowed: 30 [ 201.745596][ T1200] usb 3-1: config 0 interface 225 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 106 [ 201.764832][ T1200] usb 3-1: config 0 interface 225 has no altsetting 0 [ 201.775475][ T7209] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 201.838138][ T1200] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=f5.93 [ 201.850145][ T1200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.875946][ T1200] usb 3-1: Product: syz [ 201.897539][ T1200] usb 3-1: Manufacturer: syz [ 201.904480][ T1200] usb 3-1: SerialNumber: syz [ 201.937155][ T1200] usb 3-1: config 0 descriptor?? [ 201.981601][ T1200] qmi_wwan 3-1:0.172: probe with driver qmi_wwan failed with error -22 [ 202.155756][ T65] hsr_slave_0: left promiscuous mode [ 202.165571][ T5911] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 202.192656][ T65] hsr_slave_1: left promiscuous mode [ 202.198979][ T1200] usb 3-1: USB disconnect, device number 3 [ 202.209000][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.240364][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.263123][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.270543][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.311618][ T65] veth1_macvtap: left promiscuous mode [ 202.317179][ T65] veth0_macvtap: left promiscuous mode [ 202.331425][ T65] veth1_vlan: left promiscuous mode [ 202.337429][ T65] veth0_vlan: left promiscuous mode [ 202.361196][ T5911] usb 5-1: Using ep0 maxpacket: 8 [ 202.368449][ T5911] usb 5-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 202.399679][ T5911] usb 5-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 202.426978][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.452896][ T5911] usb 5-1: config 0 descriptor?? [ 202.675872][ T5911] usb 5-1: USB disconnect, device number 8 [ 203.039880][ T7234] binder: 7233:7234 ioctl c0306201 200000000000 returned -14 [ 203.164876][ T65] team0 (unregistering): Port device team_slave_1 removed [ 203.281845][ T7238] loop2: detected capacity change from 0 to 1024 [ 203.289277][ T7238] EXT4-fs: Ignoring removed i_version option [ 203.338649][ T7238] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 203.407182][ T7238] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.333: Invalid block bitmap block 0 in block_group 0 [ 203.424912][ T7238] Quota error (device loop2): write_blk: dquota write failed [ 203.432709][ T7238] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 203.443112][ T7238] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.333: Failed to acquire dquot type 0 [ 203.485427][ T7238] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.333: Freeing blocks not in datazone - block = 0, count = 4096 [ 203.502324][ T7238] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.333: Invalid inode bitmap blk 0 in block_group 0 [ 203.519446][ T7238] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 203.540691][ T6091] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 203.553928][ T5823] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.578585][ T7238] EXT4-fs (loop2): 1 orphan inode deleted [ 203.599539][ T7238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.772356][ T7238] bpf: Bad value for 'mode' [ 203.821939][ T6091] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 0 [ 204.236971][ T65] team0 (unregistering): Port device team_slave_0 removed [ 204.667089][ T7245] loop4: detected capacity change from 0 to 512 [ 204.691803][ T7245] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 205.673997][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.778885][ T6792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.850689][ T7254] syzkaller0: entered promiscuous mode [ 205.859071][ T7254] syzkaller0: entered allmulticast mode [ 206.025307][ T6682] veth0_vlan: entered promiscuous mode [ 206.086196][ T7266] loop2: detected capacity change from 0 to 512 [ 206.119286][ T7266] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 206.162559][ T7266] EXT4-fs (loop2): 1 truncate cleaned up [ 206.189537][ T7266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.271176][ T5911] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 206.444320][ T5911] usb 5-1: Using ep0 maxpacket: 32 [ 206.480113][ T5911] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 206.500419][ T5911] usb 5-1: config 0 has no interface number 0 [ 206.507767][ T5911] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 56, changing to 9 [ 206.520226][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.530401][ T5911] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid maxpacket 8448, setting to 1024 [ 206.559269][ T5911] usb 5-1: config 0 interface 85 has no altsetting 0 [ 206.580296][ T5911] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 206.609641][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.648002][ T5911] usb 5-1: Product: syz [ 206.660274][ T5911] usb 5-1: Manufacturer: syz [ 206.677049][ T5911] usb 5-1: SerialNumber: syz [ 206.699685][ T5911] usb 5-1: config 0 descriptor?? [ 207.359661][ T5911] appletouch 5-1:0.85: Geyser mode initialized. [ 207.372033][ T5911] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input11 [ 207.583352][ T5911] usb 5-1: USB disconnect, device number 9 [ 207.627501][ T6682] veth1_vlan: entered promiscuous mode [ 207.637256][ T5911] appletouch 5-1:0.85: input: appletouch disconnected [ 207.847254][ T6682] veth0_macvtap: entered promiscuous mode [ 207.872393][ T6682] veth1_macvtap: entered promiscuous