last executing test programs: 10m44.873488419s ago: executing program 0 (id=2081): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x595, 0x800000000001, 0x7ff, 0x4}}], 0x50}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000040)={0xa0000, 0x0, {[0x7, 0xf66, 0xc9b, 0x9, 0x5, 0x6, 0xe5, 0x100000000]}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f00000001c0)={0xbc, 0x0, 0x2}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000380)=[@nested_vmlaunch={0x12f, 0x18}, @code={0xa, 0x66, {"653e460f01b944080000b86d000000ba000000000f300f07f30fc732c7442400cb000000c74424027f5e2a22ff2c2466bad10466ed260f01f866f341c0990098000033f3420f09b9800000c00f3235000800000d30"}}], 0x7e}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x403, 0x80, 0x2, 0x6, 0x9, 0x0, 0x9, 0x0, 0xbdb], 0xfec00000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m44.721108407s ago: executing program 0 (id=2084): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000005000), 0x141680, 0x0) open_by_handle_at(r0, &(0x7f0000005040)=@isofs={0x14, 0x1, {0x3, 0x4, 0x1, 0x3f1, 0x9, 0x800}}, 0x400) 10m44.569647336s ago: executing program 0 (id=2086): move_pages(0x0, 0x200000000000022b, &(0x7f0000000000), 0x0, &(0x7f0000000000), 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) 10m39.281916073s ago: executing program 0 (id=2206): syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x828882, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000440), 0x8, 0x0) r0 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x104043c, &(0x7f0000000080)=ANY=[], 0xfd, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) 10m38.919613314s ago: executing program 0 (id=2213): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000100001002bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4802000010a000000a000100bbbbbbbbbbbb000014000300766c616e31"], 0x40}, 0x1, 0x0, 0x0, 0x10000000}, 0x804) 10m38.497674839s ago: executing program 0 (id=2223): syz_clone(0x65b2e195256e05a, 0x0, 0x0, 0x0, 0x0, 0x0) 10m38.343321158s ago: executing program 32 (id=2223): syz_clone(0x65b2e195256e05a, 0x0, 0x0, 0x0, 0x0, 0x0) 7m22.444265307s ago: executing program 4 (id=6861): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 7m22.342267243s ago: executing program 4 (id=6863): r0 = syz_open_procfs(0x0, &(0x7f0000000840)='stack\x00') sendfile(r0, r0, &(0x7f0000000100)=0x80000001, 0x3) 7m22.242563729s ago: executing program 4 (id=6866): r0 = socket$packet(0x11, 0x3, 0x300) sendto(r0, 0x0, 0x0, 0x40, &(0x7f0000001140)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80) 7m22.113721947s ago: executing program 4 (id=6869): syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x828882, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000440), 0x8, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x104043c, &(0x7f0000000080)=ANY=[], 0xfd, 0x0, 0x0) syz_clone3(&(0x7f0000000640)={0x5820080, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 7m21.987123644s ago: executing program 4 (id=6871): syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', 0x8000, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x13, 0x0) rename(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00') 7m21.563339479s ago: executing program 4 (id=6880): lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) 7m21.423763606s ago: executing program 33 (id=6880): lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) 12.866324512s ago: executing program 6 (id=13387): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000000000007111af00000000008510000002000000850000009900000095000000000000009500a505000000007351b274e0f2c885d000248d44c915f8cd23bfae6734ab9924a60c796204f1c56bb440adb2bdc6878efa27ceea2cb43779"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount(0x0, 0x0, 0x0, 0xa4402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x3, 0x703, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, 0x0, 0x143041, 0x114) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000007919b000000000009500000000000000642a85d95f938d1c5cd2c7f2b118ce04e28f48"], &(0x7f0000000080)='syzkaller\x00'}, 0x80) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000280)=@generic={&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) 10.228586825s ago: executing program 6 (id=13397): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 10.169223719s ago: executing program 3 (id=13399): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x0, 0x1, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0}) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}}], 0x2, 0x0, 0x0) 8.825742337s ago: executing program 6 (id=13400): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'vxcan1\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@ifindex=r0, 0xd, 0x1, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppoe(0x18, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x14, 0x1, 0x9, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}}, 0x40000010) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="050000000400000008000000"], 0x50) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1}, 0x0) 7.795223747s ago: executing program 3 (id=13402): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getresuid(&(0x7f0000000040), &(0x7f00000021c0), &(0x7f0000002200)) 7.070770699s ago: executing program 2 (id=13405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000580)=@tcp6}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0x3}, {0x6, 0xf0, 0x40}]}, 0x10) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) 7.044759201s ago: executing program 5 (id=13406): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000280)={0x23, 0x3, 0x17, 0x4009, 0x0, 0x1, 0x0}) 6.508986331s ago: executing program 6 (id=13407): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0xfffe, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x2) 6.397872168s ago: executing program 2 (id=13408): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000000000007111af00000000008510000002000000850000009900000095000000000000009500a505000000007351b274e0f2c885d000248d44c915f8cd23bfae6734ab9924a60c796204f1c56bb440adb2bdc6878efa27ceea2cb43779"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount(0x0, 0x0, 0x0, 0xa4402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x3, 0x703, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, 0x0, 0x143041, 0x114) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000007919b000000000009500000000000000642a85d95f938d1c5cd2c7f2b118ce04e28f48"], &(0x7f0000000080)='syzkaller\x00'}, 0x80) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000280)=@generic={&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) 6.397330988s ago: executing program 6 (id=13409): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x20, 0xe, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="003102"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001240)={0x84, &(0x7f0000000b00)={0x20, 0x16, 0x2, "e44e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="401802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000540)={0x20, 0xa, 0x2, '0H'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.001834401s ago: executing program 5 (id=13410): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000020601040000000000000000000000000c00078008000640000000010500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400000000bffb2648c216955eadf2594f9a8b282112759761b8fbd6cd305a1b3bfee9337edf84371ab0475b8ec7c4416bd2d503c975aaed22ca96f54d7d7cc8c0"], 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = syz_io_uring_setup(0x4b6, &(0x7f0000010400)={0x0, 0xff74, 0x1, 0x8, 0x32e}, &(0x7f0000010080), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, 0xfffffffffffffffe, 0xfffffffffffffe24) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x2, 0x80e2e8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) prctl$PR_SET_MM(0x23, 0x5752ea9dbee1f367, &(0x7f0000ffe000/0x1000)=nil) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020}, 0x2020) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e27, @empty}, 0x10) sendfile(r5, r4, 0x0, 0x10000) 5.901762877s ago: executing program 3 (id=13411): socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000200)='./file0/file0\x00', 0x100000, 0x0, 0x1, 0x0, &(0x7f0000000400)="b185ba8e419bfd3e3cee373102e2fdcdb303fa7dbf45cdeacae80fdc4c1437c8028f9afcc21bdbfb7553f603f98d603727991568bc8852ff6e2ed26e46ecf5b4f92f481b02de67c57d577f99156614fdb7fdcf1a7852a8c3ba29db9bc0b14f02afa41a0b8b4828c99e9b9d6f14a43fac90feb63606fb6e21b925b4b84bf77ee713d3aecf9c8fb16df4ed01282787cfd9629be37c96cb6a975b19b43aa9214d928a416277ce886706a56cf3a335a4154052d437e266cd33c85e785106b7f5c8558db03942bd72029325b3e2f22943bd5183f35ab018ca233a32820e82c684e9fb4ac422b5742307b155d3873953fadc5410") statx(r3, 0x0, 0x400, 0x7ff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r4 = socket(0xa, 0x1, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz1\x00', 0x4b}) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000100)={0x39, {0x9, 0xd, 0x2040000, 0x3, 0xfffffffd, 0xfffffffe}}) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 5.060623706s ago: executing program 5 (id=13412): openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) r0 = socket$inet6(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='nodecompose,decompose,nls=cp864,uid=', @ANYRESHEX=0xee01, @ANYBLOB=',nobarrier,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x20, 0x6de, &(0x7f0000000840)="$eJzs3U9sW3cdAPDvsx0n7qTMG+1WEFKjVVSwQpvEjBYJiYIQymGCSlx2DW26RnWyKslQWiHqAYMjnFAPOwyhcNgJcUAa4oAYZyQk7r1X4sCt4oDRe34vsZ3Esds4abvPR3p+v+f3+/N9X//es/3SygF8ai28FROtSGLh/Jub6faDrUbzwVZjpShHxGRElCIqnVUkqxHJJxFXorPEZ9Mn8+6S/cZ54+HHH5y7/1Gjs1XJl6x+aVC7He0BI7TyJWYiopyvR1TZr79re/R3b6Suk+2404SdLRIHx629S2uU5kOct8DT7l5EeWKP5+sRJyJiKv8cEPnVoXTE4R26ka5yAAAA8HQqH1ThxUfxKDZj+mjCAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOdD0vnNwCRfSkV5JpL89/+/n1fLVKvHG+4BvnzA/vdvHFEgAAAAAAAAAHD4JnaKZx7Fo9iM6WK7nWR/838t2ziZPb4Q78Z6LMVaXIjNWIyN2Ii1mIuYmO7qs7q5uLGxNre75W8ibdlut+/lLecjor6r5fyYjxkAAAAAAAAAnm8/jYWYPu4gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgWxJR7qyy5WRRrkepEhFTEVFN67Ui/lKUn2V/Pe4AAAAAYPxq+Xo6+V+n0E6y7/yvZN/7p+LdWI2NWI6NaMZSXM/uBXS+9Zf+2Wo0H2w1VtJld8ff+vdIcWQ9RkQ53ttn5NmsxqntFgvx3fhBnI+ZuBprsRw/isXYiKWYiVp6ELEYSdRrnbsX9SLO3njLeVdXekK52h/bmb7t01kktbgRy1lsF+JateitlNVI4nTXaH+qRvRl6L00O8k3c0Pm6HrX6/Xr/L5Mrv3ikH2MRz078ontjMymuc+z8dLeuS+MOE/6R5qL0vY9qJM7o6Sb/SMVOf/hKDk/ka/TXP+iN+eHbcRbaf2ZmI9SPvsiXunN+e0v3H+5t/GX/vW3qzdLq7du3lg/P8ZDGquJotCfiUZXJl4dPPvyTDTTTLSGz8RE/xNTT3Ach6iaZ6NzYRvuavmdrLQYr3VNwXfieizFpZiNubgcs/H1mI9Gzww71ZPXSmOlNyfZuVbafX2rDQj+7Be7Kv3ygMpHK83LS1157b7S1bN9+TNXfhWzXVl6efDse5x3gcrn8kI6xs+233GeBj2ZyK/NRXTFG9Q+mfhtO31cb67eWru5eHvI8c7l6/S0fb/32vy7Jz6YJ5LOl/SKW8m2spzUivmS7vvMdrS9+armf3HptCvt2ndqe189pmM5vrfvmVrNP8Pt7qmz79U99zWyfae79vV8yol3opl9CukzczRZBWBoJ14/Ua09rP2j9mHt57WbtTenvj15efLz1Zj4e+XP5T+Ufl/6RvJ6fBg/ienjjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4H63fu3lpsNpfWxlioPuZYUTqwztYLw3UY9YjBYyV5oTrubDwFhf9MDcxGLcY0+h8jYkCd6hMPkYx/PqcT+VA6LH44LXumXR6heaVotXedSqxP7fcKTu687lG/tdj8b7unTi26ThngOXdxY+X2xfU7d7+yvLL49tLbS6vzly9dvtT42txXL95Ybi7Ndh6PO0pgHNbv3C0fdwwAAAAAAAAAAADAaPJ//b/x2P+ZoXJAnera+t4jnznqQwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeUQtvxUQrkpibvTCbbj/YajTTpSjv1KxERCkikh9HJJ9EXInOEvWu7pL9xnnj4ccfnLv/UWOnr0pRvzSo3XBa+RIzEVHO1web3KOb3f1d6+qv9VjhJdtHmCbsbJE4OG7/DwAA//9tSfWT") setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='osx.'], 0x0, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) geteuid() listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 4.944803112s ago: executing program 1 (id=13413): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3fffffffffffd75, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r5 = syz_open_dev$vim2m(&(0x7f0000000300), 0x7ffd, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000340)={0xfffffffd, 0x4005, 0x4, {0x1, @win={{0x0, 0xfff}, 0x0, 0x3, 0x0, 0x0, 0x0}}}) sendto$inet6(r0, &(0x7f00000002c0)="a644aebac2f418a0267314e7440e32159c7c31479cf145aeb4c8dcfbf275dd34eb4d5d0cd52bbd5ab0078dcba2f421379c600428ce3258a5f3fb426e39358c8424d5ff0867ca02996b66378c84d3ddadeb02552cce41d3fedf9b39d23a4f25155ebae7a019b4fd5196e047126aaadd", 0x6f, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno', 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) shutdown(r0, 0x1) 4.197949046s ago: executing program 1 (id=13414): openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000580)={0x5, 0x6e7b, 0x1, 0x7, 0x0, 0x6, 0x80000001, 0x2}, &(0x7f00000005c0)={0x8, 0x2, 0x4, 0x8, 0x8, 0x8, 0x3, 0x4}, 0x0, 0x0, 0x0) 4.197328096s ago: executing program 2 (id=13415): syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) r0 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) preadv(r1, &(0x7f0000000040), 0x0, 0x80, 0xa7) socket(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000000}) creat(0x0, 0xc) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, &(0x7f0000000a00), &(0x7f0000000a40)=r4}, 0x20) 3.513991966s ago: executing program 5 (id=13416): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4ff}, 0x50) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') lseek(r2, 0x201, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) 3.26428106s ago: executing program 1 (id=13417): connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f00000001c0), &(0x7f0000000400)=""/198}, 0x20) 2.605689329s ago: executing program 2 (id=13418): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@delchain={0x24, 0x66, 0xf31, 0xfffffff8, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xa}, {0xc, 0x4}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.605030139s ago: executing program 1 (id=13419): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x78, 0x0, 0xe05, {0x3, 0x83e8, 0x0, {0x5, 0x9, 0x3, 0x4, 0x3, 0x9, 0x250da0af, 0x4, 0x0, 0x8000, 0x5, 0x0, r2, 0x8, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.599369419s ago: executing program 5 (id=13420): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0xfffe, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x2) 2.479265656s ago: executing program 1 (id=13421): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000280)={0x23, 0x3, 0x17, 0x4009, 0x0, 0x1, 0x0}) 2.40672927s ago: executing program 5 (id=13422): syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x40001, 0x1fa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xc4042, 0x1ff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r1, r2, 0x0, 0x20fffe82) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x101002, 0x0) sendfile(r0, r3, 0x0, 0x20fffe82) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) 2.253837609s ago: executing program 3 (id=13423): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000600)=""/129, 0x81}, {0x0}], 0x2}, 0x20) 2.253335159s ago: executing program 2 (id=13424): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000020601040000000000000000000000000c00078008000640000000010500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400000000bffb2648c216955eadf2594f9a8b282112759761b8fbd6cd305a1b3bfee9337edf84371ab0475b8ec7c4416bd2d503c975aaed22ca96f54d7d7cc8c0"], 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = syz_io_uring_setup(0x4b6, &(0x7f0000010400)={0x0, 0xff74, 0x1, 0x8, 0x32e}, &(0x7f0000010080), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, 0xfffffffffffffffe, 0xfffffffffffffe24) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x2, 0x80e2e8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) prctl$PR_SET_MM(0x23, 0x5752ea9dbee1f367, &(0x7f0000ffe000/0x1000)=nil) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e27, @empty}, 0x10) sendfile(r5, r4, 0x0, 0x10000) 2.118637036s ago: executing program 3 (id=13425): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000000000007111af00000000008510000002000000850000009900000095000000000000009500a505000000007351b274e0f2c885d000248d44c915f8cd23bfae6734ab9924a60c796204f1c56bb440adb2bdc6878efa27ceea2cb43779"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount(0x0, 0x0, 0x0, 0xa4402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x3, 0x703, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, 0x0, 0x143041, 0x114) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000007919b000000000009500000000000000642a85d95f938d1c5cd2c7f2b118ce04e28f48"], &(0x7f0000000080)='syzkaller\x00'}, 0x80) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000280)=@generic={&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) 1.909167319s ago: executing program 6 (id=13426): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4441, &(0x7f0000004480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x102) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/285, 0xfce3, 0x4) 1.230484318s ago: executing program 2 (id=13427): r0 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) futimesat(r0, &(0x7f00000044c0)='./file0\x00', 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private0, 0x8000, 0x0, 0x2, 0x4, 0x3, 0x3}, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) mount(0x0, 0x0, 0x0, 0x2200892, 0x0) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) 361.778709ms ago: executing program 3 (id=13428): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000000}) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000180)='./file0\x00') 0s ago: executing program 1 (id=13429): semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0)) semctl$GETPID(0x0, 0x4, 0xb, 0x0) kernel console output (not intermixed with test programs): ended to keep mac addresses unique to avoid problems! [ 549.272941][T31589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.289005][T31589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.324658][T31589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.371174][T15583] Bluetooth: hci4: command 0x040f tx timeout [ 549.383119][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 549.400149][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 549.427631][T31589] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.450699][T31589] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.469583][T31589] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.479060][ T25] audit: type=1326 audit(1770320611.039:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32219 comm="syz.2.12011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4e655eb9 code=0x7ffc0000 [ 549.531859][T31589] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.565829][ T25] audit: type=1326 audit(1770320611.039:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32219 comm="syz.2.12011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4e655eb9 code=0x7ffc0000 [ 549.640259][ T154] device hsr_slave_0 left promiscuous mode [ 549.646825][ T154] device hsr_slave_1 left promiscuous mode [ 549.668176][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.692873][ T25] audit: type=1326 audit(1770320611.039:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32219 comm="syz.2.12011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f9c4e655eb9 code=0x7ffc0000 [ 549.717987][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.754715][ T154] device bridge_slave_1 left promiscuous mode [ 549.785999][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.799571][ T25] audit: type=1326 audit(1770320611.039:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32219 comm="syz.2.12011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4e655eb9 code=0x7ffc0000 [ 549.826093][ T154] device bridge_slave_0 left promiscuous mode [ 549.839319][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.867945][ T154] device veth1_macvtap left promiscuous mode [ 549.874103][T32259] binfmt_misc: register: failed to install interpreter file ./file0 [ 549.876279][ T154] device veth0_macvtap left promiscuous mode [ 549.891093][ T154] device veth1_vlan left promiscuous mode [ 549.908890][ T25] audit: type=1326 audit(1770320611.039:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32219 comm="syz.2.12011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4e655eb9 code=0x7ffc0000 [ 549.977044][ T25] audit: type=1326 audit(1770320611.129:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32223 comm="syz.3.12003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c2418eb9 code=0x7ffc0000 [ 550.040277][ T25] audit: type=1326 audit(1770320611.129:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32223 comm="syz.3.12003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c2418eb9 code=0x7ffc0000 [ 550.063197][ T25] audit: type=1326 audit(1770320611.129:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32223 comm="syz.3.12003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f36c2418eb9 code=0x7ffc0000 [ 550.086574][ T25] audit: type=1326 audit(1770320611.129:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32223 comm="syz.3.12003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c2418eb9 code=0x7ffc0000 [ 550.109610][ T25] audit: type=1326 audit(1770320611.129:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32223 comm="syz.3.12003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c2418eb9 code=0x7ffc0000 [ 550.138045][ T154] bond1 (unregistering): Released all slaves [ 550.366501][ T154] team0 (unregistering): Port device team_slave_1 removed [ 550.382019][ T154] team0 (unregistering): Port device team_slave_0 removed [ 550.396874][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.412894][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.490582][ T154] bond0 (unregistering): Released all slaves [ 550.570546][T32266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12016'. [ 550.737430][ T4284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.811736][ T4284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.851538][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 550.862732][ T511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.899711][ T511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.926735][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 551.449762][ T4174] Bluetooth: hci4: command 0x0419 tx timeout [ 551.963954][T32406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12048'. [ 553.059920][T32486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12080'. [ 553.247822][T32502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12087'. [ 554.049542][T32550] fuse: Bad value for 'max_read' [ 555.165412][ T25] kauditd_printk_skb: 31 callbacks suppressed [ 555.165425][ T25] audit: type=1326 audit(1770320616.729:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32647 comm="syz.6.12143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4c017eb9 code=0x7ffc0000 [ 555.197137][T32650] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12146'. [ 555.234772][T32650] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12146'. [ 555.259018][T32650] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12146'. [ 555.285075][ T25] audit: type=1326 audit(1770320616.729:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32647 comm="syz.6.12143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fda4c017eb9 code=0x7ffc0000 [ 555.356046][ T25] audit: type=1326 audit(1770320616.729:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32647 comm="syz.6.12143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4c017eb9 code=0x7ffc0000 [ 556.338157][ T25] audit: type=1326 audit(1770320617.899:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=301 comm="syz.3.12183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c2418eb9 code=0x7ffc0000 [ 556.413736][ T25] audit: type=1326 audit(1770320617.929:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=301 comm="syz.3.12183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f36c2418eb9 code=0x7ffc0000 [ 556.507277][ T25] audit: type=1326 audit(1770320617.929:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=301 comm="syz.3.12183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c2418eb9 code=0x7ffc0000 [ 556.575799][ T319] x_tables: duplicate underflow at hook 2 [ 557.364625][ T364] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12205'. [ 559.347572][ T485] sctp: [Deprecated]: syz.3.12247 (pid 485) Use of int in max_burst socket option deprecated. [ 559.347572][ T485] Use struct sctp_assoc_value instead [ 559.623488][ T4174] Bluetooth: hci1: command 0x0406 tx timeout [ 561.096638][ T598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12276'. [ 562.652699][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.659058][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.966425][ T693] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12311'. [ 565.764086][ T850] program syz.1.12372 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 565.877611][ T861] sctp: [Deprecated]: syz.6.12376 (pid 861) Use of int in max_burst socket option. [ 565.877611][ T861] Use struct sctp_assoc_value instead [ 567.133296][ T982] sctp: [Deprecated]: syz.2.12421 (pid 982) Use of struct sctp_assoc_value in delayed_ack socket option. [ 567.133296][ T982] Use struct sctp_sack_info instead [ 568.617330][ T25] audit: type=1326 audit(1770320630.179:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1161 comm="syz.5.12468" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f848d459eb9 code=0x0 [ 568.635471][ T1186] cgroup: Unknown subsys name 'net' [ 568.726966][ T1198] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12473'. [ 569.121111][ T1243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12487'. [ 569.177241][ T1243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12487'. [ 569.489745][ T25] audit: type=1326 audit(1770320631.049:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1284 comm="syz.5.12497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848d459eb9 code=0x7ffc0000 [ 569.592743][ T25] audit: type=1326 audit(1770320631.059:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1284 comm="syz.5.12497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f848d459eb9 code=0x7ffc0000 [ 569.697119][ T25] audit: type=1326 audit(1770320631.059:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1284 comm="syz.5.12497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848d459eb9 code=0x7ffc0000 [ 569.782797][ T25] audit: type=1326 audit(1770320631.059:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1284 comm="syz.5.12497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848d459eb9 code=0x7ffc0000 [ 569.850606][ T4241] Bluetooth: hci5: command 0x0406 tx timeout [ 570.251901][ T1352] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 570.585759][ T1381] netlink: 80 bytes leftover after parsing attributes in process `syz.3.12527'. [ 570.996149][ T1425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12541'. [ 571.820770][ T1484] cgroup: Unknown subsys name 'rlimit' [ 572.427677][ T1493] chnl_net:caif_netlink_parms(): no params data found [ 572.442862][ T25] audit: type=1326 audit(1770320634.009:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1562 comm="syz.3.12566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c2418eb9 code=0x7ffc0000 [ 572.569689][ T25] audit: type=1326 audit(1770320634.039:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1562 comm="syz.3.12566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c2418eb9 code=0x7ffc0000 [ 572.753358][ T1493] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.798213][ T25] audit: type=1326 audit(1770320634.049:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1562 comm="syz.3.12566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f36c2418eb9 code=0x7ffc0000 [ 572.827494][ T1493] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.859806][ T1493] device bridge_slave_0 entered promiscuous mode [ 572.881144][ T1493] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.912065][ T25] audit: type=1326 audit(1770320634.049:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1562 comm="syz.3.12566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c2418eb9 code=0x7ffc0000 [ 572.947985][ T1493] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.976802][ T1493] device bridge_slave_1 entered promiscuous mode [ 573.010057][ T25] audit: type=1326 audit(1770320634.049:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1562 comm="syz.3.12566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c2418eb9 code=0x7ffc0000 [ 573.077508][ T1493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.124640][ T5993] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.156713][ T1493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.226116][ T5993] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.286943][ T1493] team0: Port device team_slave_0 added [ 573.303859][ T1493] team0: Port device team_slave_1 added [ 573.392519][ T5993] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.445662][ T1493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.457195][ T1493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.550297][ T1493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.590320][ T1493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.597341][ T1493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.685959][ T1493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.724996][ T5993] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.953123][ T1493] device hsr_slave_0 entered promiscuous mode [ 573.992783][ T1493] device hsr_slave_1 entered promiscuous mode [ 574.005584][ T25] kauditd_printk_skb: 8 callbacks suppressed [ 574.005594][ T25] audit: type=1326 audit(1770320635.569:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1768 comm="syz.1.12593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6f08eeb9 code=0x7ffc0000 [ 574.042737][ T4174] Bluetooth: hci0: command 0x0409 tx timeout [ 574.065237][ T1493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 574.068881][ T1781] cgroup: noprefix used incorrectly [ 574.078440][ T1493] Cannot create hsr debugfs directory [ 574.159697][ T25] audit: type=1326 audit(1770320635.619:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1768 comm="syz.1.12593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e6f08eeb9 code=0x7ffc0000 [ 574.315494][ T25] audit: type=1326 audit(1770320635.619:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1768 comm="syz.1.12593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6f08eeb9 code=0x7ffc0000 [ 574.394492][ T1848] sctp: [Deprecated]: syz.3.12605 (pid 1848) Use of int in max_burst socket option. [ 574.394492][ T1848] Use struct sctp_assoc_value instead [ 574.422506][ T1834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12602'. [ 574.590372][ T25] audit: type=1326 audit(1770320635.619:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1768 comm="syz.1.12593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f6e6f08eeb9 code=0x7ffc0000 [ 574.704402][ T25] audit: type=1326 audit(1770320635.619:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1768 comm="syz.1.12593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6f08eeb9 code=0x7ffc0000 [ 575.020707][ T1943] fuse: Bad value for 'fd' [ 575.337616][ T1978] PM: Enabling pm_trace changes system date and time during resume. [ 575.337616][ T1978] PM: Correct system time has to be restored manually after resume. [ 575.708716][ T1493] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 575.731516][ T1493] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 575.795822][ T1493] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 575.838363][ T1493] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 575.992889][ T2054] tmpfs: Bad value for 'mpol' [ 576.092121][T11798] Bluetooth: hci0: command 0x041b tx timeout [ 576.187149][ T5993] device hsr_slave_0 left promiscuous mode [ 576.200149][ T5993] device hsr_slave_1 left promiscuous mode [ 576.219510][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.245275][ T5993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.261141][ T5993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.285534][ T5993] device bridge_slave_1 left promiscuous mode [ 576.314968][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.338674][ T5993] device bridge_slave_0 left promiscuous mode [ 576.382879][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.405053][ T5993] device veth1_macvtap left promiscuous mode [ 576.420038][ T5993] device veth0_macvtap left promiscuous mode [ 576.457308][ T5993] device veth1_vlan left promiscuous mode [ 576.546221][ T2094] tmpfs: Bad value for 'mpol' [ 576.875553][ T5993] team0 (unregistering): Port device team_slave_1 removed [ 576.909138][ T5993] team0 (unregistering): Port device team_slave_0 removed [ 576.928078][ T5993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.944168][ T5993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.006704][ T5993] bond0 (unregistering): Released all slaves [ 577.064634][ T1493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.095293][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 577.118236][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 577.144732][ T1493] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.169108][ T2120] program syz.3.12673 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 577.202768][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 577.230719][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 577.239258][ T2124] fuse: Bad value for 'fd' [ 577.256514][ T6084] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.263616][ T6084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.281031][ T2127] program syz.1.12674 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 577.297387][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 577.317892][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 577.340292][ T6084] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.347348][ T6084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.363379][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 577.388117][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 577.418337][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 577.469201][ T1493] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 577.480617][ T1493] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 577.513974][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 577.564488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 577.585249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 577.614096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 577.634608][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 577.653005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 577.673244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 577.682540][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 577.691041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 577.698985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 578.033723][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 578.055965][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 578.099026][ T1493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.157021][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 578.169937][ T9539] Bluetooth: hci0: command 0x040f tx timeout [ 578.174069][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 578.251241][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 578.296501][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 578.326425][ T1493] device veth0_vlan entered promiscuous mode [ 578.335987][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 578.354279][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 578.383207][ T1493] device veth1_vlan entered promiscuous mode [ 