mode [ 208.111997][ T7015] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 208.154500][ T6682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.170844][ T7015] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 208.231772][ T1200] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 208.239330][ T7015] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 208.287175][ T6682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.295442][ T7015] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 208.362389][ T6682] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.396597][ T6682] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.421868][ T1200] usb 3-1: config 175 has an invalid descriptor of length 0, skipping remainder of the config [ 208.431191][ T6682] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.444553][ T1200] usb 3-1: config 175 has 0 interfaces, different from the descriptor's value: 1 [ 208.454071][ T6682] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.474860][ T1200] usb 3-1: New USB device found, idVendor=056a, idProduct=0047, bcdDevice= 0.00 [ 208.511244][ T9] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 208.524538][ T1200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.895705][ T7311] loop6: detected capacity change from 0 to 16 [ 208.975888][ T7311] erofs (device loop6): mounted with root inode @ nid 36. [ 209.089382][ T9] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 209.284985][ T9] usb 5-1: config 0 has no interface number 1 [ 209.532721][ T6028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.540575][ T6028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.561973][ T2942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.569799][ T2942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.581239][ T9] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 209.592326][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 209.604556][ T9] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 209.611681][ T6792] veth0_vlan: entered promiscuous mode [ 209.619684][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 209.660591][ T5829] usb 3-1: USB disconnect, device number 4 [ 209.662962][ T6792] veth1_vlan: entered promiscuous mode [ 209.693886][ T9] usb 5-1: SerialNumber: syz [ 209.708335][ T9] usb 5-1: config 0 descriptor?? [ 209.803721][ T7015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.886009][ T7015] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.947926][ T2942] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.955123][ T2942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.971995][ T9] usb 5-1: Found UVC 0.00 device (0002:0000) [ 209.978890][ T9] usb 5-1: No valid video chain found. [ 210.049295][ T2942] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.049421][ T2942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.050565][ T9] usb 5-1: USB disconnect, device number 10 [ 210.129101][ T7323] loop7: detected capacity change from 0 to 512 [ 210.199124][ T6792] veth0_macvtap: entered promiscuous mode [ 210.248992][ T7323] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.266736][ T6792] veth1_macvtap: entered promiscuous mode [ 210.316225][ T7323] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.434736][ T6792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.478145][ T30] audit: type=1800 audit(1751449180.453:10): pid=7323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.185" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 210.487557][ T6792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.616552][ T6682] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.626610][ T6792] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.647927][ T6792] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.676045][ T6792] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.711342][ T6792] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.815438][ T7337] loop4: detected capacity change from 0 to 736 [ 211.282052][ T2995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.282308][ T7346] loop2: detected capacity change from 0 to 512 [ 211.345334][ T2995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.361128][ T7346] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.356: casefold flag without casefold feature [ 211.403152][ T7346] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.356: couldn't read orphan inode 15 (err -117) [ 211.429182][ T7346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.657145][ T7354] loop4: detected capacity change from 0 to 8 [ 211.658082][ T7356] loop6: detected capacity change from 0 to 8 [ 211.683533][ T7354] SQUASHFS error: Unknown LZ4 version [ 211.689212][ T7354] squashfs image failed sanity check [ 211.730083][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.744920][ T7356] SQUASHFS error: Unable to read inode 0xe3 [ 211.794434][ T6329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.824823][ T6329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.834692][ T7015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.044286][ T7362] loop2: detected capacity change from 0 to 256 [ 213.156554][ T7375] loop8: detected capacity change from 0 to 512 [ 213.169667][ T7383] loop4: detected capacity change from 0 to 16 [ 213.258473][ T7383] erofs (device loop4): mounted with root inode @ nid 36. [ 213.287138][ T7375] EXT4-fs (loop8): orphan cleanup on readonly fs [ 213.474650][ T7375] EXT4-fs error (device loop8): ext4_quota_enable:7124: comm syz.8.364: inode #218103808: comm syz.8.364: iget: illegal inode # [ 213.566143][ T7375] EXT4-fs error (device loop8): ext4_quota_enable:7127: comm syz.8.364: Bad quota inode: 218103808, type: 2 [ 213.602541][ T7389] loop6: detected capacity change from 0 to 128 [ 213.638103][ T7375] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 213.765050][ T7389] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 213.810577][ T7375] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 213.848766][ T7389] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 214.002841][ T7375] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 214.027589][ T7389] fscrypt (loop6, inode 12): Mutually exclusive encryption flags (0x0f) [ 214.100011][ T7015] veth0_vlan: entered promiscuous mode [ 214.176721][ T7015] veth1_vlan: entered promiscuous mode [ 214.209264][ T7375] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 214.280705][ T6243] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 214.297283][ T7375] EXT4-fs error (device loop8): ext4_quota_enable:7124: comm syz.8.364: inode #218103808: comm syz.8.364: iget: illegal inode # [ 214.352733][ T7375] EXT4-fs error (device loop8): ext4_quota_enable:7127: comm syz.8.364: Bad quota inode: 218103808, type: 2 [ 214.626600][ T7375] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 215.111415][ T7015] veth0_macvtap: entered promiscuous mode [ 215.374326][ T7015] veth1_macvtap: entered promiscuous mode [ 215.455909][ T7015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.518228][ T7015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.530058][ T7015] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.539262][ T7015] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.548816][ T7015] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.559128][ T7015] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.783445][ T6792] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.853573][ T7421] loop4: detected capacity change from 0 to 512 [ 215.908521][ T7421] journal_path: Lookup failure for './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 215.935356][ T7423] loop2: detected capacity change from 0 to 128 [ 215.996747][ T7425] loop6: detected capacity change from 0 to 256 [ 215.999937][ T7421] EXT4-fs: error: could not find journal device path [ 216.059782][ T7423] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.080800][ T7423] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 216.095957][ T7425] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 216.148175][ T7425] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 216.228092][ T7425] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 216.325303][ T7425] UDF-fs: Scanning with blocksize 512 failed [ 216.371694][ T7425] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 217.130999][ T7425] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.142036][ T2942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.150122][ T2942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.158969][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 217.161030][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 217.783512][ T5822] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 217.871126][ T7439] loop8: detected capacity change from 0 to 4096 [ 217.878446][ T7439] EXT4-fs: Ignoring removed nomblk_io_submit option [ 217.930715][ T7439] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.173105][ T7439] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 218.235068][ T7444] loop2: detected capacity change from 0 to 256 [ 218.288047][ T7444] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 218.308321][ T7446] loop4: detected capacity change from 0 to 1024 [ 218.356103][ T6792] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.365839][ T7444] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 218.470752][ T7444] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 218.506280][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.551150][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.589831][ T7437] hfsplus: b-tree write err: -5, ino 4 [ 219.428748][ T7462] loop8: detected capacity change from 0 to 256 [ 220.293896][ T7462] exFAT-fs (loop8): error, invalid access to FAT (entry 0x00000005) bogus content (0xfff8ffff) [ 220.306433][ T7462] exFAT-fs (loop8): Filesystem has been set read-only [ 220.313305][ T7462] exFAT-fs (loop8): failed to load upcase table [ 220.319557][ T7462] exFAT-fs (loop8): failed to recognize exfat type [ 221.560021][ T7484] loop8: detected capacity change from 0 to 8 [ 221.767187][ T5919] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 221.850174][ T7491] loop7: detected capacity change from 0 to 1024 [ 221.891753][ T7493] loop6: detected capacity change from 0 to 512 [ 221.909670][ T7495] loop4: detected capacity change from 0 to 1024 [ 221.934611][ T7493] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 221.976771][ T5919] usb 3-1: Using ep0 maxpacket: 8 [ 221.997625][ T7493] EXT4-fs error (device loop6): ext4_iget_extra_inode:5035: inode #15: comm syz.6.396: corrupted in-inode xattr: bad e_name length [ 222.016126][ T5919] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 222.070405][ T5919] usb 3-1: config 0 has no interface number 0 [ 222.096830][ T7493] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.396: couldn't read orphan inode 15 (err -117) [ 222.126789][ T5919] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 