578.444301][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 578.458849][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 578.477408][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 578.526069][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 578.558306][ T1493] device veth0_macvtap entered promiscuous mode [ 578.590299][ T1493] device veth1_macvtap entered promiscuous mode [ 578.657663][ T1493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.688880][ T1493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.724783][ T1493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.760570][ T1493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.788673][ T1493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.815766][ T1493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.835902][ T1493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.853742][ T1493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.872837][ T1493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.892409][ T1493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.924957][ T1493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.959507][ T1493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.994358][ T1493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.023777][ T1493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.049085][ T1493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.077523][ T1493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.109268][ T1493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.135658][ T1493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.168569][ T1493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.197887][ T1493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.227400][ T2197] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12703'. [ 579.283116][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 579.309122][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 579.332789][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 579.366204][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 579.390121][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 579.423690][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 579.462347][ T1493] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.477712][ T1493] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.507059][ T1493] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.529654][ T1493] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.692030][ T511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.723826][ T511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.737812][ T6112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.764569][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 579.773087][ T6112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.807334][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 579.810178][ T2264] cgroup2: Unknown parameter 'subj_user' [ 580.036785][ T25] audit: type=1326 audit(1770320641.599:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2275 comm="syz.3.12737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c2418eb9 code=0x7ffc0000 [ 580.100009][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 580.136147][ T25] audit: type=1326 audit(1770320641.629:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2275 comm="syz.3.12737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c2418eb9 code=0x7ffc0000 [ 580.254028][ T25] audit: type=1326 audit(1770320641.639:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2275 comm="syz.3.12737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f36c2418eb9 code=0x7ffc0000 [ 580.260006][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 580.398370][ T25] audit: type=1326 audit(1770320641.639:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2275 comm="syz.3.12737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c2418eb9 code=0x7ffc0000 [ 580.512055][ T25] audit: type=1326 audit(1770320641.639:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2275 comm="syz.3.12737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c2418eb9 code=0x7ffc0000 [ 580.535611][ T25] audit: type=1326 audit(1770320641.759:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2285 comm="syz.2.12740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d0bcceb9 code=0x7ffc0000 [ 580.561757][ T25] audit: type=1326 audit(1770320641.779:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2285 comm="syz.2.12740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f93d0bcceb9 code=0x7ffc0000 [ 580.585383][ T25] audit: type=1326 audit(1770320641.779:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2285 comm="syz.2.12740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d0bcceb9 code=0x7ffc0000 [ 580.980344][ T2298] chnl_net:caif_netlink_parms(): no params data found [ 581.009785][ T25] audit: type=1326 audit(1770320642.579:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2391 comm="syz.2.12757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d0bcceb9 code=0x7ffc0000 [ 581.096855][ T25] audit: type=1326 audit(1770320642.579:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2391 comm="syz.2.12757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f93d0bcceb9 code=0x7ffc0000 [ 581.186442][ T2298] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.205633][ T2298] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.220808][ T2298] device bridge_slave_0 entered promiscuous mode [ 581.238938][ T2298] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.310809][ T2298] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.318853][ T2298] device bridge_slave_1 entered promiscuous mode [ 581.472010][ T2298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.494374][ T2298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.596571][ T2298] team0: Port device team_slave_0 added [ 581.648531][ T2298] team0: Port device team_slave_1 added [ 581.736154][ T2298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.773957][ T2298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.812230][ T2298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.845883][ T2298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.899703][ T2298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.975085][ T2298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.189239][ T5993] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.243474][ T2298] device hsr_slave_0 entered promiscuous mode [ 582.266856][ T2298] device hsr_slave_1 entered promiscuous mode [ 582.299141][ T2298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 582.332624][ T2298] Cannot create hsr debugfs directory [ 582.344343][ T5993] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.441239][ T2686] sctp: [Deprecated]: syz.1.12792 (pid 2686) Use of int in max_burst socket option. [ 582.441239][ T2686] Use struct sctp_assoc_value instead [ 582.491462][ T4241] Bluetooth: hci1: command 0x0409 tx timeout [ 582.522367][ T5993] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.643517][ T5993] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.597875][ T2898] TCP: TCP_TX_DELAY enabled [ 583.786194][ T2925] sctp: [Deprecated]: syz.3.12837 (pid 2925) Use of int in max_burst socket option. [ 583.786194][ T2925] Use struct sctp_assoc_value instead [ 584.239880][ T5993] device hsr_slave_0 left promiscuous mode [ 584.255635][ T5993] device hsr_slave_1 left promiscuous mode [ 584.307659][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.319708][ T5993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.339177][ T5993] device bridge_slave_1 left promiscuous mode [ 584.359833][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.370383][ T5993] device bridge_slave_0 left promiscuous mode [ 584.376569][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.440495][ T5993] device veth1_macvtap left promiscuous mode [ 584.446538][ T5993] device veth0_macvtap left promiscuous mode [ 584.478910][ T5993] device veth1_vlan left promiscuous mode [ 584.511457][ T5993] device veth0_vlan left promiscuous mode [ 584.580201][ T4174] Bluetooth: hci1: command 0x041b tx timeout [ 584.866253][ T5993] bond1 (unregistering): Released all slaves [ 585.089185][ T5993] team0 (unregistering): Port device team_slave_1 removed [ 585.124636][ T5993] team0 (unregistering): Port device team_slave_0 removed [ 585.167835][ T5993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.198180][ T5993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.326646][ T5993] bond0 (unregistering): Released all slaves [ 585.441384][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 585.450401][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 585.459646][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 585.469646][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 585.479642][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 585.489643][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 585.499643][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 585.509643][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 585.519641][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 585.529642][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 586.535738][ T2298] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 586.555149][ T3076] loop3: detected capacity change from 0 to 128 [ 586.599568][ T2298] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 586.649747][T15156] Bluetooth: hci1: command 0x040f tx timeout [ 586.814035][ T2298] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 587.210655][ T2298] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 587.409409][ T2298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.472623][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 587.510272][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 587.609317][ T3092] netlink: 'syz.5.12881': attribute type 1 has an invalid length. [ 588.024686][ T3092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 588.065815][ T3095] bond1: (slave geneve2): making interface the new active one [ 588.078869][ T3095] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 588.098855][ T2298] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.336444][ T3095] syz.5.12881 (3095) used greatest stack depth: 19088 bytes left [ 588.400226][ T6085] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 588.440698][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 588.449337][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 588.531736][ T3096] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.538822][ T3096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.299347][T15583] Bluetooth: hci1: command 0x0419 tx timeout [ 589.326989][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 589.337124][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 589.396330][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 589.410118][ T3096] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.417171][ T3096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.427908][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 589.436815][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 589.468505][ T2298] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 589.519162][ T2298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 589.558946][ T6085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 589.589441][ T6085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 589.604934][ T3148] loop1: detected capacity change from 0 to 512 [ 589.632869][ T6085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 589.663302][ T6085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 589.700298][ T6085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 589.748863][ T3148] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 589.759328][ T6085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 589.790466][ T6085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 589.820199][ T6085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 589.840138][ T6085] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 589.870198][ T6085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 591.019109][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 591.019233][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 591.048077][ T2298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.277440][ T3176] loop2: detected capacity change from 0 to 512 [ 591.851452][T11798] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 591.947774][ T3176] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 592.147547][T11798] usb 6-1: Using ep0 maxpacket: 16 [ 592.248801][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 592.269883][T11798] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 592.275663][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 592.285826][T11798] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 592.305577][ T2298] device veth0_vlan entered promiscuous mode [ 592.334296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 592.356838][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 592.406199][ T2298] device veth1_vlan entered promiscuous mode [ 592.449005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 592.480287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 592.504156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 592.512744][T11798] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 592.516124][ T3209] loop3: detected capacity change from 0 to 512 [ 592.533332][T11798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.781908][ T3209] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 592.829878][ T3209] ext4 filesystem being mounted at /709/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.978164][ T25] kauditd_printk_skb: 3 callbacks suppressed [ 592.978178][ T25] audit: type=1800 audit(1770320654.539:1024): pid=3209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.12893" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 593.282372][ T3207] loop2: detected capacity change from 0 to 131072 [ 593.292160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 593.299684][T11798] usb 6-1: Product: syz [ 593.299702][T11798] usb 6-1: Manufacturer: syz [ 593.299716][T11798] usb 6-1: SerialNumber: syz [ 593.329911][T11798] usb 6-1: can't set config #1, error -71 [ 593.363638][ T3224] loop5: detected capacity change from 0 to 512 [ 593.408695][ T3207] F2FS-fs (loop2): Found nat_bits in checkpoint [ 593.442058][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 593.448401][T11798] usb 6-1: USB disconnect, device number 2 [ 593.477022][ T3207] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 593.477178][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 593.520136][ T3224] FAT-fs (loop5): Directory bread(block 199916) failed [ 593.558790][ T3224] FAT-fs (loop5): Directory bread(block 199917) failed [ 593.588894][ T3224] FAT-fs (loop5): Directory bread(block 199918) failed [ 593.614653][ T2298] device veth0_macvtap entered promiscuous mode [ 593.640285][ T3224] FAT-fs (loop5): Directory bread(block 199919) failed [ 593.652055][ T2298] device veth1_macvtap entered promiscuous mode [ 593.667509][ T3224] FAT-fs (loop5): Directory bread(block 199920) failed [ 593.697862][ T3224] FAT-fs (loop5): Directory bread(block 199921) failed [ 593.718340][ T3235] loop3: detected capacity change from 0 to 4096 [ 593.726768][ T25] audit: type=1804 audit(1770320655.289:1025): pid=3207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.12892" name="/newroot/38/file0/bus" dev="loop2" ino=10 res=1 errno=0 [ 593.730699][ T2298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.769684][ T3224] FAT-fs (loop5): Directory bread(block 199922) failed [ 593.776580][ T3224] FAT-fs (loop5): Directory bread(block 199923) failed [ 593.837893][ T2298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.867505][ T2298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.888354][ T2298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.947445][ T2298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.956647][ T3224] FAT-fs (loop5): Directory bread(block 199916) failed [ 593.959850][ T2298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.975316][ T2298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.986286][ T2298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.997418][ T2298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.019850][ T3224] FAT-fs (loop5): Directory bread(block 199917) failed [ 594.136947][ T2298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.206470][ T2298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.258434][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 594.286380][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 594.297732][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 594.323004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 594.337846][ T2298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.351520][ T2298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.401485][ T2298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.440250][ T2298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.477438][ T2298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.539641][ T2298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.580106][ T2298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.594658][ T3250] loop5: detected capacity change from 0 to 32768 [ 594.612187][ T2298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.625423][ T2298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.636009][ T2298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.661113][ T2298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.670267][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 594.699343][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 594.743643][ T2298] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.753235][ T3250] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.12896 (3250) [ 594.782362][ T3250] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 594.791402][ T3250] BTRFS info (device loop5): turning on sync discard [ 594.798092][ T3250] BTRFS info (device loop5): use zlib compression, level 3 [ 594.805355][ T3250] BTRFS info (device loop5): turning off barriers [ 594.811996][ T3250] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 594.823488][ T3250] BTRFS info (device loop5): trying to use backup root at mount time [ 594.831619][ T3250] BTRFS info (device loop5): enabling auto defrag [ 594.838059][ T3250] BTRFS info (device loop5): max_inline at 0 [ 594.844084][ T3250] BTRFS info (device loop5): using free space tree [ 594.850621][ T3250] BTRFS info (device loop5): has skinny extents [ 594.856935][ T2298] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.894060][ T2298] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.920742][ T2298] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.940072][T26299] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 594.980618][T26299] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 595.136870][ T6021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.207826][ T6112] BTRFS warning (device loop5): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 595.239753][ T6021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.254767][ T3250] BTRFS warning (device loop5): failed to read root (objectid=2): -5 [ 595.263244][ T4284] BTRFS warning (device loop5): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 595.319739][ T3250] BTRFS warning (device loop5): couldn't read tree root [ 595.329237][ T3250] BTRFS error (device loop5): parent transid verify failed on 5255168 wanted 5 found 7 [ 595.339251][ T3250] BTRFS warning (device loop5): couldn't read tree root [ 595.346933][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 595.381035][ T6112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.410063][ T6112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.412778][ T3250] BTRFS info (device loop5): enabling ssd optimizations [ 595.425846][ T3250] BTRFS info (device loop5): clearing free space tree [ 595.434465][ T3250] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 595.445976][ T3250] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 595.480139][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 595.489297][ T3250] BTRFS info (device loop5): creating free space tree [ 595.497707][ T3250] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 595.507343][ T3250] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 595.953240][ T3314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12902'. [ 596.135194][ T3314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12902'. [ 596.169959][ T3314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12902'. [ 596.240539][ T3314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12902'. [ 596.302314][ T3314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12902'. [ 596.389157][ T3287] loop1: detected capacity change from 0 to 32768 [ 596.419876][ T3287] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.12899 (3287) [ 596.524181][ T3321] loop6: detected capacity change from 0 to 512 [ 596.745057][ T3192] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (3192) [ 596.906642][ T3321] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 597.040042][ T3334] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 597.309750][ T3334] usb 3-1: Using ep0 maxpacket: 16 [ 597.528929][ T6085] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.600062][ T3334] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 597.695099][ T3334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.771534][ T3334] usb 3-1: Product: syz [ 597.815468][ T3334] usb 3-1: Manufacturer: syz [ 597.847514][ T3334] usb 3-1: SerialNumber: syz [ 597.966236][ T3321] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 598.008434][ T3334] usb 3-1: config 0 descriptor?? [ 598.820959][ T3334] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 598.859863][ T25] audit: type=1800 audit(1770320660.429:1026): pid=3321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.12904" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 598.934114][ T3334] usb 3-1: Detected FT232H [ 599.050540][ T3334] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 599.571948][ T3334] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 599.667068][ T6085] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.689858][T11789] Bluetooth: hci2: command 0x0409 tx timeout [ 599.785531][T11789] usb 3-1: USB disconnect, device number 2 [ 600.057477][T11789] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 600.074247][T11789] ftdi_sio 3-1:0.0: device disconnected [ 600.152198][ T6085] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.581709][ T6085] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.745146][ T3489] loop1: detected capacity change from 0 to 128 [ 602.053289][ T1324] Bluetooth: hci2: command 0x041b tx timeout [ 602.128932][ T3489] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 602.205575][ T3361] chnl_net:caif_netlink_parms(): no params data found [ 602.378859][ T3472] loop2: detected capacity change from 0 to 32768 [ 602.609914][ T3472] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 602.669704][ T3472] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 602.674794][ T3603] loop1: detected capacity change from 0 to 512 [ 602.705636][ T3590] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12920'. [ 602.714728][ T3472] BTRFS info (device loop2): trying to use backup root at mount time [ 602.714753][ T3472] BTRFS info (device loop2): setting nodatasum [ 602.714769][ T3472] BTRFS info (device loop2): enabling auto defrag [ 602.714787][ T3472] BTRFS info (device loop2): setting datasum [ 602.714800][ T3472] BTRFS info (device loop2): using free space tree [ 602.714812][ T3472] BTRFS info (device loop2): has skinny extents [ 602.797267][ T3361] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.805856][ T3361] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.814046][ T3361] device bridge_slave_0 entered promiscuous mode [ 602.821705][ T3603] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 602.840149][ T3603] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 602.842789][ T3361] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.860528][ T3361] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.874117][ T3361] device bridge_slave_1 entered promiscuous mode [ 602.901088][ T25] audit: type=1800 audit(1770320664.469:1027): pid=3603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12919" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 603.092765][ T3472] BTRFS info (device loop2): enabling ssd optimizations [ 603.142122][ T3361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.219964][ T3361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.121821][ T3361] team0: Port device team_slave_0 added [ 604.278612][ T3361] team0: Port device team_slave_1 added [ 605.106605][ T3361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.224811][ T3361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.234936][T11790] Bluetooth: hci2: command 0x040f tx timeout [ 605.646460][ T3361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.433845][ T3361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.468043][ T3361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.583043][ T3361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.612554][ T3779] loop1: detected capacity change from 0 to 128 [ 608.015757][ T3779] EXT4-fs (loop1): Test dummy encryption mode enabled [ 608.329094][ T6085] device hsr_slave_0 left promiscuous mode [ 608.352017][ T6085] device hsr_slave_1 left promiscuous mode [ 608.371006][ T3779] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 608.393104][ T3779] ext4 filesystem being mounted at /395/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 608.409738][T11789] Bluetooth: hci2: command 0x0419 tx timeout [ 608.440315][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.447786][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.497202][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.536670][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.598220][ T6085] device bridge_slave_1 left promiscuous mode [ 608.609746][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.638492][ T6085] device bridge_slave_0 left promiscuous mode [ 608.645422][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.717825][ T6085] device veth1_macvtap left promiscuous mode [ 608.755091][ T6085] device veth0_macvtap left promiscuous mode [ 608.769907][ T6085] device veth1_vlan left promiscuous mode [ 608.786276][ T6085] device veth0_vlan left promiscuous mode [ 609.040382][ T3830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12936'. [ 609.840120][ T6085] bond1 (unregistering): Released all slaves [ 610.025032][ T3819] loop6: detected capacity change from 0 to 32768 [ 610.042369][ T3819] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.12937 (3819) [ 610.079232][ T3819] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 610.098563][ T3819] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 610.109536][ T3819] BTRFS info (device loop6): trying to use backup root at mount time [ 610.117897][ T3819] BTRFS info (device loop6): setting nodatasum [ 610.125426][ T3819] BTRFS info (device loop6): enabling auto defrag [ 610.134479][ T3819] BTRFS info (device loop6): setting datasum [ 610.140726][ T3819] BTRFS info (device loop6): using free space tree [ 610.148453][ T3819] BTRFS info (device loop6): has skinny extents [ 610.156206][ T6085] team0 (unregistering): Port device team_slave_1 removed [ 610.188776][ T6085] team0 (unregistering): Port device team_slave_0 removed [ 610.218015][ T6085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.238698][ T3819] BTRFS info (device loop6): enabling ssd optimizations [ 610.274398][ T6085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.552623][ T6085] bond0 (unregistering): Released all slaves [ 610.626075][ T3829] netlink: 'syz.1.12938': attribute type 1 has an invalid length. [ 610.729461][ T3833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12932'. [ 610.827428][ T3361] device hsr_slave_0 entered promiscuous mode [ 610.844612][ T3361] device hsr_slave_1 entered promiscuous mode [ 613.750361][ T3984] fuse: Bad value for 'fd' [ 614.791087][ T4041] loop6: detected capacity change from 0 to 40427 [ 614.833356][ T4041] F2FS-fs (loop6): invalid crc value [ 614.842628][ T4023] loop2: detected capacity change from 0 to 512 [ 614.862917][ T4041] F2FS-fs (loop6): Found nat_bits in checkpoint [ 614.911007][ T4041] F2FS-fs (loop6): Start checkpoint disabled! [ 614.976778][ T4041] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 614.990447][ T4023] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 615.007932][ T4050] loop5: detected capacity change from 0 to 8192 [ 615.115504][ T4050] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 616.987207][ T3361] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 617.140822][ T3361] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 617.170419][ T1492] attempt to access beyond end of device [ 617.170419][ T1492] loop6: rw=2049, want=40976, limit=40427 [ 617.192154][ T4116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12951'. [ 617.204728][ T3361] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 617.236959][ T3361] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 618.115612][ T4134] loop1: detected capacity change from 0 to 256 [ 618.204792][ T4137] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 618.253536][ T3361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.290747][ T4134] FAT-fs (loop1): Directory bread(block 64) failed [ 618.297319][ T4134] FAT-fs (loop1): Directory bread(block 65) failed [ 618.311419][ T3361] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.356657][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 618.369910][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 618.395998][ T4134] FAT-fs (loop1): Directory bread(block 66) failed [ 618.410628][ T4137] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 618.422745][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 618.446003][ T4134] FAT-fs (loop1): Directory bread(block 67) failed [ 618.453742][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 618.469239][ T4134] FAT-fs (loop1): Directory bread(block 68) failed [ 618.491031][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.498125][ T5993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.510903][ T4134] FAT-fs (loop1): Directory bread(block 69) failed [ 618.521694][ T4134] FAT-fs (loop1): Directory bread(block 70) failed [ 618.528596][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 618.544357][ T4134] FAT-fs (loop1): Directory bread(block 71) failed [ 618.565596][ T4134] FAT-fs (loop1): Directory bread(block 72) failed [ 618.590220][ T4134] FAT-fs (loop1): Directory bread(block 73) failed [ 619.184072][ T4148] loop6: detected capacity change from 0 to 131072 [ 619.302563][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 619.382911][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 619.423299][ T4148] F2FS-fs (loop6): Found nat_bits in checkpoint [ 619.472856][ T4148] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 619.517444][ T6084] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.524568][ T6084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.226699][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 620.235877][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 620.265699][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 620.274214][ T25] audit: type=1804 audit(1770320681.839:1028): pid=4148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.12952" name="/newroot/16/file0/bus" dev="loop6" ino=10 res=1 errno=0 [ 620.378851][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 620.397056][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 620.406866][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 620.450063][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 620.464302][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 620.473131][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 620.484325][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 620.512561][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 620.602029][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 621.106931][ T25] audit: type=1326 audit(1770320682.669:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4185 comm="syz.2.12958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d0bcceb9 code=0x7fc00000 [ 621.260653][ T4204] loop1: detected capacity change from 0 to 2048 [ 621.382110][ T4204] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 621.709262][ T4227] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 621.830755][ T4227] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 242 with error 28 [ 621.943584][ T4234] loop2: detected capacity change from 0 to 1024 [ 621.951778][ T4227] EXT4-fs (loop1): This should not happen!! Data will be lost [ 621.951778][ T4227] [ 621.953511][ T4238] tmpfs: Unknown parameter 'quota' [ 621.962197][ T4227] EXT4-fs (loop1): Total free blocks count 0 [ 621.975310][ T4227] EXT4-fs (loop1): Free/Dirty block details [ 621.983175][ T4227] EXT4-fs (loop1): free_blocks=2415919504 [ 622.269950][ T4227] EXT4-fs (loop1): dirty_blocks=256 [ 622.275462][ T4227] EXT4-fs (loop1): Block reservation details [ 622.286145][ T4227] EXT4-fs (loop1): i_reserved_data_blocks=16 [ 622.947604][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 622.978188][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 623.007166][ T3361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.175109][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 623.197799][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 623.221519][ T4258] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 623.277295][ T3359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 623.277824][ T3359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 623.278448][ T3359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 623.278911][ T3359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 623.293197][ T3361] device veth0_vlan entered promiscuous mode [ 623.305664][ T3361] device veth1_vlan entered promiscuous mode [ 623.341463][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 623.342004][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 623.342484][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 623.343002][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 623.351073][ T3361] device veth0_macvtap entered promiscuous mode [ 623.356896][ T3361] device veth1_macvtap entered promiscuous mode [ 623.634036][ T3361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.700770][ T3361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.710680][ T3361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.721449][ T3361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.731316][ T3361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.741829][ T3361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.752159][ T3361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.762645][ T3361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.779636][ T3361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.111831][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.120112][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.207634][ T3361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.382187][ T3361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.392974][ T3361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.547934][ T3361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.552675][ T4286] loop2: detected capacity change from 0 to 512 [ 624.601677][ T3361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.632712][ T3361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.696939][ T3361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.739625][ T3361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.921833][ T4286] EXT4-fs error (device loop2): ext4_iget_extra_inode:4566: inode #15: comm syz.2.12971: corrupted in-inode xattr [ 624.949787][ T3361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.970254][ T4286] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.12971: couldn't read orphan inode 15 (err -117) [ 625.058779][ T3361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.143354][ T4286] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none. [ 625.296244][ T3361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.615507][ T3361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.630645][ T3361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.666648][ T3359] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 625.700005][ T3359] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 625.707964][ T3359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 625.761626][ T4286] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.12971: dx entry: limit 0 != root limit 125 [ 625.798374][ T3359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 625.813537][ T4286] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.12971: Corrupt directory, running e2fsck is recommended [ 625.848316][ T3359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 625.933892][ T3359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 626.174765][ T3869] Bluetooth: hci3: command 0x0406 tx timeout [ 626.231993][ T4286] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.12971: path /54/file7: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 626.576204][ T3361] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.603275][ T3361] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.640284][ T3361] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.720017][ T3361] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.998210][ T4325] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12975'. [ 627.720992][ T5993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.729082][ T5993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.829062][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 628.870180][ T3313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.918665][ T4368] loop5: detected capacity change from 0 to 2048 [ 628.929843][ T3313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.954547][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 629.092897][ T4368] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 629.636601][ T4394] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 629.699503][ T4394] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 204 with error 28 [ 629.714374][ T4399] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 629.763342][ T4394] EXT4-fs (loop5): This should not happen!! Data will be lost [ 629.763342][ T4394] [ 629.793695][ T4394] EXT4-fs (loop5): Total free blocks count 0 [ 629.844995][ T4399] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 629.858900][ T4394] EXT4-fs (loop5): Free/Dirty block details [ 629.866390][ T4394] EXT4-fs (loop5): free_blocks=2415919504 [ 630.047818][ T4394] EXT4-fs (loop5): dirty_blocks=208 [ 630.103450][ T4394] EXT4-fs (loop5): Block reservation details [ 630.839987][ T4394] EXT4-fs (loop5): i_reserved_data_blocks=13 [ 632.160973][ T4408] loop2: detected capacity change from 0 to 4096 [ 633.392846][ T4424] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 635.520651][ T4459] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 635.608827][ T4444] loop6: detected capacity change from 0 to 32768 [ 635.678047][ T4444] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.12993 (4444) [ 635.696192][ T4467] loop2: detected capacity change from 0 to 2048 [ 635.739409][ T4444] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 635.786026][ T4444] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 635.828030][ T4444] BTRFS info (device loop6): force zstd compression, level 3 [ 635.889687][ T4444] BTRFS info (device loop6): turning on sync discard [ 635.909537][ T4444] BTRFS info (device loop6): force clearing of disk cache [ 635.926353][ T4444] BTRFS info (device loop6): enabling disk space caching [ 635.940167][ T4444] BTRFS info (device loop6): turning off discard [ 635.941311][ T4467] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 635.946613][ T4444] BTRFS info (device loop6): disk space caching is enabled [ 635.999168][ T4444] BTRFS info (device loop6): has skinny extents [ 636.036600][ T4444] BTRFS info (device loop6): enabling ssd optimizations [ 636.046484][ T4444] BTRFS info (device loop6): clearing free space tree [ 636.053625][ T4444] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 636.069875][ T4444] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 636.079192][ T4467] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 636.095875][ T4467] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1114 with error 28 [ 636.109366][ T4467] EXT4-fs (loop2): This should not happen!! Data will be lost [ 636.109366][ T4467] [ 636.127399][ T4467] EXT4-fs (loop2): Total free blocks count 0 [ 636.136019][ T4467] EXT4-fs (loop2): Free/Dirty block details [ 636.141998][ T4467] EXT4-fs (loop2): free_blocks=2415919504 [ 636.153272][ T4467] EXT4-fs (loop2): dirty_blocks=1120 [ 636.158568][ T4467] EXT4-fs (loop2): Block reservation details [ 636.164890][ T4467] EXT4-fs (loop2): i_reserved_data_blocks=70 [ 638.934855][ T4525] loop5: detected capacity change from 0 to 128 [ 643.450959][ T4567] loop3: detected capacity change from 0 to 2048 [ 643.547952][ T4567] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 643.690817][ T4585] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 643.825762][ T4585] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 314 with error 28 [ 643.877590][ T4585] EXT4-fs (loop3): This should not happen!! Data will be lost [ 643.877590][ T4585] [ 643.890344][ T4585] EXT4-fs (loop3): Total free blocks count 0 [ 643.896338][ T4585] EXT4-fs (loop3): Free/Dirty block details [ 643.903155][ T4585] EXT4-fs (loop3): free_blocks=2415919504 [ 643.908881][ T4585] EXT4-fs (loop3): dirty_blocks=320 [ 643.949835][ T4585] EXT4-fs (loop3): Block reservation details [ 643.956154][ T4585] EXT4-fs (loop3): i_reserved_data_blocks=20 [ 644.676093][ T4558] loop1: detected capacity change from 0 to 32768 [ 644.794077][ T4558] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.13023 (4558) [ 644.850447][ T4558] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 645.556113][ T4606] overlayfs: missing 'lowerdir' [ 645.915754][ T3755] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 645.925012][ T4558] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 645.940841][ T4558] BTRFS info (device loop1): trying to use backup root at mount time [ 645.948925][ T4558] BTRFS info (device loop1): setting nodatasum [ 646.008833][ T4558] BTRFS info (device loop1): enabling ssd optimizations [ 646.020614][ T3755] Bluetooth: hci3: Injecting HCI hardware error event [ 646.040009][ T4558] BTRFS info (device loop1): using spread ssd allocation scheme [ 646.069432][ T4197] Bluetooth: hci3: hardware error 0x00 [ 646.077572][ T4558] BTRFS info (device loop1): turning on flush-on-commit [ 646.096392][ T4558] BTRFS info (device loop1): force zlib compression, level 3 [ 646.103909][ T4558] BTRFS info (device loop1): using free space tree [ 646.110517][ T4558] BTRFS info (device loop1): has skinny extents [ 646.276383][ T4558] BTRFS error (device loop1): open_ctree failed: -12 [ 646.283301][T31288] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (31288) [ 646.334462][ T4633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13031'. [ 646.558470][ T4638] loop6: detected capacity change from 0 to 1024 [ 649.577452][ T4660] loop3: detected capacity change from 0 to 2048 [ 649.853657][ T4660] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 650.335112][ T4676] loop5: detected capacity change from 0 to 40427 [ 651.810719][ T6085] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 651.834123][ T4676] F2FS-fs (loop5): invalid crc value [ 651.853742][ T4676] F2FS-fs (loop5): Found nat_bits in checkpoint [ 651.874759][ T4676] F2FS-fs (loop5): Start checkpoint disabled! [ 651.978032][ T4676] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 652.017344][ T6085] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 200 with error 28 [ 652.087446][ T4690] tipc: Started in network mode [ 652.093221][ T4690] tipc: Node identity 4, cluster identity 4711 [ 652.099420][ T4690] tipc: Node number set to 4 [ 652.670734][ T6085] EXT4-fs (loop3): This should not happen!! Data will be lost [ 652.670734][ T6085] [ 652.744519][ T6085] EXT4-fs (loop3): Total free blocks count 0 [ 652.753786][ T6085] EXT4-fs (loop3): Free/Dirty block details [ 652.759838][ T6085] EXT4-fs (loop3): free_blocks=66060288 [ 652.765457][ T6085] EXT4-fs (loop3): dirty_blocks=208 [ 652.770881][ T6085] EXT4-fs (loop3): Block reservation details [ 652.777747][ T6085] EXT4-fs (loop3): i_reserved_data_blocks=13 [ 653.310123][ T6085] attempt to access beyond end of device [ 653.310123][ T6085] loop5: rw=2049, want=40976, limit=40427 [ 653.469794][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 653.518225][ T25] audit: type=1326 audit(1770320715.079:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4709 comm="syz.6.13036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5bf44eb9 code=0x7ffc0000 [ 654.673806][ T25] audit: type=1326 audit(1770320715.109:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4709 comm="syz.6.13036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5bf44eb9 code=0x7ffc0000 [ 654.776625][ T4720] loop6: detected capacity change from 0 to 128 [ 654.783080][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 654.798311][ T25] audit: type=1326 audit(1770320715.109:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4709 comm="syz.6.13036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f6f5bf44eb9 code=0x7ffc0000 [ 654.846306][ T25] audit: type=1326 audit(1770320715.109:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4709 comm="syz.6.13036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5bf44eb9 code=0x7ffc0000 [ 654.900478][ T25] audit: type=1326 audit(1770320715.129:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4709 comm="syz.6.13036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5bf44eb9 code=0x7ffc0000 [ 654.923867][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.974812][ T25] audit: type=1326 audit(1770320715.129:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4709 comm="syz.6.13036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f6f5bf44eb9 code=0x7ffc0000 [ 655.082088][ T25] audit: type=1326 audit(1770320715.129:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4709 comm="syz.6.13036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5bf44eb9 code=0x7ffc0000 [ 655.105246][ T25] audit: type=1326 audit(1770320715.129:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4709 comm="syz.6.13036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5bf44eb9 code=0x7ffc0000 [ 655.109923][ T13] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 655.128078][ T25] audit: type=1326 audit(1770320715.129:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4709 comm="syz.6.13036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f6f5bf44eb9 code=0x7ffc0000 [ 655.413487][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.554392][ T13] usb 4-1: Product: syz [ 655.605830][ T13] usb 4-1: Manufacturer: syz [ 655.650197][ T13] usb 4-1: SerialNumber: syz [ 655.788438][ T13] usb 4-1: config 0 descriptor?? [ 655.831847][ T13] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 655.886671][ T13] usb 4-1: selecting invalid altsetting 1 [ 655.919965][ T25] audit: type=1326 audit(1770320715.129:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4709 comm="syz.6.13036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5bf44eb9 code=0x7ffc0000 [ 656.039843][ T13] gspca_stk014: init reg: 0x00 [ 656.044934][ T13] stk014: probe of 4-1:0.0 failed with error -5 [ 656.806663][ T4769] overlayfs: missing 'lowerdir' [ 657.215385][T11796] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 657.232483][ T4241] usb 4-1: USB disconnect, device number 2 [ 657.957684][ T4780] loop3: detected capacity change from 0 to 1024 [ 657.991672][T11796] usb 6-1: Using ep0 maxpacket: 32 [ 658.146871][ T3333] libceph: connect (1)[c::]:6789 error -101 [ 658.153605][ T3333] libceph: mon0 (1)[c::]:6789 connect error [ 658.160845][ T4782] ceph: No mds server is up or the cluster is laggy [ 658.249949][T11796] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.289632][T11796] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.314953][T11796] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 658.354966][T11796] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 658.384951][T11796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.413591][T11796] usb 6-1: config 0 descriptor?? [ 659.120010][T11796] usbhid 6-1:0.0: can't add hid device: -71 [ 659.149112][T11796] usbhid: probe of 6-1:0.0 failed with error -71 [ 659.270598][T11796] usb 6-1: USB disconnect, device number 3 [ 659.295712][ T4816] loop2: detected capacity change from 0 to 128 [ 659.358375][ T4819] loop6: detected capacity change from 0 to 512 [ 659.577189][ T4829] loop5: detected capacity change from 0 to 164 [ 659.868410][ T4819] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 660.019224][ T4819] ext4 filesystem being mounted at /38/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 660.359685][ T3333] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 660.599773][ T3333] usb 2-1: Using ep0 maxpacket: 8 [ 660.789812][ T3333] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 661.378746][ T3333] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 661.563793][ T3333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.574258][ T3333] usb 2-1: Product: syz [ 661.585305][ T3333] usb 2-1: Manufacturer: syz [ 661.592791][ T4888] loop5: detected capacity change from 0 to 1024 [ 661.600131][ T3333] usb 2-1: SerialNumber: syz [ 661.607639][ T3333] usb 2-1: config 0 descriptor?? [ 661.731621][ T4892] loop6: detected capacity change from 0 to 128 [ 662.894625][ T3333] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 662.906981][ T4896] loop3: detected capacity change from 0 to 512 [ 662.939165][ T4892] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 662.986652][ T3333] usb 2-1: selecting invalid altsetting 1 [ 663.039014][ T6085] hfsplus: b-tree write err: -5, ino 8 [ 663.058702][ T4896] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 663.139961][ T3333] gspca_stk014: reg_r err -71 [ 663.144708][ T3333] stk014: probe of 2-1:0.0 failed with error -71 [ 663.178833][ T4896] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 663.282497][ T3333] usb 2-1: USB disconnect, device number 2 [ 663.299692][ T4896] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.13069: bg 0: block 248: padding at end of block bitmap is not set [ 663.401490][ T4896] __quota_error: 1 callbacks suppressed [ 663.401503][ T4896] Quota error (device loop3): write_blk: dquota write failed [ 663.433704][ T4896] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 663.892372][ T4896] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.13069: Failed to acquire dquot type 1 [ 663.981005][ T4896] EXT4-fs (loop3): 1 truncate cleaned up [ 664.092577][ T4896] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 664.107612][ T4941] loop6: detected capacity change from 0 to 1024 [ 664.151738][ T4896] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz.3.13069: deleted inode referenced: 12 [ 667.259789][ T13] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 667.714366][ T4246] Bluetooth: hci4: command 0x0406 tx timeout [ 668.304146][ T5006] loop5: detected capacity change from 0 to 2048 [ 668.766936][ T5006] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 669.149443][ T5021] loop6: detected capacity change from 0 to 1024 [ 669.255211][ T5021] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 669.286133][ T3315] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 669.335434][ T3315] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 200 with error 28 [ 669.347928][ T3315] EXT4-fs (loop5): This should not happen!! Data will be lost [ 669.347928][ T3315] [ 669.361007][ T3315] EXT4-fs (loop5): Total free blocks count 0 [ 669.367004][ T3315] EXT4-fs (loop5): Free/Dirty block details [ 669.376494][ T3315] EXT4-fs (loop5): free_blocks=66060288 [ 669.382240][ T3315] EXT4-fs (loop5): dirty_blocks=208 [ 669.387538][ T3315] EXT4-fs (loop5): Block reservation details [ 669.393604][ T3315] EXT4-fs (loop5): i_reserved_data_blocks=13 [ 669.445933][ T5021] attempt to access beyond end of device [ 669.445933][ T5021] loop6: rw=2051, want=1026, limit=1024 [ 672.405553][ T4249] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 673.300145][ T4249] usb 6-1: unable to get BOS descriptor or descriptor too short [ 673.837638][ T5108] loop1: detected capacity change from 0 to 64 [ 673.860072][ T4249] usb 6-1: config 2 has an invalid interface number: 23 but max is 0 [ 673.878845][ T4249] usb 6-1: config 2 has no interface number 0 [ 673.881243][ T5108] hfs: unable to locate alternate MDB [ 673.891212][ T5108] hfs: continuing without an alternate MDB [ 673.918839][ T4249] usb 6-1: config 2 interface 23 altsetting 8 bulk endpoint 0xE has invalid maxpacket 32 [ 673.939050][ T4249] usb 6-1: config 2 interface 23 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 64 [ 673.959264][ T4249] usb 6-1: config 2 interface 23 has no altsetting 0 [ 674.084068][ T5115] loop3: detected capacity change from 0 to 512 [ 674.160242][ T4249] usb 6-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=f8.20 [ 674.451505][ T4249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.487344][ T4249] usb 6-1: Product: syz [ 674.751600][ T4249] usb 6-1: Manufacturer: syz [ 674.762782][ T4249] usb 6-1: SerialNumber: syz [ 674.799980][ T5093] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 674.809128][ T5093] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 674.892234][ T5115] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 675.010200][ T5115] ext4 filesystem being mounted at /25/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 675.530343][ T4249] pn533_usb 6-1:2.23: NFC: Could not find bulk-in or bulk-out endpoint [ 675.824107][ T5137] loop5: detected capacity change from 0 to 131072 [ 675.947532][ T4249] usb 6-1: USB disconnect, device number 5 [ 676.004149][ T5153] loop3: detected capacity change from 0 to 512 [ 676.021591][ T5137] F2FS-fs (loop5): Found nat_bits in checkpoint [ 676.045656][ T5157] vivid-001: ================= START STATUS ================= [ 676.120142][ T5157] vivid-001: Test Pattern: 75% Colorbar [ 676.129812][ T5157] vivid-001: Fill Percentage of Frame: 100 [ 676.135747][ T5137] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 676.161728][ T25] audit: type=1804 audit(1770320737.729:1041): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.13112" name="/newroot/274/file0/bus" dev="loop5" ino=10 res=1 errno=0 [ 676.246038][ T5157] vivid-001: Horizontal Movement: No Movement [ 676.315687][ T5157] vivid-001: Vertical Movement: No Movement [ 676.322162][ T5157] vivid-001: OSD Text Mode: All [ 676.332228][ T5157] vivid-001: Show Border: false [ 676.337906][ T5157] vivid-001: Show Square: false [ 676.422329][ T5153] EXT4-fs (loop3): Test dummy encryption mode enabled [ 676.447666][ T5157] vivid-001: Sensor Flipped Horizontally: false [ 676.482998][ T5157] vivid-001: Sensor Flipped Vertically: false [ 676.489097][ T5157] vivid-001: Insert SAV Code in Image: false [ 676.496135][ T5153] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 676.540173][ T5153] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 676.547737][ T5153] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,delalloc,prjquota,usrquota,resuid=0x000000000000ee00,usrjquota=min_batch_time=0x00000000fffffffc,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 676.575965][ T5157] vivid-001: Insert EAV Code in Image: false [ 676.586234][ T5157] vivid-001: Reduced Framerate: false [ 676.599528][ T5157] vivid-001: Enable Capture Cropping: true [ 676.606302][ T5157] vivid-001: Enable Capture Composing: true [ 676.612452][ T5157] vivid-001: Enable Capture Scaler: true [ 676.618166][ T5157] vivid-001: Timestamp Source: End of Frame [ 676.646360][ T5157] vivid-001: Colorspace: sRGB [ 676.692500][ T5157] vivid-001: Transfer Function: Default [ 676.749896][ T5153] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 676.763394][T11794] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 676.772390][ T5153] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 676.888918][ T5157] vivid-001: Y'CbCr Encoding: Default [ 676.896823][ T5157] vivid-001: HSV Encoding: Hue 0-179 [ 676.910108][ T5157] vivid-001: Quantization: Default [ 676.919812][ T5157] vivid-001: Apply Alpha To Red Only: false [ 676.935369][ T5157] vivid-001: Standard Aspect Ratio: 4x3 [ 677.285450][ T5157] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 677.293851][ T5157] vivid-001: DV Timings: 640x480p59 inactive [ 677.300074][ T5157] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 677.309811][ T5157] vivid-001: Maximum EDID Blocks: 2 [ 677.319834][ T5157] vivid-001: Limited RGB Range (16-235): false [ 677.330090][ T5157] vivid-001: Rx RGB Quantization Range: Automatic [ 677.340288][ T5157] vivid-001: Power Present: 0x00000001 [ 677.361234][ T5157] tpg source WxH: 640x360 (Y'CbCr) [ 677.366336][ T5157] tpg field: 1 [ 677.372028][ T5157] tpg crop: 640x360@0x0 [ 677.376169][ T5157] tpg compose: 640x360@0x0 [ 677.382972][ T5157] tpg colorspace: 8 [ 677.386770][ T5157] tpg transfer function: 0/0 [ 677.393810][ T5157] tpg Y'CbCr encoding: 0/0 [ 677.399717][ T5157] tpg quantization: 0/0 [ 677.403863][ T5157] tpg RGB range: 0/2 [ 677.419627][T11794] usb 7-1: Using ep0 maxpacket: 32 [ 677.450551][ T5157] vivid-001: ================== END STATUS ================== [ 677.589738][T11794] usb 7-1: config 0 has an invalid interface number: 182 but max is 0 [ 679.276934][ T5203] loop5: detected capacity change from 0 to 1024 [ 679.302002][T11794] usb 7-1: config 0 has no interface number 0 [ 679.308159][T11794] usb 7-1: config 0 interface 182 has no altsetting 0 [ 679.434816][ T5203] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 680.208847][ T25] audit: type=1800 audit(1770320741.769:1042): pid=5212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.13116" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 680.960319][T11794] usb 7-1: string descriptor 0 read error: -71 [ 680.977350][T11794] usb 7-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 680.995244][T11794] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.055375][T11794] usb 7-1: config 0 descriptor?? [ 681.079785][T11794] usb 7-1: can't set config #0, error -71 [ 681.153392][T11794] usb 7-1: USB disconnect, device number 2 [ 681.589831][T11794] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 681.777672][ T5238] loop2: detected capacity change from 0 to 1024 [ 681.794250][ T5242] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 117 [ 683.563062][ T5268] loop5: detected capacity change from 0 to 256 [ 683.589595][ T5272] netlink: 'syz.3.13130': attribute type 1 has an invalid length. [ 684.354290][ T5268] exfat: Deprecated parameter 'utf8' [ 684.718202][ T5268] exfat: Deprecated parameter 'namecase' [ 684.799871][T11794] usb 7-1: unable to get BOS descriptor or descriptor too short [ 684.806604][ T5292] loop1: detected capacity change from 0 to 1024 [ 684.865006][ T5268] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 684.931473][T11794] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 684.953693][T11794] usb 7-1: can't read configurations, error -71 [ 684.981325][ T5292] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 685.038886][ T5300] loop3: detected capacity change from 0 to 4096 [ 685.130580][ T5300] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 685.157497][ T5300] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 685.251421][ T5292] attempt to access beyond end of device [ 685.251421][ T5292] loop1: rw=2051, want=1026, limit=1024 [ 685.269177][ T5311] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 685.532063][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.541290][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.068475][ T5286] loop2: detected capacity change from 0 to 32768 [ 686.283097][ T5286] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.13132 (5286) [ 688.174522][ T5327] loop3: detected capacity change from 0 to 64 [ 688.333218][ T5332] loop6: detected capacity change from 0 to 128 [ 688.375367][ T5329] loop1: detected capacity change from 0 to 1024 [ 688.383155][ T5286] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 688.401066][ T5286] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 688.403788][ T5332] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 688.424846][ T5327] hfs: unable to locate alternate MDB [ 688.434598][ T5286] BTRFS info (device loop2): use lzo compression, level 0 [ 688.442619][ T5327] hfs: continuing without an alternate MDB [ 688.449136][ T25] audit: type=1800 audit(1770320750.009:1043): pid=5332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.13140" name="file1" dev="loop6" ino=94 res=0 errno=0 [ 688.470350][ T5286] BTRFS info (device loop2): max_inline at 0 [ 688.488511][ T5286] BTRFS info (device loop2): using free space tree [ 688.517231][ T5286] BTRFS info (device loop2): has skinny extents [ 689.230034][ T5286] BTRFS error (device loop2): open_ctree failed: -12 [ 690.996920][ T5378] netlink: 'syz.5.13146': attribute type 1 has an invalid length. [ 691.145242][ T5400] loop2: detected capacity change from 0 to 256 [ 691.186938][ T5400] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 691.217535][ T5400] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 691.238167][ T5400] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 691.428342][ T3866] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 691.919430][ T5419] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 692.394242][ T5423] loop3: detected capacity change from 0 to 1024 [ 692.600833][ T3866] usb 2-1: unable to get BOS descriptor or descriptor too short [ 692.619970][ T5423] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 692.729752][ T3866] usb 2-1: config 2 has an invalid interface number: 23 but max is 0 [ 694.325083][ T5443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13153'. [ 694.379836][ T3866] usb 2-1: config 2 has no interface number 0 [ 694.386033][ T3866] usb 2-1: config 2 interface 23 altsetting 8 bulk endpoint 0xE has invalid maxpacket 32 [ 694.638566][ T3866] usb 2-1: config 2 interface 23 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 64 [ 694.648608][ T3866] usb 2-1: config 2 interface 23 has no altsetting 0 [ 694.689822][ T3866] usb 2-1: string descriptor 0 read error: -71 [ 694.696552][ T3866] usb 2-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=f8.20 [ 694.706658][ T3866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.721270][ T5423] attempt to access beyond end of device [ 694.721270][ T5423] loop3: rw=2051, want=1026, limit=1024 [ 694.749792][ T3866] usb 2-1: can't set config #2, error -71 [ 694.757176][ T3866] usb 2-1: USB disconnect, device number 3 [ 694.891021][ T5449] loop6: detected capacity change from 0 to 1024 [ 694.999364][ T5425] loop2: detected capacity change from 0 to 32768 [ 695.837128][ T5479] loop6: detected capacity change from 0 to 64 [ 695.858524][ T5469] loop1: detected capacity change from 0 to 8192 [ 695.933742][ T5469] loop1: p1 p2 p4 < > [ 695.938298][ T5469] loop1: partition table partially beyond EOD, truncated [ 695.955647][ T5469] loop1: p1 start 16777216 is beyond EOD, truncated [ 696.047890][ T5469] loop1: p2 size 515840 extends beyond EOD, truncated [ 696.062609][ T5486] bond2: (slave geneve3): Error -99 calling set_mac_address [ 696.622768][ T5469] loop1: p4 start 16777216 is beyond EOD, truncated [ 696.634396][ T5531] netlink: 'syz.2.13159': attribute type 1 has an invalid length. [ 696.683706][ T5479] hfs: unable to locate alternate MDB [ 696.689115][ T5479] hfs: continuing without an alternate MDB [ 697.671241][ T3192] udevd[3192]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 697.727052][ T5567] loop1: detected capacity change from 0 to 1024 [ 697.993696][ T3866] Bluetooth: hci0: command 0x0406 tx timeout [ 699.796702][ T5618] loop6: detected capacity change from 0 to 512 [ 699.957610][ T5618] EXT4-fs (loop6): Test dummy encryption mode enabled [ 700.097856][ T5618] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 700.229488][ T5618] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 700.305086][ T5618] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,delalloc,prjquota,usrquota,resuid=0x000000000000ee00,usrjquota=min_batch_time=0x00000000fffffffc,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 700.705373][ T5618] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 701.936116][ T5612] loop3: detected capacity change from 0 to 32768 [ 702.059138][ T5649] loop6: detected capacity change from 0 to 32768 [ 702.259476][ T5649] XFS (loop6): Mounting V5 Filesystem [ 702.637985][ T5654] loop2: detected capacity change from 0 to 131072 [ 702.649991][T11789] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 702.757302][ T5649] XFS (loop6): Ending clean mount [ 702.771571][ T5649] XFS (loop6): Quotacheck needed: Please wait. [ 702.787468][ T5654] F2FS-fs (loop2): Found nat_bits in checkpoint [ 702.810981][ T5654] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 702.933127][ T5649] XFS (loop6): Quotacheck: Done. [ 702.969709][ T3745] Bluetooth: hci1: command 0x0406 tx timeout [ 702.969837][T11789] usb 4-1: Using ep0 maxpacket: 32 [ 703.052607][ T25] audit: type=1804 audit(1770320764.619:1044): pid=5654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.13182" name="/newroot/88/file0/bus" dev="loop2" ino=10 res=1 errno=0 [ 703.092411][ T2298] XFS (loop6): Unmounting Filesystem [ 703.119812][T11789] usb 4-1: config 0 has an invalid interface number: 182 but max is 0 [ 703.171788][T11789] usb 4-1: config 0 has no interface number 0 [ 703.224703][T11789] usb 4-1: config 0 interface 182 has no altsetting 0 [ 703.450953][T11789] usb 4-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 703.509838][T11789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.670237][T11789] usb 4-1: Product: syz [ 703.674730][T11789] usb 4-1: Manufacturer: syz [ 703.680780][T11789] usb 4-1: SerialNumber: syz [ 703.755267][T11789] usb 4-1: config 0 descriptor?? [ 703.810514][T11789] hub 4-1:0.182: bad descriptor, ignoring hub [ 703.816617][T11789] hub: probe of 4-1:0.182 failed with error -5 [ 704.050644][T11789] kaweth 4-1:0.182: Firmware present in device. [ 704.281061][T11789] kaweth 4-1:0.182: Statistics collection: 0 [ 704.291879][T11789] kaweth 4-1:0.182: Multicast filter limit: 0 [ 704.387864][T11789] kaweth 4-1:0.182: MTU: 0 [ 704.454342][T11789] kaweth 4-1:0.182: Read MAC address 00:00:00:00:00:00 [ 704.602305][T11789] kaweth: probe of 4-1:0.182 failed with error -5 [ 704.781057][T11789] usb 4-1: USB disconnect, device number 3 [ 707.437960][ T5721] loop2: detected capacity change from 0 to 1024 [ 708.985163][ T5737] loop2: detected capacity change from 0 to 512 [ 709.046385][ T5737] EXT4-fs (loop2): Test dummy encryption mode enabled [ 709.115352][ T5737] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 709.276172][ T5737] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 709.321806][ T5737] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,delalloc,prjquota,usrquota,resuid=0x000000000000ee00,usrjquota=min_batch_time=0x00000000fffffffc,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 709.408628][ T5737] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 709.925777][ T5762] 8021q: adding VLAN 0 to HW filter on device bond1 [ 710.435652][ T5811] loop1: detected capacity change from 0 to 1024 [ 711.005466][ T5812] loop3: detected capacity change from 0 to 131072 [ 711.006117][ T5822] loop6: detected capacity change from 0 to 32768 [ 711.279382][ T13] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 711.658066][ T5822] XFS (loop6): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 711.666490][ T5822] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 711.674268][ T5822] XFS (loop6): DAX and reflink cannot be used together! [ 711.831574][ T5855] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 711.845863][ T13] usb 6-1: Using ep0 maxpacket: 32 [ 711.874601][ T5812] F2FS-fs (loop3): Found nat_bits in checkpoint [ 711.954212][ T5812] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 711.970026][ T13] usb 6-1: config 0 has an invalid interface number: 182 but max is 0 [ 712.023534][ T13] usb 6-1: config 0 has no interface number 0 [ 712.110291][ T13] usb 6-1: config 0 interface 182 has no altsetting 0 [ 712.390052][ T13] usb 6-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 712.435171][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.533663][ T13] usb 6-1: Product: syz [ 712.587843][ T13] usb 6-1: Manufacturer: syz [ 712.638564][ T13] usb 6-1: SerialNumber: syz [ 712.711704][ T25] audit: type=1804 audit(1770320774.279:1045): pid=5812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.13201" name="/newroot/45/file0/bus" dev="loop3" ino=10 res=1 errno=0 [ 712.751871][ T13] usb 6-1: config 0 descriptor?? [ 712.840713][ T13] hub 6-1:0.182: bad descriptor, ignoring hub [ 712.875304][ T13] hub: probe of 6-1:0.182 failed with error -5 [ 713.094187][ T13] kaweth 6-1:0.182: Firmware present in device. [ 713.319917][ T13] kaweth 6-1:0.182: Statistics collection: 0 [ 713.327229][ T13] kaweth 6-1:0.182: Multicast filter limit: 0 [ 713.370419][ T13] kaweth 6-1:0.182: MTU: 0 [ 713.405040][ T13] kaweth 6-1:0.182: Read MAC address 00:00:00:00:00:00 [ 713.540610][ T13] kaweth: probe of 6-1:0.182 failed with error -5 [ 713.615122][ T13] usb 6-1: USB disconnect, device number 6 [ 714.929764][ T5909] loop5: detected capacity change from 0 to 1024 [ 715.709801][ T5918] loop1: detected capacity change from 0 to 1764 [ 717.606073][ T5951] loop3: detected capacity change from 0 to 16 [ 717.661083][ T5951] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 718.025639][ T5971] loop2: detected capacity change from 0 to 1024 [ 718.032386][ T5968] loop3: detected capacity change from 0 to 4096 [ 718.039468][ T5968] ntfs3: Unknown parameter 'windows_names' [ 718.319758][T11794] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 718.579780][T11794] usb 2-1: Using ep0 maxpacket: 32 [ 718.712097][T11794] usb 2-1: config 0 has an invalid interface number: 147 but max is 0 [ 718.762461][T11794] usb 2-1: config 0 has no interface number 0 [ 718.782709][T11794] usb 2-1: too many endpoints for