222.177138][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.183512][ T7493] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.188888][ T6028] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.238871][ T5919] usb 3-1: Product: syz [ 222.280988][ T5919] usb 3-1: Manufacturer: syz [ 222.308279][ T5919] usb 3-1: SerialNumber: syz [ 222.372194][ T5919] usb 3-1: config 0 descriptor?? [ 222.458441][ T5919] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 222.595962][ T6028] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.628853][ T6243] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.642644][ T5919] snd-usb-audio 3-1:0.151: probe with driver snd-usb-audio failed with error -2 [ 222.687199][ T5919] usb 3-1: USB disconnect, device number 5 [ 222.746516][ T6028] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.776622][ T6070] udevd[6070]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.704314][ T6028] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.434893][ T7526] loop6: detected capacity change from 0 to 128 [ 224.465113][ T7526] EXT4-fs (loop6): Test dummy encryption mode enabled [ 224.512660][ T7525] loop8: detected capacity change from 0 to 1024 [ 224.553151][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 224.556041][ T7526] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 224.562612][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 224.582218][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 224.592184][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 224.602078][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 224.729997][ T7525] hfsplus: xattr searching failed [ 224.743173][ T7526] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.781721][ T6028] bridge_slave_1: left allmulticast mode [ 224.787404][ T6028] bridge_slave_1: left promiscuous mode [ 224.833863][ T6028] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.889421][ T6028] bridge_slave_0: left allmulticast mode [ 224.921748][ T6028] bridge_slave_0: left promiscuous mode [ 224.930388][ T7526] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 224.950849][ T6028] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.971936][ T6792] hfsplus: node 4:3 still has 2 user(s)! [ 225.034629][ T7526] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 225.278385][ T6243] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.287868][ T7542] loop2: detected capacity change from 0 to 16 [ 225.321430][ T7542] erofs (device loop2): mounted with root inode @ nid 36. [ 225.431202][ T5825] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 225.605479][ T5825] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 225.631021][ T5825] usb 9-1: config 0 has no interface number 0 [ 225.658904][ T5825] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.701022][ T5825] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.757436][ T5825] usb 9-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 225.771341][ T7550] netlink: 208 bytes leftover after parsing attributes in process `syz.2.411'. [ 225.794428][ T5825] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.849433][ T5825] usb 9-1: config 0 descriptor?? [ 226.290846][ T5825] prodikeys 0003:041E:2801.0007: unexpected long global item [ 226.355966][ T5825] prodikeys 0003:041E:2801.0007: hid parse failed [ 226.402172][ T5825] prodikeys 0003:041E:2801.0007: probe with driver prodikeys failed with error -22 [ 226.499139][ T5825] usb 9-1: USB disconnect, device number 2 [ 226.651318][ T51] Bluetooth: hci3: command tx timeout [ 226.769806][ T7564] loop6: detected capacity change from 0 to 512 [ 226.844846][ T7564] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 227.528200][ T7564] UDF-fs: error (device loop6): udf_read_inode: (ino 19) failed ident=264 [ 227.969354][ T6028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.014872][ T5911] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 228.045353][ T6028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.069447][ T7576] loop6: detected capacity change from 0 to 1024 [ 228.086916][ T5911] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 228.098847][ T6028] bond0 (unregistering): Released all slaves [ 228.120156][ T7576] EXT4-fs: Ignoring removed nomblk_io_submit option [ 228.164826][ T7576] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 228.308463][ T7587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.422'. [ 228.314121][ T7576] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.368673][ T7589] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 228.563343][ T7594] loop2: detected capacity change from 0 to 128 [ 228.618323][ T7594] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 228.731099][ T51] Bluetooth: hci3: command tx timeout [ 228.757738][ T6243] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.759301][ T7594] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 230.871222][ T51] Bluetooth: hci3: command tx timeout [ 231.360816][ T7614] loop6: detected capacity change from 0 to 512 [ 231.444218][ T7614] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 231.464035][ T7624] loop4: detected capacity change from 0 to 1024 [ 231.520723][ T7627] loop7: detected capacity change from 0 to 256 [ 231.555495][ T7627] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 231.571696][ T7627] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 231.583147][ T7614] EXT4-fs (loop6): 1 truncate cleaned up [ 231.620674][ T7624] hfsplus: request for non-existent node 211 in B*Tree [ 231.631057][ T7624] hfsplus: request for non-existent node 211 in B*Tree [ 231.662780][ T7614] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.710382][ T7627] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 231.772460][ T6028] hsr_slave_0: left promiscuous mode [ 231.791067][ T1200] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 231.841906][ T6028] hsr_slave_1: left promiscuous mode [ 231.860729][ T6028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.919441][ T6028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.988793][ T6028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.998582][ T1200] usb 9-1: Using ep0 maxpacket: 16 [ 232.054633][ T6028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.062360][ T1200] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.110245][ T1200] usb 9-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 232.147090][ T1200] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.160060][ T6243] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.170298][ T1200] usb 9-1: config 0 descriptor?? [ 232.208809][ T6028] veth1_macvtap: left promiscuous mode [ 232.225318][ T7641] loop2: detected capacity change from 0 to 1024 [ 232.274834][ T6028] veth0_macvtap: left promiscuous mode [ 232.301192][ T6028] veth1_vlan: left promiscuous mode [ 232.306599][ T6028] veth0_vlan: left promiscuous mode [ 232.396130][ T7644] loop7: detected capacity change from 0 to 2048 [ 232.495516][ T7644] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.605950][ T30] audit: type=1800 audit(1751449202.593:11): pid=7644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.437" name="file2" dev="loop7" ino=1336 res=0 errno=0 [ 232.922262][ T51] Bluetooth: hci3: command tx timeout [ 232.954448][ T7655] fuse: root generation should be zero [ 233.518523][ T1200] usb 9-1: USB disconnect, device number 3 [ 233.688643][ T7663] IPv6: addrconf: prefix option has invalid lifetime [ 235.192146][ T7670] loop2: detected capacity change from 0 to 128 [ 235.202278][ T7670] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 236.777255][ T7694] loop2: detected capacity change from 0 to 512 [ 237.037700][ T7694] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 237.177829][ T7694] EXT4-fs (loop2): 1 truncate cleaned up [ 237.185596][ T7694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.676299][ T7705] Driver unsupported XDP return value 0 on prog (id 56) dev N/A, expect packet loss! [ 238.914323][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.104340][ T7715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.458'. [ 239.794788][ T7717] loop2: detected capacity change from 0 to 512 [ 239.812192][ T7717] EXT4-fs: Ignoring removed nobh option [ 239.850339][ T7717] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 239.903380][ T7717] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 239.961913][ T7717] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.459: Corrupt directory, running e2fsck is recommended [ 240.206968][ T7717] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 240.529408][ T7717] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.459: corrupted in-inode xattr: invalid ea_ino [ 241.881161][ T7717] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.459: couldn't read orphan inode 15 (err -117) [ 242.193077][ T7717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.279736][ T7717] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 242.298454][ T7717] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 242.308945][ T7717] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.459: Corrupt directory, running e2fsck is recommended [ 242.525611][ T7717] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 243.253988][ T7699] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 243.301071][ T7717] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 243.524670][ T7736] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 243.551240][ T3401] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 243.591143][ T7717] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.459: Corrupt directory, running e2fsck is recommended [ 243.705123][ T7736] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 243.796097][ T7736] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.459: Corrupt directory, running e2fsck is recommended [ 243.876153][ T6028] team0 (unregistering): Port device team_slave_1 removed [ 243.898390][ T7740] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 245.677343][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.792645][ T6028] team0 (unregistering): Port device team_slave_0 removed [ 246.250292][ T7754] debugfs: Bad value for 'uid' [ 246.255263][ T7754] debugfs: Bad value for 'uid' [ 247.684946][ T7759] loop6: detected capacity change from 0 to 256 [ 247.781124][ T1200] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 247.837559][ T7759] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 247.896792][ T7759] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 247.949375][ T1200] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 247.983308][ T1200] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 248.021364][ T1200] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 248.075728][ T1200] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 248.098109][ T1200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.182169][ T1200] usb 3-1: config 0 descriptor?? [ 249.423413][ T3401] usb 8-1: device descriptor read/64, error -110 [ 250.281431][ T3401] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 250.431443][ T3401] usb 8-1: device descriptor read/64, error -32 [ 250.472273][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 250.480649][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 250.491312][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 250.502493][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 250.519443][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 250.561434][ T3401] usb usb8-port1: attempt power cycle [ 250.804512][ T5919] usb 3-1: USB disconnect, device number 6 [ 251.140161][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.6.473'. [ 251.680898][ T7795] loop4: detected capacity change from 0 to 256 [ 251.732909][ T7795] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0xfff8ffff) [ 251.744356][ T7795] exFAT-fs (loop4): Filesystem has been set read-only [ 251.751967][ T7795] exFAT-fs (loop4): failed to load upcase table [ 251.758263][ T7795] exFAT-fs (loop4): failed to recognize exfat type [ 252.607564][ T51] Bluetooth: hci5: command tx timeout [ 253.411148][ T7530] chnl_net:caif_netlink_parms(): no params data found [ 254.574883][ T7822] loop7: detected capacity change from 0 to 256 [ 254.651312][ T51] Bluetooth: hci5: command tx timeout [ 254.746674][ T7822] exFAT-fs (loop7): error, invalid access to FAT (entry 0x00000005) bogus content (0xfff8ffff) [ 254.757667][ T7822] exFAT-fs (loop7): Filesystem has been set read-only [ 254.764728][ T7822] exFAT-fs (loop7): failed to load upcase table [ 254.771058][ T7822] exFAT-fs (loop7): failed to recognize exfat type [ 255.316482][ T7826] loop6: detected capacity change from 0 to 512 [ 255.456293][ T7826] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.485: casefold flag without casefold feature [ 255.588730][ T7826] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.485: couldn't read orphan inode 15 (err -117) [ 256.342125][ T7826] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.659738][ T7848] netlink: 4 bytes leftover after parsing attributes in process `syz.7.488'. [ 256.736981][ T5837] Bluetooth: hci5: command tx timeout [ 258.071342][ T6243] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.246118][ T7862] loop4: detected capacity change from 0 to 512 [ 258.332496][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 258.367745][ T7862] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.492: casefold flag without casefold feature [ 259.281338][ T5837] Bluetooth: hci5: command tx timeout [ 259.366195][ T7862] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.492: couldn't read orphan inode 15 (err -117) [ 259.413256][ T7862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.356586][ T7876] loop7: detected capacity change from 0 to 256 [ 260.898515][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.905616][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.060013][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.171193][ T7530] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.178377][ T7530] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.193354][ T7530] bridge_slave_0: entered allmulticast mode [ 262.262510][ T7530] bridge_slave_0: entered promiscuous mode [ 262.271219][ T7530] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.278401][ T7530] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.421290][ T7530] bridge_slave_1: entered allmulticast mode [ 262.429419][ T7530] bridge_slave_1: entered promiscuous mode [ 262.796520][ T7902] loop7: detected capacity change from 0 to 256 [ 263.169011][ T7902] exFAT-fs (loop7): error, invalid access to FAT (entry 0x00000005) bogus content (0xfff8ffff) [ 263.179615][ T7902] exFAT-fs (loop7): Filesystem has been set read-only [ 263.186776][ T7902] exFAT-fs (loop7): failed to load upcase table [ 263.193520][ T7902] exFAT-fs (loop7): failed to recognize exfat type [ 263.409274][ T6028] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.220549][ T7916] loop4: detected capacity change from 0 to 256 [ 265.275765][ T7916] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0xfff8ffff) [ 265.286315][ T7916] exFAT-fs (loop4): Filesystem has been set read-only [ 265.293271][ T7916] exFAT-fs (loop4): failed to load upcase table [ 265.299567][ T7916] exFAT-fs (loop4): failed to recognize exfat type [ 265.680814][ T7530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.699249][ T7530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.955825][ T6028] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.800784][ T7932] loop4: detected capacity change from 0 to 512 [ 267.891233][ T7932] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.509: casefold flag without casefold feature [ 267.974658][ T7932] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.509: couldn't read orphan inode 15 (err -117) [ 268.067405][ T7530] team0: Port device team_slave_0 added [ 268.073723][ T7932] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.048389][ T6028] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.316977][ T7530] team0: Port device team_slave_1 added [ 270.083692][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.764026][ T5825] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 271.059383][ T6028] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.110240][ T7970] loop4: detected capacity change from 0 to 512 [ 271.188464][ T7970] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 271.287013][ T7970] EXT4-fs (loop4): 1 truncate cleaned up [ 271.352288][ T7970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.683732][ T7530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.690722][ T7530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.989886][ T7985] loop2: detected capacity change from 0 to 1024 [ 273.274337][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.613268][ T7530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.886295][ T65] hfsplus: b-tree write err: -5, ino 4 [ 274.001798][ T7530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.744723][ T7530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.843603][ T7530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.368904][ T8017] loop2: detected capacity change from 0 to 1024 [ 275.479124][ T8017] hfsplus: Bad value for 'gid' [ 275.490759][ T8013] ip6erspan0: entered promiscuous mode [ 275.497392][ T6022] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 275.845710][ T6022] usb 7-1: unable to get BOS descriptor or descriptor too short [ 275.951236][ T6022] usb 7-1: not running at top speed; connect to a high speed hub [ 275.956776][ T7530] hsr_slave_0: entered promiscuous mode [ 275.966137][ T6022] usb 7-1: config 6 has an invalid interface number: 1 but max is 0 [ 275.977348][ T6022] usb 7-1: config 6 has no interface number 0 [ 275.983670][ T6022] usb 7-1: config 6 interface 1 has no altsetting 0 [ 275.994983][ T6022] usb 7-1: New USB device found, idVendor=15ba, idProduct=002a, bcdDevice=11.bf [ 276.006708][ T6022] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.015030][ T6022] usb 7-1: Product: syz [ 276.019478][ T6022] usb 7-1: Manufacturer: syz [ 276.024290][ T6022] usb 7-1: SerialNumber: syz [ 276.044108][ T7530] hsr_slave_1: entered promiscuous mode [ 276.214516][ T7775] chnl_net:caif_netlink_parms(): no params data found [ 276.263837][ T6022] ftdi_sio 7-1:6.1: FTDI USB Serial Device converter detected [ 276.319257][ T6022] ftdi_sio ttyUSB0: unknown device type: 0x11bf [ 276.325660][ T8025] loop2: detected capacity change from 0 to 512 [ 276.384498][ T6022] usb 7-1: USB disconnect, device number 2 [ 276.408310][ T8025] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.527: casefold flag without casefold feature [ 276.453981][ T6022] ftdi_sio 7-1:6.1: device disconnected [ 276.469688][ T8025] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.527: couldn't read orphan inode 15 (err -117) [ 276.569434][ T8025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.586459][ T8033] loop4: detected capacity change from 0 to 2048 [ 276.604718][ T8033] UDF-fs: warning (device loop4): udf_fill_super: No partition found (2) [ 276.685441][ T8032] loop7: detected capacity change from 0 to 2048 [ 277.004293][ T8032] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 277.780245][ T8032] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 278.130039][ T8049] loop4: detected capacity change from 0 to 512 [ 278.172340][ T8049] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 278.213604][ T8049] EXT4-fs (loop4): 1 truncate cleaned up [ 278.364708][ T8049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.468798][ T2942] ------------[ cut here ]------------ [ 278.474790][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.484407][ T2942] kernel BUG at fs/ext4/inode.c:2748! [ 278.507611][ T2942] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 278.514050][ T2942] CPU: 0 UID: 0 PID: 2942 Comm: kworker/u8:6 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 278.526209][ T2942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 278.536272][ T2942] Workqueue: writeback wb_workfn (flush-7:7) [ 278.542294][ T2942] RIP: 0010:ext4_do_writepages+0x3f2b/0x3f30 [ 278.548330][ T2942] Code: c1 0f 8c 2a fd ff ff 4c 89 e7 e8 00 55 b0 ff e9 1d fd ff ff e8 56 d2 4c ff 90 0f 0b e8 4e d2 4c ff 90 0f 0b e8 46 d2 4c ff 90 <0f> 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 [ 278.568041][ T2942] RSP: 0018:ffffc9000b70ece0 EFLAGS: 00010293 [ 278.574123][ T2942] RAX: ffffffff82737c5a RBX: 0000004210000000 RCX: ffff88802fa70000 [ 278.582278][ T2942] RDX: 0000000000000000 RSI: 0000004000000000 RDI: 0000000000000000 [ 278.590281][ T2942] RBP: ffffc9000b70f0f0 R08: ffff88804fa04347 R09: 1ffff11009f40868 [ 278.598281][ T2942] R10: dffffc0000000000 R11: ffffed1009f40869 R12: 0000000000000001 [ 278.606349][ T2942] R13: 0000000004208160 R14: 0000004000000000 R15: ffffc9000b70f140 [ 278.614340][ T2942] FS: 0000000000000000(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 278.623366][ T2942] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 278.629953][ T2942] CR2: 000000110c325037 CR3: 000000000df38000 CR4: 0000000000350ef0 [ 278.637927][ T2942] Call Trace: [ 278.641198][ T2942] [ 278.644124][ T2942] ? kasan_quarantine_put+0xdd/0x220 [ 278.649418][ T2942] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.655053][ T2942] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.660258][ T2942] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.665893][ T2942] ? ieee80211_inform_bss+0xbd9/0x10a0 [ 278.671374][ T2942] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.677009][ T2942] ? ieee80211_inform_bss+0xbd9/0x10a0 [ 278.682481][ T2942] ? __local_bh_enable_ip+0x12d/0x1c0 [ 278.687859][ T2942] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.693518][ T2942] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.698727][ T2942] ? __local_bh_enable_ip+0x12d/0x1c0 [ 278.704106][ T2942] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 278.709835][ T2942] ? __pfx_ext4_do_writepages+0x10/0x10 [ 278.715386][ T2942] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.721016][ T2942] ? rcu_is_watching+0x15/0xb0 [ 278.725786][ T2942] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.731416][ T2942] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.737051][ T2942] ? look_up_lock_class+0x74/0x170 [ 278.742168][ T2942] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.747798][ T2942] ? register_lock_class+0x51/0x320 [ 278.753002][ T2942] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.758632][ T2942] ? __lock_acquire+0xab9/0xd20 [ 278.763490][ T2942] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.769128][ T2942] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.774762][ T2942] ? rcu_read_lock_any_held+0xb3/0x120 [ 278.780231][ T2942] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.785869][ T2942] ext4_writepages+0x205/0x350 [ 278.790632][ T2942] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.796264][ T2942] ? __pfx_ext4_writepages+0x10/0x10 [ 278.801568][ T2942] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.807206][ T2942] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.812877][ T2942] ? do_raw_spin_unlock+0x122/0x240 [ 278.818081][ T2942] ? __pfx_ext4_writepages+0x10/0x10 [ 278.823368][ T2942] do_writepages+0x32e/0x550 [ 278.827968][ T2942] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.833601][ T2942] ? reacquire_held_locks+0x127/0x1d0 [ 278.838965][ T2942] ? writeback_sb_inodes+0x372/0x1000 [ 278.844375][ T2942] __writeback_single_inode+0x145/0xff0 [ 278.849928][ T2942] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.855572][ T2942] ? do_raw_spin_unlock+0x122/0x240 [ 278.860769][ T2942] writeback_sb_inodes+0x6b5/0x1000 [ 278.865991][ T2942] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.871634][ T2942] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 278.877297][ T2942] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.882929][ T2942] ? rcu_is_watching+0x15/0xb0 [ 278.887701][ T2942] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.893337][ T2942] wb_writeback+0x43b/0xaf0 [ 278.897852][ T2942] ? queue_io+0x3c1/0x590 [ 278.902194][ T2942] ? __pfx_wb_writeback+0x10/0x10 [ 278.907230][ T2942] ? _raw_spin_unlock_irq+0x23/0x50 [ 278.912434][ T2942] wb_workfn+0x409/0xef0 [ 278.916690][ T2942] ? __pfx_wb_workfn+0x10/0x10 [ 278.921459][ T2942] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.927115][ T2942] ? __lock_acquire+0xab9/0xd20 [ 278.931976][ T2942] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.937607][ T2942] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.943240][ T2942] ? _raw_spin_unlock_irq+0x23/0x50 [ 278.948441][ T2942] ? process_scheduled_works+0x9ef/0x17b0 [ 278.954257][ T2942] ? process_scheduled_works+0x9ef/0x17b0 [ 278.959983][ T2942] process_scheduled_works+0xae1/0x17b0 [ 278.965552][ T2942] ? __pfx_process_scheduled_works+0x10/0x10 [ 278.971542][ T2942] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.977181][ T2942] worker_thread+0x8a0/0xda0 [ 278.981802][ T2942] kthread+0x711/0x8a0 [ 278.985873][ T2942] ? __pfx_worker_thread+0x10/0x10 [ 278.990991][ T2942] ? __pfx_kthread+0x10/0x10 [ 278.995576][ T2942] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.001208][ T2942] ? _raw_spin_unlock_irq+0x23/0x50 [ 279.006408][ T2942] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.012041][ T2942] ? lockdep_hardirqs_on+0x9c/0x150 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 279.017257][ T2942] ? __pfx_kthread+0x10/0x10 [ 279.021864][ T2942] ret_from_fork+0x3fc/0x770 [ 279.026471][ T2942] ? __pfx_ret_from_fork+0x10/0x10 [ 279.031590][ T2942] ? __switch_to_asm+0x39/0x70 [ 279.036365][ T2942] ? __switch_to_asm+0x33/0x70 [ 279.041129][ T2942] ? __pfx_kthread+0x10/0x10 [ 279.045718][ T2942] ret_from_fork_asm+0x1a/0x30 [ 279.050507][ T2942] [ 279.053519][ T2942] Modules linked in: [ 279.059136][ T2942] ---[ end trace 0000000000000000 ]--- [ 279.101501][ T2942] RIP: 0010:ext4_do_writepages+0x3f2b/0x3f30 [ 279.107627][ T2942] Code: c1 0f 8c 2a fd ff ff 4c 89 e7 e8 00 55 b0 ff e9 1d fd ff ff e8 56 d2 4c ff 90 0f 0b e8 4e d2 4c ff 90 0f 0b e8 46 d2 4c ff 90 <0f> 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 [ 279.855592][ T6028] bridge_slave_1: left allmulticast mode [ 279.942979][ T6028] bridge_slave_1: left promiscuous mode [ 279.948719][ T6028] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.051585][ T2942] RSP: 0018:ffffc9000b70ece0 EFLAGS: 00010293 [ 280.057719][ T2942] RAX: ffffffff82737c5a RBX: 0000004210000000 RCX: ffff88802fa70000 [ 280.065917][ T2942] RDX: 0000000000000000 RSI: 0000004000000000 RDI: 0000000000000000 [ 280.073930][ T2942] RBP: ffffc9000b70f0f0 R08: ffff88804fa04347 R09: 1ffff11009f40868 [ 280.081956][ T2942] R10: dffffc0000000000 R11: ffffed1009f40869 R12: 0000000000000001 [ 280.089941][ T2942] R13: 0000000004208160 R14: 0000004000000000 R15: ffffc9000b70f140 [ 280.133451][ T2942] FS: 0000000000000000(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 280.162113][ T2942] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 280.168727][ T2942] CR2: 0000555577bd3608 CR3: 000000000df38000 CR4: 0000000000350ef0 [ 280.192723][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.301720][ T2942] Kernel panic - not syncing: Fatal exception [ 280.308029][ T2942] Kernel Offset: disabled [ 280.312349][ T2942] Rebooting in 86400 seconds..