config 0 interface 147 altsetting 2: 64, using maximum allowed: 30 [ 718.855139][T11794] usb 2-1: config 0 interface 147 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 718.896083][T11794] usb 2-1: config 0 interface 147 has no altsetting 0 [ 719.714038][ T5991] loop2: detected capacity change from 0 to 64 [ 719.753913][T11794] usb 2-1: New USB device found, idVendor=1342, idProduct=0204, bcdDevice=40.e2 [ 719.770495][T11794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.778506][T11794] usb 2-1: Product: syz [ 719.799658][T11794] usb 2-1: Manufacturer: syz [ 719.804286][T11794] usb 2-1: SerialNumber: syz [ 719.820610][T11794] usb 2-1: config 0 descriptor?? [ 719.831420][ T5961] loop6: detected capacity change from 0 to 32768 [ 720.940135][T11794] kaweth 2-1:0.147: Firmware present in device. [ 721.106169][T11794] kaweth 2-1:0.147: Error reading configuration (-71), no net device created [ 721.115580][T11794] kaweth: probe of 2-1:0.147 failed with error -5 [ 721.124818][T11794] usb 2-1: USB disconnect, device number 4 [ 722.334692][ T6038] loop1: detected capacity change from 0 to 1024 [ 723.594200][ T6053] ucma_write: process 286 (syz.2.13246) changed security contexts after opening file descriptor, this is not allowed. [ 723.639523][ T3745] Bluetooth: hci2: command 0x0406 tx timeout [ 725.809818][ T3864] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 726.859626][ T3864] usb 3-1: Using ep0 maxpacket: 32 [ 727.989880][ T3864] usb 3-1: unable to get BOS descriptor or descriptor too short [ 728.079872][ T3864] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 728.087649][ T3864] usb 3-1: can't read configurations, error -71 [ 729.272014][ T6133] loop5: detected capacity change from 0 to 1024 [ 729.315116][ T6129] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13256'. [ 729.356801][ T6143] loop6: detected capacity change from 0 to 512 [ 730.445932][ T6143] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 730.965609][ T25] audit: type=1800 audit(1770320792.499:1046): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.13262" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 734.319796][ T6214] loop1: detected capacity change from 0 to 1024 [ 734.364157][ T6225] binder: BINDER_SET_CONTEXT_MGR already set [ 734.476673][ T6225] binder: 6224:6225 ioctl 4018620d 2000000002c0 returned -16 [ 737.419679][ T4246] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 738.319624][ T4246] usb 7-1: Using ep0 maxpacket: 32 [ 738.349266][ T6254] loop2: detected capacity change from 0 to 32768 [ 738.360058][ T6291] loop5: detected capacity change from 0 to 1024 [ 738.509687][ T4246] usb 7-1: config index 0 descriptor too short (expected 274, got 18) [ 738.649891][T11794] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 739.020047][T11794] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 739.069468][T11794] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 739.145774][T11794] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 739.182742][ T4246] usb 7-1: config 0 has an invalid interface number: 1 but max is -1 [ 739.191484][ T4246] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 739.196007][T11794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.209459][ T4246] usb 7-1: config 0 has no interface number 0 [ 739.273297][T11794] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 740.491536][T11794] gspca_sn9c2028: read1 error -110 [ 740.550617][ T4246] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 741.196337][T11794] gspca_sn9c2028: read1 error -71 [ 741.209102][T11794] sn9c2028: probe of 2-1:220.0 failed with error -71 [ 741.220075][ T4246] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.228725][ T4246] usb 7-1: Product: syz [ 741.241340][T11794] usb 2-1: USB disconnect, device number 5 [ 741.279595][ T4246] usb 7-1: Manufacturer: syz [ 741.374658][ T4246] usb 7-1: config 0 descriptor?? [ 741.403553][ T6331] loop6: detected capacity change from 0 to 256 [ 741.441427][ T4246] usb 7-1: can't set config #0, error -71 [ 741.451918][ T4246] usb 7-1: USB disconnect, device number 5 [ 741.506033][ T6331] FAT-fs (loop6): Directory bread(block 64) failed [ 741.539355][ T6331] FAT-fs (loop6): Directory bread(block 65) failed [ 741.556834][ T6331] FAT-fs (loop6): Directory bread(block 66) failed [ 741.570021][ T6331] FAT-fs (loop6): Directory bread(block 67) failed [ 741.576607][ T6331] FAT-fs (loop6): Directory bread(block 68) failed [ 741.580226][ T6335] device syzkaller0 entered promiscuous mode [ 741.603570][ T6331] FAT-fs (loop6): Directory bread(block 69) failed [ 741.679103][ T6331] FAT-fs (loop6): Directory bread(block 70) failed [ 741.721582][ T6331] FAT-fs (loop6): Directory bread(block 71) failed [ 741.748116][ T6331] FAT-fs (loop6): Directory bread(block 72) failed [ 741.786552][ T6331] FAT-fs (loop6): Directory bread(block 73) failed [ 743.045686][ T6377] loop2: detected capacity change from 0 to 1024 [ 743.555342][ T6384] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 744.319666][ T5375] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 744.516605][ T6436] loop6: detected capacity change from 0 to 2048 [ 744.560934][ T6436] UDF-fs: bad mount option "uDI¬Ë-™ãÀlongad" or missing value [ 744.759925][ T5375] usb 3-1: config 83 contains an unexpected descriptor of type 0x2, skipping [ 745.283812][ T5375] usb 3-1: config 83 has an invalid interface number: 121 but max is 3 [ 745.334738][ T5375] usb 3-1: config 83 has an invalid interface number: 37 but max is 3 [ 745.377776][ T5375] usb 3-1: config 83 has an invalid descriptor of length 0, skipping remainder of the config [ 745.404297][ T6407] loop1: detected capacity change from 0 to 40427 [ 745.408663][ T5375] usb 3-1: config 83 has 3 interfaces, different from the descriptor's value: 4 [ 745.454945][ T6407] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 745.467590][ T5375] usb 3-1: config 83 has no interface number 1 [ 745.470063][ T6407] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 745.496224][ T6407] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value [ 745.499715][ T5375] usb 3-1: config 83 has no interface number 2 [ 745.527004][ T5375] usb 3-1: config 83 interface 0 altsetting 164 has an invalid endpoint with address 0x80, skipping [ 745.548927][ T5375] usb 3-1: config 83 interface 0 altsetting 164 has a duplicate endpoint with address 0x5, skipping [ 745.569622][ T5375] usb 3-1: config 83 interface 0 altsetting 164 has an invalid endpoint with address 0x80, skipping [ 745.602599][ T5375] usb 3-1: config 83 interface 0 altsetting 164 has an invalid endpoint with address 0x80, skipping [ 745.632648][ T6461] loop6: detected capacity change from 0 to 128 [ 745.644731][ T5375] usb 3-1: config 83 interface 0 altsetting 164 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 745.803582][ T5375] usb 3-1: config 83 interface 37 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 745.817251][ T5375] usb 3-1: config 83 interface 0 has no altsetting 0 [ 745.824768][ T5375] usb 3-1: config 83 interface 121 has no altsetting 0 [ 745.830432][ T6461] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 745.831843][ T5375] usb 3-1: config 83 interface 37 has no altsetting 0 [ 745.934721][ T6471] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13317'. [ 746.310795][ T6461] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 746.565317][ T6475] loop1: detected capacity change from 0 to 256 [ 746.619864][ T5375] usb 3-1: New USB device found, idVendor=1519, idProduct=0452, bcdDevice=9b.7d [ 746.629787][ T5375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.638190][ T5375] usb 3-1: Product: syz [ 746.644209][ T5375] usb 3-1: Manufacturer: syz [ 746.649008][ T5375] usb 3-1: SerialNumber: syz [ 746.971570][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.977908][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.989894][ T6495] loop3: detected capacity change from 0 to 1024 [ 747.004995][ T6494] loop6: detected capacity change from 0 to 1024 [ 747.020980][ T5375] cdc_acm 3-1:83.0: skipping garbage [ 747.030763][ T5375] cdc_acm 3-1:83.0: skipping garbage [ 747.049328][ T5375] cdc_acm 3-1:83.0: skipping garbage [ 747.097542][ T5375] cdc_acm 3-1:83.0: skipping garbage [ 747.215932][ T5375] cdc_acm 3-1:83.0: skipping garbage [ 747.260893][ T6494] EXT4-fs (loop6): mounted filesystem without journal. Opts: acl,,errors=continue. Quota mode: none. [ 747.418633][ T6494] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3887: comm syz.6.13323: Allocating blocks 497-513 which overlap fs metadata [ 747.512848][ T25] audit: type=1800 audit(1770320809.079:1047): pid=6512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.13323" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 747.527331][ T5375] usb 3-1: USB disconnect, device number 5 [ 747.574919][ T6494] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3887: comm syz.6.13323: Allocating blocks 497-513 which overlap fs metadata [ 747.618493][ T6494] EXT4-fs (loop6): pa ffff8880766712a0: logic 16, phys. 129, len 24 [ 747.627008][ T6494] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 1 [ 747.882316][ T6524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.891413][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.937709][ T6524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.050649][ T6534] loop1: detected capacity change from 0 to 512 [ 748.120602][ T6537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.129119][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.150234][ T3327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.159402][ T6537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.168694][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.181016][ T6537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.189146][ T1492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.220593][ T6534] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 748.248767][ T6534] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 748.277602][ T6534] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 748.296522][ T6534] System zones: 1-12 [ 748.316129][ T6534] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 748.330210][ T6534] EXT4-fs (loop1): 1 truncate cleaned up [ 748.335934][ T6534] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 749.025500][ T6551] device syzkaller0 entered promiscuous mode [ 749.061434][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13330'. [ 749.253202][ T6555] xt_socket: unknown flags 0xc [ 749.514884][ T6557] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 750.141859][ T6584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13336'. [ 750.151132][ T6584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13336'. [ 750.934975][ T6590] loop1: detected capacity change from 0 to 1024 [ 752.194193][ T6608] netlink: 7 bytes leftover after parsing attributes in process `syz.2.13344'. [ 752.739924][ T4246] Bluetooth: hci2: command 0x0405 tx timeout [ 752.943366][ T4249] net_ratelimit: 82 callbacks suppressed [ 752.943378][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.050509][ T5375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.776770][ T6635] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13350'. [ 753.973042][ T6611] loop2: detected capacity change from 0 to 32768 [ 754.012713][ T3359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.021617][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.030952][ T5375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.081135][ T6611] XFS (loop2): Mounting V5 Filesystem [ 754.090035][ T5375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.196796][ T6611] XFS (loop2): Ending clean mount [ 754.841998][ T6664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13353'. [ 754.851498][ T6664] netlink: 92 bytes leftover after parsing attributes in process `syz.1.13353'. [ 754.865037][ T6664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13353'. [ 755.125216][ T25] audit: type=1800 audit(1770320816.689:1048): pid=6666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13346" name="file1" dev="loop2" ino=4422 res=0 errno=0 [ 755.131771][ T5375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.919003][ T6675] loop5: detected capacity change from 0 to 1024 [ 756.404739][ T4246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.601998][ T1493] XFS (loop2): Unmounting Filesystem [ 756.866486][ T6660] loop3: detected capacity change from 0 to 32768 [ 757.005769][ T6660] (syz.3.13354,6660,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 757.059841][ T3327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.078752][ T6660] (syz.3.13354,6660,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 757.232546][ T6660] JBD2: Ignoring recovery information on journal [ 757.536025][ T6660] JBD2: recovery failed [ 757.587338][ T6660] (syz.3.13354,6660,1):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 757.701355][ T6660] (syz.3.13354,6660,1):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5 [ 757.817928][ T6660] (syz.3.13354,6660,1):ocfs2_check_volume:2493 ERROR: status = -5 [ 757.922559][ T6660] (syz.3.13354,6660,1):ocfs2_mount_volume:1824 ERROR: status = -5 [ 758.048987][ T3755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.091207][ T6689] loop6: detected capacity change from 0 to 32768 [ 758.115444][ T6660] (syz.3.13354,6660,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 758.359114][ T6711] loop5: detected capacity change from 0 to 1024 [ 758.432859][ T6716] xt_CT: You must specify a L4 protocol and not use inversions on it [ 759.072960][ T3755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.715731][ T6689] XFS (loop6): Mounting V5 Filesystem [ 759.770199][ T511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.913508][ T4246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.649765][ T3755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.658226][ T3864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.697807][ T6689] XFS (loop6): log mount failed [ 761.764846][ T3864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.355029][ T4246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.363200][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.694118][T11794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.776543][ T25] audit: type=1326 audit(1770320825.339:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.3.13373" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6898a30eb9 code=0x0 [ 764.670191][ T4246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.758450][ T6767] loop5: detected capacity change from 0 to 32768 [ 764.914683][ T6788] loop6: detected capacity change from 0 to 1024 [ 764.934027][ T6782] tmpfs: Unknown parameter 'grpquota' [ 765.699806][ T3864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.712826][ T6767] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 766.112056][T31589] ocfs2: Unmounting device (7,5) on (node local) [ 767.291356][ T3866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.303746][T11794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.579901][ T3866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.932230][ T3864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.330017][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.230983][ T3864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.627811][ T6883] loop6: detected capacity change from 0 to 1024 [ 772.433912][ T3864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.580758][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.784065][ T3755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.792200][ T3327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.015879][ T3755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.261034][ T3755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.733945][ T3755] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 776.829687][ T3327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.220197][ T3755] usb 7-1: unable to get BOS descriptor or descriptor too short [ 777.280441][ T3755] usb 7-1: not running at top speed; connect to a high speed hub [ 777.440291][ T3755] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 777.690303][ T3755] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 777.854088][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.866647][ T6972] loop2: detected capacity change from 0 to 1024 [ 778.614843][ T6983] loop5: detected capacity change from 0 to 1024 [ 778.729761][ T3755] usb 7-1: string descriptor 0 read error: -22 [ 778.736108][ T3755] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 778.756901][ T3755] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.906540][ T6994] loop2: detected capacity change from 0 to 40427 [ 778.959423][ T6994] F2FS-fs (loop2): invalid crc value [ 778.986518][ T6994] F2FS-fs (loop2): Found nat_bits in checkpoint [ 779.017715][ T6994] F2FS-fs (loop2): Start checkpoint disabled! [ 779.048149][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.068130][ T3755] usb 7-1: 0:2 : does not exist [ 779.075075][ T6994] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 779.297624][ T3313] hfsplus: b-tree write err: -5, ino 4 [ 780.091062][ T3864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.149728][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.275066][ T6085] attempt to access beyond end of device [ 780.275066][ T6085] loop2: rw=2049, want=40984, limit=40427 [ 780.589762][ T3755] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 781.451914][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.554272][ T7050] loop3: detected capacity change from 0 to 1024 [ 781.697072][ T7057] loop6: detected capacity change from 0 to 32768 [ 781.940364][ T3755] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 781.986820][ T3755] usb 7-1: USB disconnect, device number 6 [ 782.140859][ T7057] JBD2: Ignoring recovery information on journal [ 782.489312][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.503787][ T4246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.768974][T31288] udevd[31288]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 782.797518][ T7057] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 782.845957][ T7037] loop5: detected capacity change from 0 to 32768 [ 782.885548][ T7057] [ 782.887885][ T7057] ====================================================== [ 782.894887][ T7057] WARNING: possible circular locking dependency detected [ 782.901886][ T7057] syzkaller #0 Not tainted [ 782.906279][ T7057] ------------------------------------------------------ [ 782.913271][ T7057] syz.6.13426/7057 is trying to acquire lock: [ 782.919308][ T7057] ffff888069971488 (&osb->system_file_mutex){+.+.}-{3:3}, at: ocfs2_get_system_file_inode+0x1b6/0x7f0 [ 782.930244][ T7057] [ 782.930244][ T7057] but task is already holding lock: [ 782.937580][ T7057] ffff888057bb94a0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_page_mkwrite+0x2d7/0xb10 [ 782.948165][ T7057] [ 782.948165][ T7057] which lock already depends on the new lock. [ 782.948165][ T7057] [ 782.958539][ T7057] [ 782.958539][ T7057] the existing dependency chain (in reverse order) is: [ 782.967524][ T7057] [ 782.967524][ T7057] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 782.976267][ T7057] down_read+0x44/0x2e0 [ 782.980924][ T7057] ocfs2_read_virt_blocks+0x237/0x8d0 [ 782.986795][ T7057] ocfs2_find_entry+0x3ca/0x2060 [ 782.992227][ T7057] ocfs2_find_files_on_disk+0xdb/0x2f0 [ 782.998181][ T7057] ocfs2_lookup_ino_from_name+0x4f/0xf0 [ 783.004221][ T7057] ocfs2_get_system_file_inode+0x32b/0x7f0 [ 783.010520][ T7057] ocfs2_init_global_system_inodes+0x2f3/0x6d0 [ 783.017172][ T7057] ocfs2_fill_super+0x4060/0x50f0 [ 783.022691][ T7057] mount_bdev+0x287/0x3c0 [ 783.027517][ T7057] legacy_get_tree+0xe6/0x180 [ 783.032690][ T7057] vfs_get_tree+0x88/0x270 [ 783.037604][ T7057] do_new_mount+0x24a/0xa40 [ 783.042604][ T7057] __se_sys_mount+0x2e3/0x3d0 [ 783.047778][ T7057] do_syscall_64+0x4c/0xa0 [ 783.052693][ T7057] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 783.059084][ T7057] [ 783.059084][ T7057] -> #0 (&osb->system_file_mutex){+.+.}-{3:3}: [ 783.067397][ T7057] __lock_acquire+0x2c42/0x7d10 [ 783.072745][ T7057] lock_acquire+0x19e/0x400 [ 783.077746][ T7057] __mutex_lock_common+0x1e3/0x2400 [ 783.083440][ T7057] mutex_lock_nested+0x17/0x20 [ 783.088703][ T7057] ocfs2_get_system_file_inode+0x1b6/0x7f0 [ 783.095005][ T7057] ocfs2_reserve_local_alloc_bits+0xfb/0x25f0 [ 783.101573][ T7057] ocfs2_reserve_clusters_with_limit+0x1b6/0xc10 [ 783.108396][ T7057] ocfs2_convert_inline_data_to_extents+0x1fc/0x1330 [ 783.115570][ T7057] ocfs2_write_begin_nolock+0x1915/0x4400 [ 783.121792][ T7057] ocfs2_page_mkwrite+0x5d6/0xb10 [ 783.127311][ T7057] do_page_mkwrite+0x168/0x3c0 [ 783.132576][ T7057] handle_mm_fault+0x1d87/0x4410 [ 783.138008][ T7057] do_user_addr_fault+0x489/0xc80 [ 783.143533][ T7057] exc_page_fault+0x60/0x100 [ 783.148618][ T7057] asm_exc_page_fault+0x22/0x30 [ 783.153965][ T7057] copy_user_enhanced_fast_string+0xe/0x40 [ 783.160271][ T7057] _copy_to_iter+0x318/0x1180 [ 783.165443][ T7057] get_random_bytes_user+0x1cc/0x3d0 [ 783.171233][ T7057] __x64_sys_getrandom+0x1c2/0x2a0 [ 783.176840][ T7057] do_syscall_64+0x4c/0xa0 [ 783.181755][ T7057] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 783.188144][ T7057] [ 783.188144][ T7057] other info that might help us debug this: [ 783.188144][ T7057] [ 783.198346][ T7057] Possible unsafe locking scenario: [ 783.198346][ T7057] [ 783.205769][ T7057] CPU0 CPU1 [ 783.211111][ T7057] ---- ---- [ 783.216452][ T7057] lock(&ocfs2_file_ip_alloc_sem_key); [ 783.221971][ T7057] lock(&osb->system_file_mutex); [ 783.229579][ T7057] lock(&ocfs2_file_ip_alloc_sem_key); [ 783.237619][ T7057] lock(&osb->system_file_mutex); [ 783.242703][ T7057] [ 783.242703][ T7057] *** DEADLOCK *** [ 783.242703][ T7057] [ 783.250819][ T7057] 3 locks held by syz.6.13426/7057: [ 783.255986][ T7057] #0: ffff88801efc4e28 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock+0x1c/0x50 [ 783.265274][ T7057] #1: ffff88807c1f8558 (sb_pagefaults#3){.+.+}-{0:0}, at: do_page_mkwrite+0x168/0x3c0 [ 783.274906][ T7057] #2: ffff888057bb94a0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_page_mkwrite+0x2d7/0xb10 [ 783.285919][ T7057] [ 783.285919][ T7057] stack backtrace: [ 783.291786][ T7057] CPU: 0 PID: 7057 Comm: syz.6.13426 Not tainted syzkaller #0 [ 783.299217][ T7057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 783.309253][ T7057] Call Trace: [ 783.312515][ T7057] [ 783.315427][ T7057] dump_stack_lvl+0x188/0x250 [ 783.320084][ T7057] ? load_image+0x400/0x400 [ 783.324566][ T7057] ? show_regs_print_info+0x20/0x20 [ 783.329742][ T7057] ? print_circular_bug+0x12b/0x1a0 [ 783.334918][ T7057] check_noncircular+0x296/0x330 [ 783.339833][ T7057] ? add_chain_block+0x940/0x940 [ 783.344744][ T7057] ? lockdep_lock+0xf1/0x1f0 [ 783.349311][ T7057] ? mark_lock+0x94/0x320 [ 783.353618][ T7057] __lock_acquire+0x2c42/0x7d10 [ 783.358454][ T7057] ? mark_lock+0x94/0x320 [ 783.362759][ T7057] ? __lock_acquire+0x13bc/0x7d10 [ 783.367758][ T7057] ? verify_lock_unused+0x140/0x140 [ 783.372933][ T7057] ? mark_lock+0x94/0x320 [ 783.377240][ T7057] ? __lock_acquire+0x13bc/0x7d10 [ 783.382243][ T7057] lock_acquire+0x19e/0x400 [ 783.386726][ T7057] ? ocfs2_get_system_file_inode+0x1b6/0x7f0 [ 783.392687][ T7057] ? __might_sleep+0xf0/0xf0 [ 783.397253][ T7057] ? read_lock_is_recursive+0x10/0x10 [ 783.402606][ T7057] ? ocfs2_get_system_file_inode+0x1b6/0x7f0 [ 783.408560][ T7057] __mutex_lock_common+0x1e3/0x2400 [ 783.413741][ T7057] ? ocfs2_get_system_file_inode+0x1b6/0x7f0 [ 783.419698][ T7057] ? ocfs2_get_system_file_inode+0x156/0x7f0 [ 783.425651][ T7057] ? mutex_lock_io_nested+0x60/0x60 [ 783.430826][ T7057] ? __rwlock_init+0x140/0x140 [ 783.435566][ T7057] ? do_raw_spin_unlock+0x11d/0x230 [ 783.440741][ T7057] mutex_lock_nested+0x17/0x20 [ 783.445480][ T7057] ocfs2_get_system_file_inode+0x1b6/0x7f0 [ 783.451263][ T7057] ? ocfs2_fast_symlink_readpage+0x3f0/0x3f0 [ 783.457216][ T7057] ? lockdep_unlock+0x143/0x2e0 [ 783.462043][ T7057] ? lockdep_lock+0x1f0/0x1f0 [ 783.466700][ T7057] ? __lock_acquire+0x28ac/0x7d10 [ 783.471701][ T7057] ocfs2_reserve_local_alloc_bits+0xfb/0x25f0 [ 783.477746][ T7057] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 783.483615][ T7057] ? _raw_spin_unlock+0x40/0x40 [ 783.488441][ T7057] ? verify_lock_unused+0x140/0x140 [ 783.493619][ T7057] ? ocfs2_complete_local_alloc_recovery+0x580/0x580 [ 783.500271][ T7057] ? ocfs2_reserve_clusters_with_limit+0xda/0xc10 [ 783.506663][ T7057] ? ocfs2_convert_inline_data_to_extents+0x1fc/0x1330 [ 783.513484][ T7057] ? ocfs2_write_begin_nolock+0x1915/0x4400 [ 783.519355][ T7057] ? ocfs2_page_mkwrite+0x5d6/0xb10 [ 783.524534][ T7057] ? do_page_mkwrite+0x168/0x3c0 [ 783.529450][ T7057] ? do_user_addr_fault+0x489/0xc80 [ 783.534623][ T7057] ? exc_page_fault+0x60/0x100 [ 783.539363][ T7057] ? asm_exc_page_fault+0x22/0x30 [ 783.544363][ T7057] ? copy_user_enhanced_fast_string+0xe/0x40 [ 783.550320][ T7057] ? ocfs2_alloc_should_use_local+0x13a/0x2d0 [ 783.556364][ T7057] ? __lock_acquire+0x7d10/0x7d10 [ 783.561366][ T7057] ? do_raw_spin_lock+0x128/0x2f0 [ 783.566367][ T7057] ? __rwlock_init+0x140/0x140 [ 783.571106][ T7057] ? do_raw_spin_unlock+0x11d/0x230 [ 783.576279][ T7057] ? _raw_spin_unlock+0x24/0x40 [ 783.581111][ T7057] ? ocfs2_alloc_should_use_local+0x13a/0x2d0 [ 783.587155][ T7057] ? ocfs2_reserve_clusters_with_limit+0x15d/0xc10 [ 783.593634][ T7057] ocfs2_reserve_clusters_with_limit+0x1b6/0xc10 [ 783.599948][ T7057] ? ocfs2_reserve_clusters+0x30/0x30 [ 783.605299][ T7057] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 783.611257][ T7057] ? lock_chain_count+0x20/0x20 [ 783.616086][ T7057] ? __rwlock_init+0x140/0x140 [ 783.620827][ T7057] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 783.626698][ T7057] ? lockdep_hardirqs_on+0x94/0x140 [ 783.631873][ T7057] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 783.637755][ T7057] ocfs2_convert_inline_data_to_extents+0x1fc/0x1330 [ 783.644428][ T7057] ? ocfs2_set_inode_data_inline+0x2d0/0x2d0 [ 783.650388][ T7057] ? ocfs2_write_begin_nolock+0x388/0x4400 [ 783.656176][ T7057] ? do_page_mkwrite+0x168/0x3c0 [ 783.661093][ T7057] ? do_user_addr_fault+0x489/0xc80 [ 783.666274][ T7057] ? asm_exc_page_fault+0x22/0x30 [ 783.671278][ T7057] ? copy_user_enhanced_fast_string+0xe/0x40 [ 783.677242][ T7057] ? _copy_to_iter+0x318/0x1180 [ 783.682085][ T7057] ? __x64_sys_getrandom+0x1c2/0x2a0 [ 783.687353][ T7057] ? do_syscall_64+0x4c/0xa0 [ 783.691924][ T7057] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 783.697982][ T7057] ocfs2_write_begin_nolock+0x1915/0x4400 [ 783.703699][ T7057] ? ocfs2_size_fits_inline_data+0x90/0x90 [ 783.709482][ T7057] ? __lock_acquire+0x28ac/0x7d10 [ 783.714493][ T7057] ? ocfs2_read_inode_block+0x120/0x190 [ 783.720024][ T7057] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 783.725991][ T7057] ? _raw_spin_unlock_irq+0x1f/0x40 [ 783.731173][ T7057] ? rwsem_write_trylock+0x135/0x1c0 [ 783.736436][ T7057] ? clear_nonspinnable+0x60/0x60 [ 783.741436][ T7057] ? ocfs2_block_signals+0x97/0xe0 [ 783.746528][ T7057] ? ocfs2_free_mem_caches+0x50/0x50 [ 783.751789][ T7057] ? mark_lock+0x94/0x320 [ 783.756095][ T7057] ocfs2_page_mkwrite+0x5d6/0xb10 [ 783.761110][ T7057] ? recalc_sigpending+0x1a0/0x230 [ 783.766213][ T7057] ? do_page_mkwrite+0x168/0x3c0 [ 783.771133][ T7057] ? ocfs2_fault+0x3d0/0x3d0 [ 783.775703][ T7057] ? _raw_spin_unlock_irq+0x2a/0x40 [ 783.780968][ T7057] ? rcu_is_watching+0x11/0xa0 [ 783.785713][ T7057] ? ocfs2_fault+0x214/0x3d0 [ 783.790284][ T7057] ? ocfs2_mmap+0x250/0x250 [ 783.794765][ T7057] ? count_memcg_event_mm+0x324/0x370 [ 783.800117][ T7057] ? remove_device_exclusive_entry+0xa90/0xa90 [ 783.806260][ T7057] do_page_mkwrite+0x168/0x3c0 [ 783.811013][ T7057] handle_mm_fault+0x1d87/0x4410 [ 783.815935][ T7057] ? get_page+0xe0/0xe0 [ 783.820073][ T7057] ? vmacache_find+0x238/0x590 [ 783.824817][ T7057] ? find_vma+0xd2/0x230 [ 783.829040][ T7057] do_user_addr_fault+0x489/0xc80 [ 783.834058][ T7057] exc_page_fault+0x60/0x100 [ 783.838636][ T7057] ? __might_fault+0xb7/0x110 [ 783.843291][ T7057] asm_exc_page_fault+0x22/0x30 [ 783.848132][ T7057] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 783.854700][ T7057] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 783.874279][ T7057] RSP: 0018:ffffc90003917b38 EFLAGS: 00050246 [ 783.880324][ T7057] RAX: ffffffff83e17c01 RBX: 0000000000000040 RCX: 0000000000000040 [ 783.888274][ T7057] RDX: 0000000000000040 RSI: ffffc90003917d40 RDI: 0000200000000240 [ 783.896223][ T7057] RBP: ffffc90003917c90 R08: ffffc90003917d7f R09: 1ffff92000722faf [ 783.904188][ T7057] R10: dffffc0000000000 R11: fffff52000722fb0 R12: ffffc90003917d40 [ 783.912140][ T7057] R13: dffffc00000000ff R14: 0000200000000240 R15: 0000000000000000 [ 783.920093][ T7057] ? _copy_to_iter+0x291/0x1180 [ 783.924925][ T7057] _copy_to_iter+0x318/0x1180 [ 783.929581][ T7057] ? iov_iter_init+0x170/0x170 [ 783.934321][ T7057] ? chacha_block_generic+0x5b/0xd20 [ 783.939589][ T7057] get_random_bytes_user+0x1cc/0x3d0 [ 783.944857][ T7057] ? signal_pending+0xa0/0xa0 [ 783.949519][ T7057] ? memset+0x1e/0x40 [ 783.953480][ T7057] ? import_single_range+0x1aa/0x2a0 [ 783.958744][ T7057] __x64_sys_getrandom+0x1c2/0x2a0 [ 783.963834][ T7057] ? add_disk_randomness+0xd0/0xd0 [ 783.968922][ T7057] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 783.974880][ T7057] ? lock_chain_count+0x20/0x20 [ 783.979707][ T7057] ? vtime_user_exit+0x2c8/0x3e0 [ 783.984621][ T7057] ? lockdep_hardirqs_on+0x94/0x140 [ 783.989795][ T7057] do_syscall_64+0x4c/0xa0 [ 783.994187][ T7057] ? clear_bhb_loop+0x30/0x80 [ 783.998837][ T7057] ? clear_bhb_loop+0x30/0x80 [ 784.003490][ T7057] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 784.009359][ T7057] RIP: 0033:0x7f6f5bf44eb9 [ 784.013756][ T7057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.033339][ T7057] RSP: 002b:00007f6f5a1a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 784.041731][ T7057] RAX: ffffffffffffffda RBX: 00007f6f5c1bffa0 RCX: 00007f6f5bf44eb9 [ 784.049678][ T7057] RDX: 0000000000000004 RSI: 000000000000fce3 RDI: 0000200000000240 [ 784.057624][ T7057] RBP: 00007f6f5bfb2c1f R08: 0000000000000000 R09: 0000000000000000 [ 784.065571][ T7057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.073517][ T7057] R13: 00007f6f5c1c0038 R14: 00007f6f5c1bffa0 R15: 00007ffdb25a43b8 [ 784.081557][ T7057] [ 784.093191][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.101299][ T3755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.116869][ T7057] OCFS2: ERROR (device loop6): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 784.134355][ T7057] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 784.144159][ T7057] OCFS2: File system is now read-only. [ 784.149621][ T7057] (syz.6.13426,7057,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 784.158159][ T7057] (syz.6.13426,7057,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 784.166083][ T7057] (syz.6.13426,7057,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 784.174624][ T7057] (syz.6.13426,7057,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 784.183123][ T7057] (syz.6.13426,7057,0):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 784.191453][ T7057] (syz.6.13426,7057,0):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 784.199715][ T7057] (syz.6.13426,7057,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 784.208466][ T7057] (syz.6.13426,7057,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 784.217540][ T7057] (syz.6.13426,7057,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 784.226520][ T7057] (syz.6.13426,7057,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 784.235468][ T7057] (syz.6.13426,7057,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 784.244311][ T7057] (syz.6.13426,7057,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 784.253599][ T7057] (syz.6.13426,7057,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 784.262818][ T7057] (syz.6.13426,7057,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 784.272019][ T7057] (syz.6.13426,7057,0):ocfs2_convert_inline_data_to_extents:7073 ERROR: status = -30 [ 784.281488][ T7057] (syz.6.13426,7057,0):ocfs2_try_to_write_inline_data:1566 ERROR: status = -30 [ 784.290434][ T7057] (syz.6.13426,7057,0):ocfs2_write_begin_nolock:1678 ERROR: status = -30 [ 784.298838][ T7057] (syz.6.13426,7057,0):__ocfs2_page_mkwrite:97 ERROR: status = -30 [ 784.306833][ T7057] OCFS2: ERROR (device loop6): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 784.324206][ T7057] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 784.334034][ T7057] (syz.6.13426,7057,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 784.341941][ T7057] (syz.6.13426,7057,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 784.349943][ T7057] (syz.6.13426,7057,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 784.358779][ T7057] (syz.6.13426,7057,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 784.367296][ T7057] (syz.6.13426,7057,0):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 784.375535][ T7057] (syz.6.13426,7057,0):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 784.383777][ T7057] (syz.6.13426,7057,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 784.392537][ T7057] (syz.6.13426,7057,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 784.401296][ T7057] (syz.6.13426,7057,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 784.410301][ T7057] (syz.6.13426,7057,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 784.419210][ T7057] (syz.6.13426,7057,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 784.428072][ T7057] (syz.6.13426,7057,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 784.436913][ T7057] (syz.6.13426,7057,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 784.446112][ T7057] (syz.6.13426,7057,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 784.455291][ T7057] (syz.6.13426,7057,0):ocfs2_convert_inline_data_to_extents:7073 ERROR: status = -30 [ 784.465067][ T7057] (syz.6.13426,7057,0):ocfs2_try_to_write_inline_data:1566 ERROR: status = -30 [ 784.474011][ T7057] (syz.6.13426,7057,0):ocfs2_write_begin_nolock:1678 ERROR: status = -30 [ 784.482439][ T7057] (syz.6.13426,7057,0):__ocfs2_page_mkwrite:97 ERROR: status = -30 [ 784.518511][ T2298] ocfs2: Unmounting device (7,6) on (node local) [ 784.731308][ T7086] loop3: detected capacity change from 0 to 40427 [ 784.771884][ T7086] F2FS-fs (loop3): invalid crc value [ 784.781439][ T7086] F2FS-fs (loop3): Found nat_bits in checkpoint [ 784.816887][ T7086] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 784.843955][ T3361] attempt to access beyond end of device [ 784.843955][ T3361] loop3: rw=2049, want=45104, limit=40427 [ 785.132040][ T3755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.170195][ T3755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.139835][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.210075][ T3755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.261362][ T3755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.289910][ T3755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.169872][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.330291][ T3755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.379876][ T3755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.769681][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.420177][ T3755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog