last executing test programs: 21m55.128039454s ago: executing program 32 (id=115): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3800052, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000002180)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x40001) gettid() openat$tun(0xffffffffffffff9c, 0x0, 0x68801, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 20m56.545185352s ago: executing program 33 (id=353): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010004, &(0x7f00000000c0)={[{@nobh}, {@jqfmt_vfsv0}, {@data_err_ignore}]}, 0x3, 0x4f8, &(0x7f0000000140)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@rand_addr=0x64010102, @in=@remote, 0x4e24, 0x0, 0x4e23, 0x4, 0xa}, {0x0, 0x4, 0x0, 0x0, 0xfffffffbfffffffd, 0x9, 0x0, 0x8}, {0xcb29, 0x1000000000, 0x53e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x2, 0x3}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1502, 0x1, 0x2, 0x0, 0x5, 0xfffffffd, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 18m22.774933568s ago: executing program 6 (id=909): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x123180, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/slabinfo\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18e0ffffffffff14000000000000002018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) memfd_create(&(0x7f0000006a80)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nouid32}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$eJzs3M1vG0UbAPBn7Tht+pW8Vd9CP4AgQJQCSZOW0gMXEEgcQEKCQzmGJK1K0wY1QSJVBQGhckSVOHFBHJH4CzjBBcENiQsHuKNKFeqlhZPRZncT2zhpmjpepf79pHVndtedeTwz9uxO7AB61nD6kETsiojfI2IwyzafMJz9c/vmlcm/b16ZTKJef/OvpC89fOvmlcXi1OJ5O4tMX0Tl0yQOtSl3buHy+YmZmelLeX50/sJ7o3MLl589d2Hi7PTZ6Yvjp06dOD72/Mnx5zoSZxrXrYMfzh4+8Orb116fPH3tnZ+/TYr4szgmO1LQiuG1Dj5Rr3e4uHLtbkhnPYOtoJoN06gtjf/BqMZK4w3GK5+UWjlgU9Xr9fr+5Vyt9fBiHbiPJVF2DYByFB/06fVvsXVx+lG6Gy9mF0Bp3LfzLTvSF5X8nFrL9W0nDUfE6cV/vkq32Jz7EAAATb5P5z/PtJv/VWJ/w3l78jWUoYj4X0TsjYiTEbEvIv4fsXTuAxHx4F2W37pIkpU/0LCncn2jsa1HOv97IV/bap7/FbO/GKrmud1L8deSM+dmpo/lr8mRqG1L82NrlPHDy79+vtqxxvlfuqXlF3PBvB7X+7Y1P2dqYn7iXmJudOPjiIN97eJPllcCkog4EBEHN1jGuaPfHF7t2J3jX0MH1pnqX0c8mbX/YrTEX0jWXp8c3R4z08dGi17Rxi9X31it/HuKvwPS9t/Rtv8vxz+UNK7Xzt3N//7lU+nj1T8+W/WaZqP9vz95q2nfBxPz85fGIvqT17JKN+4fbzlvfOX8NP4jj7Uf/3tj5ZU4FBFpJ34oIh6OiEfyuj/62547vgo/vfT4uy27qivxD5Te/lPrb//6YETRERb6I08s72mfqJ7/8bumQodWko3tv2fV9j+xlDqS71nP+9966nW3vRkAAAC2qkpE7IqkMrKcrlRGRrK/4d8XOyozs3PzT5+Zff/iVPYdgaGoVYo7XYMN90PH8sv6Ij/ekj+e3zf+ojqwlB+ZnJ2ZKjt46HE7Vxn/qT+zu5Tbyq0hsKl8Xwt6l/EPvcv4h9713/G/vTlb6V5dgO5q8/k/UEY9gO5rHv/Zj4B8tJ4n7tqc+gDd0/L5Xy2rHkD3uf8HvWsj4997Btwf+tb6yeb+rlYF6J65gbjzl+QltlKiWK3djCJqaW85GhELl6NSeqQSm5go+50JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgM/4NAAD//55o4Oc=") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x5, 0x1000, 0x6, 0x200a8, 0x1, 0xb5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4, 0x4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@volatile={0x5, 0x0, 0x0, 0x9, 0x3}, @func={0xa, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x61, 0x30, 0x2e, 0x5f, 0x0]}}, &(0x7f0000000280)=""/173, 0x37, 0xad, 0x1, 0xf39}, 0x28) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@empty, 0x1, 0x0, 0xfc, 0xa, 0x7, 0x6}, 0x20) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001cc0)={0x1c, r3, 0x62c21a4ade68aba1, 0x70bd28, 0x0, {{0x32}, {@void, @val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b00000000001010400000000000000000a0000003c0001802c0001801400030000000000000000000000ffff0000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000001c000f"], 0xb0}}, 0x74800) 18m19.086710711s ago: executing program 4 (id=918): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 18m17.834657096s ago: executing program 4 (id=923): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0xf, 0x2a4, &(0x7f0000000480)="$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") r0 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) 18m16.794512066s ago: executing program 4 (id=928): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2f00020b, 0xf, 0x0, &(0x7f0000000580)="b98600000020c34af700000000008f", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18m16.390648574s ago: executing program 4 (id=930): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x68b, &(0x7f0000000800)="$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") mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00') 18m16.279207406s ago: executing program 6 (id=931): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3800052, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000002180)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x40001) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) pipe(&(0x7f0000000080)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42340, 0x0) 18m16.07851204s ago: executing program 4 (id=932): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/49, 0x2d) getdents64(r0, &(0x7f0000000440)=""/182, 0xb6) 18m15.486562322s ago: executing program 4 (id=934): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000680)={[{@debug}, {@stripe={'stripe', 0x3d, 0x61}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@test_dummy_encryption_v1}, {@nodiscard}, {@data_err_ignore}, {@acl}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x801, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x880e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x8, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x5, 0xb, 0x8, 0x8e, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18m15.455296513s ago: executing program 6 (id=935): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socket$nl_route(0x10, 0x3, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)) r5 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r5, 0x9208, 0x2) 18m15.013950211s ago: executing program 34 (id=934): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000680)={[{@debug}, {@stripe={'stripe', 0x3d, 0x61}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@test_dummy_encryption_v1}, {@nodiscard}, {@data_err_ignore}, {@acl}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x801, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x880e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x8, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x5, 0xb, 0x8, 0x8e, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18m14.868734904s ago: executing program 6 (id=937): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x40}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec"], 0xb0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x22) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 18m14.419239553s ago: executing program 35 (id=937): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x40}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec"], 0xb0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x22) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11m55.302613915s ago: executing program 7 (id=2383): socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 11m54.238650686s ago: executing program 7 (id=2392): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newsa={0x13c, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x4e20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x80, 0x5e}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@remote, {0x0, 0x0, 0x10001, 0x9, 0x3, 0x0, 0x4, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0xdf3f, 0xfffffffc}, 0x70bd2d, 0x0, 0xa, 0x4}, [@algo_crypt={0x4b, 0x2, {{'ecb(cipher_null)\x00'}, 0x18, "4f65b6"}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 11m53.361041143s ago: executing program 7 (id=2395): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xfffffffc}]}}]}, 0x3c}}, 0x800) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, 0x0, 0x0) lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x1) syz_usb_connect$uac1(0x6, 0xa4, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r4, &(0x7f0000001100)={&(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000300)="8db7", 0x2}], 0x1, &(0x7f0000000000)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@empty]}]}}}], 0x18}, 0x0) 11m52.450023501s ago: executing program 7 (id=2398): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x9, &(0x7f0000000300)={[{@dioread_nolock}, {@jqfmt_vfsv0}, {@abort}, {}, {@nojournal_checksum}, {@grpjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$eJzs3EtvG1UbAOB3xnV6/5qv3wV6AQIFEXFJmrRAF2xAIHWDhARIZRnStCpNG9QEiVYVTREqS9RfACyR+AWsYIOAFYgtSGyQEFKFuqGwGjT2TOpcHGzHjil+HsntOTNnfM47M8c+MyfjAAbWSP5PErErIr4fithTzy4vMFL/79bNy9O/37w8nUSWvfRrUiv3283L02XRcrudRWY0jUjfTeLAGvXOX7x0dmp2duZCkR9fOPfG+PzFS4+fOTd1eub0zPnJY8eOHpl46snJJ7oS5+68rfvfnju47/ir11+YPnH9ta8+yZfvKtY3xlE33PJ7b2+yfCRGlu/LBg9F/JRlWct1/N3tbkgnW/rYENpSiYj8cFXz/h97ohK3D96eeP6dvjYO6Kksy7Ktq5ZWysRiBvyDJdF0VbqpDQE2WflFn1//lq9NHH703Y1n6hdAedy3ild9zZZIizLVFde33TQSEScW//ggf8Wa9yEAALrrs3z889ha4780/t9Q7l9Rnxsajoh/R8TeiPhPRPw3Iv4XUSt7V0Tc3Wb9Iyvyq8c/3zabXumKfPz3dDG3dXv8N1SLvzBcKXK7a/FXk1NnZmcOF/tkNKpb8/zEOnV8/tx37y9lti1f1zj+y195/eVYsC79ZcuKG3QnpxamuhB6zY2rS4GuGP8mSzMBSUTsi4j9Hbx/vs/OPPLxwWbr/zr+dXRhnin7KOLh+vFfjBXxl5L15yfHt8XszOHx8qxY7etvrr3YrP4Nxd8FN65G7Fh1/kdj/MNJ43ztfPt1XPvhvabXNJ2e/0PJy7X0ULHsramFhQsTEUPJ4urlk7e3LfNl+Tz+0UNrxZ/W3uPDYrsDEZGfxPdExL0RcV/R9vsj4oGIOLRO/F8+++DrncffW3n8J9s6/u0nKme/+LRZ/a0d/6O11GixpJXPv1YbuJF9BwAAAHeKtPY38Ek6tpRO07GxiFdq93Z3pLNz8wuPnpp78/zJ+t/KD0c1Le90pQ33QyeKe8NlfnJF/kjtvnGWZdn2Wn5sem62V3PqQGt2Nun/uZ8r/W4d0HNtzaM1e6INuCO11f9XPy0E3ME8rw2Dq9X+X+1xO4DN5/sfBtda/f9KxK0+NAXYZL7/YXDp/zC49H8YXPo/DKSNPNe/XmLv8Y43zzZUe/n7Kh1u/mNP9sZ6iUqnm29t42cOepCIdM1V1YjoS3vaSqS9qyI/+drbKj+QrRa+0umJ3XZi2cfEUD8+mwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrhzwAAAP//dNfhIw==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x31486c, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f0000000000)='.\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 11m51.148697647s ago: executing program 7 (id=2402): clock_adjtime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r1 = shmget$private(0x0, 0x13000, 0x200, &(0x7f0000feb000/0x13000)=nil) r2 = shmat(r1, &(0x7f0000fec000/0x4000)=nil, 0x600c) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40082) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f00000000c0)={0xfffffff7, 0x6, 0xfffffffe}) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) shmdt(r2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0xac, 0x2, 0xf, 0xb}, {0x6, 0x6, 0xf, 0x5}]}) 11m50.542028469s ago: executing program 7 (id=2404): syz_emit_vhci(&(0x7f0000000380)=ANY=[], 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) msgrcv(0x0, 0x0, 0xffffffd4, 0x3, 0x1000) msgsnd(0x0, &(0x7f00000008c0)={0x3}, 0x8, 0x800) 11m49.089334628s ago: executing program 36 (id=2404): syz_emit_vhci(&(0x7f0000000380)=ANY=[], 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) msgrcv(0x0, 0x0, 0xffffffd4, 0x3, 0x1000) msgsnd(0x0, &(0x7f00000008c0)={0x3}, 0x8, 0x800) 6m51.009817014s ago: executing program 1 (id=2934): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x13, 0x1, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x5, 0x6}, {0xfffffff9, 0x4004, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0x2, 0x0, 0x4}]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000002400)={[{0x3, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0x2, 0x1, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0xfffffffe}) 6m49.526069513s ago: executing program 1 (id=2936): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) 6m48.512475753s ago: executing program 1 (id=2938): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) poll(0x0, 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x110) 6m47.486135314s ago: executing program 1 (id=2940): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x4056, &(0x7f0000000280), 0x1, 0x464, &(0x7f0000000740)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x80) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@nombcache}, {@oldalloc}, {@norecovery}, {@i_version}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@inlinecrypt}]}, 0x1, 0x445, &(0x7f00000004c0)="$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") r1 = creat(&(0x7f0000000340)='./bus\x00', 0x1c7) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x41800, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x84) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000003, 0x28011, r2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[@ANYRES16=r2], 0x78) lseek(r0, 0x1, 0x4) 6m44.644552169s ago: executing program 1 (id=2947): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3a, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x8800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nouid32}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$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") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x5, 0x1000, 0x6, 0x200a8, 0x1, 0xb5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4, 0x4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@volatile={0x5, 0x0, 0x0, 0x9, 0x3}, @func={0xa, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x61, 0x30, 0x2e, 0x5f, 0x0]}}, 0x0, 0x37, 0x0, 0x1, 0xf39}, 0x28) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@empty, 0x1, 0x0, 0xfc, 0xa, 0x7, 0x6}, 0x20) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001cc0)={0x1c, r4, 0x62c21a4ade68aba1, 0x70bd28, 0x0, {{0x32}, {@void, @val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b00000000001010400000000000000000a0000003c0001802c0001801400030000000000000000000000ffff0000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000001c000f"], 0xb0}}, 0x74800) 6m43.982523493s ago: executing program 1 (id=2949): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x123180, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18e0ffffffffff1400000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_create(0x0, 0x1) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0xf73, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b50a0000000000006111500000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) 6m41.543244511s ago: executing program 37 (id=2949): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x123180, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18e0ffffffffff1400000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_create(0x0, 0x1) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0xf73, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b50a0000000000006111500000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) 6m39.801899605s ago: executing program 9 (id=2954): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) io_setup(0x81, &(0x7f0000001440)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr$security_evm(r0, 0x0, &(0x7f0000000580)=@v1={0x2, "33312754f8309c"}, 0x8, 0x2) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000040000000400000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x4, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x800, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 6m34.094970858s ago: executing program 9 (id=2962): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0xb, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}, @sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x1, @private=0xa010101}}, @sadb_x_nat_t_type={0x1, 0x14, 0x1}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0xff, 0x3, 0x2, 0x20000001}]}, 0x58}, 0x1, 0x7}, 0x20040800) 6m32.254260344s ago: executing program 9 (id=2964): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nls={'nls', 0x3d, 'cp437'}}]}, 0x1, 0x5d4, &(0x7f0000001980)="$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") getdents(0xffffffffffffffff, 0x0, 0x0) mknod$loop(0x0, 0x6000, 0x1) r0 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) io_setup(0x20, &(0x7f0000001140)) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 6m26.185799464s ago: executing program 9 (id=2975): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x4056, &(0x7f0000000280), 0x1, 0x464, &(0x7f0000000740)="$eJzs201sFFUcAPD/TD+UL1sJfgFKFY3Ej5YWRA5eNJp40MRED3isbSGVhRpaEyFE0Rg8GhLvxoMHE04ePenFqCejV/VsSIjhAnpaM7sz7HbZLdtN2126v18y8N7M27733zdv9828nQD61lj2TxKxPSL+iIiRanZ5gbHqfzeunZ/599r5mSTK5Tf/SSrlrl87P1MULV63rcgMRqSfJrGnSb2LZ8+dnC6V5s7k+YmlU+9NLJ499+z8qekTcyfmTk8dPXr40OTzR6aeW5M4s7iu7/5wYe9Dr7596fWZY5fe+flyUsTfEEc7Bm5fZGylg0+Uy6upruftqEsng11sCKsyUB2mMVQZ/yMxELXOG4lXPulq44B1VS6Xy/e3Pny5UgDYpBJDHPpU8UWfXf8W2wZNPXrC1RerF0BZ3DfyrXpkMNK8zFDD9e1aGouIYxf++zLbovE+xJZ1qhQA6GvfZ/OfZ5rN/9Kovy90T76GMhoR90bEzog4EhG7IuK+iErZByLiwVXW37hIcuv8M73SUWBtyuZ/L+RrW8vnf8XsL0YH8tyOSvxDyfH50tzB7D35bV+1xHxpbnKFOn54+ffPWx2rn/9lW1Z/MRfM23Fl8K7lr5mdXpruOOAGVz+O2D3YLP7k5kpAEhHDEbG7wzrmn/pmb6tjLeIfbusPr8E6U/mriCer/X8h8vi/rRyprYImK69PTtwdpbmDE8VZcatffr34Rqv6b9//6yvr/61Nz/8i/r9Gk/r12sXq3q9XcQZe/POzlteUnZ7/w8lby/Z9ML20dGYyYjh5rZIfrd8/1VBuqlY+i//A/ubjf2fU3ok9EZGdxA9HxCMRsS9v+6NRTh6LiP0rxP/TS4+/23n86yuLf3bF/o+G/q8lhqNxT/PEwMkfv1tW6ehq4s/6/3AldSDf087nXzvtqp3NAAAAsLmlEbE9knT8ZjpNx8erv+HfFVvT0sLi0tPHF94/PVt9RmA0htLiTtdI3f3QyfyyvshP5b8tLvKH8vvGXwxsqeTHZxZKs90OHvrcthbjP/N3Gw+5AHe4xnW0rV1qB7DxPK8J/cv4h/5l/EP/ajL+PXoGfaLZ9/9HXWgHsPEaxn/zZb+8kIkBbC6u/6F/Gf/Qv4x/6EuLW+L2D8nfiYnhW/akEdEDDdssiUh7ohk9nkiSnmhGB4lufzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsjf8DAAD//wuY5j8=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x80) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@nombcache}, {@oldalloc}, {@norecovery}, {@i_version}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@inlinecrypt}]}, 0x1, 0x445, &(0x7f00000004c0)="$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") r1 = creat(&(0x7f0000000340)='./bus\x00', 0x1c7) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x41800, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x84) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000003, 0x28011, r2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[@ANYRES16=r2], 0x78) lseek(r0, 0x1, 0x4) 6m22.690338753s ago: executing program 9 (id=2979): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f0000000500)={[{@utf8}, {@overriderock, 0x0}, {@utf8}, {@overriderock}, {@map_off}, {@map_normal, 0x41}, {@session={'session', 0x3d, 0x37}}, {@unhide}, {@unhide}, {@overriderock}, {@map_off}, {@map_normal}, {}]}, 0x2, 0x6b1, &(0x7f0000001100)="$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") socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 6m11.302665968s ago: executing program 9 (id=2996): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x4, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) ioctl$UI_DEV_CREATE(r0, 0x5501) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 6m9.906359856s ago: executing program 38 (id=2996): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x4, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) ioctl$UI_DEV_CREATE(r0, 0x5501) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 29.286300201s ago: executing program 5 (id=3714): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nls={'nls', 0x3d, 'cp437'}}]}, 0x1, 0x5d4, &(0x7f0000001980)="$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") r0 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) io_setup(0x20, &(0x7f0000001140)) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 25.282858s ago: executing program 5 (id=3722): syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) 22.232906131s ago: executing program 5 (id=3728): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x10000, &(0x7f00000003c0)=ANY=[], 0x3, 0x189, &(0x7f0000000200)="$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") socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) bind$alg(r1, &(0x7f0000001280)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) 21.25067936s ago: executing program 2 (id=3731): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2000000000000216, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 19.276288339s ago: executing program 2 (id=3733): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nls={'nls', 0x3d, 'cp437'}}]}, 0x1, 0x5d4, &(0x7f0000001980)="$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") r0 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) io_setup(0x20, &(0x7f0000001140)) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 17.642623401s ago: executing program 5 (id=3735): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 12.081448121s ago: executing program 0 (id=3745): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x10000, &(0x7f00000003c0)=ANY=[], 0x3, 0x189, &(0x7f0000000200)="$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") socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) bind$alg(r1, &(0x7f0000001280)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) 12.010426592s ago: executing program 8 (id=3746): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1a0a840, &(0x7f0000000100), 0x1, 0x5a8, &(0x7f0000000e40)="$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") chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000a00)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz1\x00', 0x4b}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x35, {0x9, 0x0, 0x2040000, 0x3, 0xfffffffd, 0xfffffffe}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4000065}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r2, 0x5) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/74, 0x4a}], 0x2d}, 0x10000) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', 0x0, &(0x7f00000001c0)={{}, {}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[], 0x20}}, 0x800) recvmmsg(r5, &(0x7f0000000780), 0x0, 0x40012100, 0x0) 11.991571503s ago: executing program 3 (id=3747): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 11.701460409s ago: executing program 3 (id=3748): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000240)="ce010000009a697f65360c5e88a8", 0x0, 0x1fe7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.062697191s ago: executing program 3 (id=3749): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 9.843054155s ago: executing program 5 (id=3750): sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, 0x0) 9.60169559s ago: executing program 8 (id=3751): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) io_setup(0x81, &(0x7f0000001440)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr$security_evm(r0, 0x0, &(0x7f0000000580)=@v1={0x2, "33312754f8309c"}, 0x8, 0x2) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x4, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x800, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 9.512870252s ago: executing program 2 (id=3752): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='qdisc_destroy\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) 9.308161106s ago: executing program 5 (id=3753): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) poll(0x0, 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x110) 8.310630865s ago: executing program 0 (id=3754): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f0000000500)={[{@utf8}, {@overriderock, 0x0}, {@utf8}, {@overriderock}, {@map_off}, {@map_normal, 0x41}, {@session={'session', 0x3d, 0x37}}, {@unhide}, {@unhide}, {@overriderock}, {@map_off}, {@map_normal}, {}]}, 0x2, 0x6b1, &(0x7f0000001100)="$eJzs3V1vG1kdx/HfOI7jZqFaAaqqqg+nLSulorhjZ5sqKhJrxuNkwPZYMw5qJKRV2Sarqk4X2iLR3Cy54UFa3gDihgu44EUgcb3vghsE0grukJYLr+bJseOnuuu2u9vvJ9r1eM5/zvnPjOu/JvEcCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyHJqtl221PBaO3fMZE4t8Jvp8v97o+1Jb8u6lixcmzmuZEX/qVjU2WTV2W8dN5+J/ndF55Nn51WMHoo6fOPMm7e/mc9l209J+Hlo3g4fPz18cLfb3Xv0DLFLmrv7V0m5bOlUek7GBG25LS/0vWZ1yzVe6JvNjQ37xnY9NHWv4Ya7YcdtGidwcx0/MGvONVPe3Fw3bmnX32lt1aoNN1t567sV294wP1xJTrSkUuhse42G19qKY6LmKOaW+egnSYBbbRqzf7+7tz5rT6Kg8rMEVWYFVexKpVyuVMobNzdv3rLt/OCKnKS8HbHsPo1ssvAXLb5kFvPGDSxALqr//7CkhopqaUd3ZMb+OKopkK/mhPZUVv/fuuFOHXew/mdV/qz0/bT5nOL6fzF5dnFS/Z+Qi5GJNxjXYk1YP9/PcpyR0WM91aEe6K666mpPjxbQt5G5tJBeXsLPlly15CmUL09NVbWlP39d6RqjTW1oQ7be1bbqCmVUl6eGXIXaVaiO3PgV5SiQq6o68hXIaE2OrsmorE1tal1Grkrala8dtbSlmqr6X6/X29f9+LivT8lRWVB5QsDKYFBlSk/DxfyPyur/Tz9MXqd23j6B+v96SV4HK8nDx9NigC+AXnr9Pyg3e7NLLy4jAAAAAACwaFb823cr/tv9BUk91b2Ga7/qtAAAAAAAwAJZ6q3ovKzo+l/SBVlc/wMAAAAA8FVjxffYWZJW4w/1W8d3Qj3LLwGWXkKKAAAAAADgc4rv/L9YkHrxpBWXZM11/Q8AAAAAAL4Efjswx34+m2O3l/1ZPycpbK9Yf/vPioJl66h959vWQTVqqR6kMZ+e7LFTP2edTifqjR8KkuJnjnveOp9MjplOgtmfd/CT/Vlz/VvBiQQKS4MdTEjAikbeyKfP9JEuJ5tcTueZv3eYU9ySjLJa9xpuyfEbt8uqVk/nOu6dzi8e3v+lFPQ/6bB/v7tXeu+D7r04l6No1dFB1OmHQ+nkxh+M41yexPMtxPdcjNvjU6pnQ/6u1Vy14nHtbP+XVD3IDQ407QQcj/lrXVH8qY0rq0ns6mF/xv1o/4vR/pdL8Skb2vtg2TrOonxyz8ediAlZFOMsriYxV9euqvLPZLl/FnJW8TtLUqU0eg6GsqgMZjH7WFj/HTkWA1nED1nLwLFYj7L4e9TRhCzW58ti5IwAwKuyrwuK34UuKJ7EvF+FimndzcpD9qb2XHVndnV/Z7i6P/lDrxdvsCTl079NTB2lqOgdfc2K61Ah2aX8uTHv6HZaV4qa8I5uf47qFo311+PvQErTHsni016vd7scj/v7E1X1T0PDjYwbNipL0SG88eTgZ/EE+JH3997fe1iprG/Yb9v2zYqW491IH5ZE7QEAjJj9HTszI6y3dTmJuHzv328lS0MV7xv9jxSU9J4+UFf3dD37CoFL43tdHfgYwvXkqlUDV63mzJu34++lG44t6/rEq7q4lg7EVvqxy8o2Ga7Ux7HrL/gsAADwcl2ZUYfH1//iUP2/rrUkYu3c2Ovu4VqeXh33L+knxZZnJ//Ooo8GAACvBzf4xFrt/MYKAq/9bnlzs1ztbLsm8J0fmcCrbbnGa3XcwNmutrZc0w78ju/4DdMOtOLV3NCEO+22H3RM3Q9M2w+9O/E3v5v0q99Dt1ltdTwnbDfcaugax291qk7H1LzQMe2dHzS8cNsN4o3Dtut4dc+pdjy/ZUJ/J3DckjGh6w4EejW31fHqXrTYMu3Aa1aDXfNjv7HTdE3NDZ3Aa3f8pMNsLK9V94Nm3G0p3xv3eQEAAF47j58ePrjb7e49OrlwKro0T9YcaULM6EJBj59GV+XRmnzaxBxBAAB8wRwX8Dk2Kr7AhAAAAAAAAAAAAAAAAAAAAAAAwIjZt/TNubA87mZBqb/m56fTNfqVjm8xHOnH0qITm2chN+9W2S0Rhw8+nhRT0N1T/TXZ4R+MOXppO/ivr0lvxGuUrMkvfqxTU07ui1j43n5yRCfGRI1jm1b65yL/HP8cCpoZ8/AvE5p6vV5v+hArw8ewMLSDuWmD5iU9Ksx9CgojL1EAX1WfBQAA//843TOC") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000003c0)={[{@namecase}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0x8c1}}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@errors_continue}, {@keep_last_dots}, {@errors_remount}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@namecase}]}, 0x1, 0x1531, &(0x7f0000001f80)="$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") socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 8.211994308s ago: executing program 8 (id=3755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 7.050985191s ago: executing program 2 (id=3756): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.915682093s ago: executing program 8 (id=3757): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) 6.597285059s ago: executing program 3 (id=3758): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 6.374570214s ago: executing program 2 (id=3759): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000240)="ce010000009a697f65360c5e88a8", 0x0, 0x1fe7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.311506475s ago: executing program 3 (id=3760): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x20000000000000b9, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d00"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="6a0d18e6d1920de573"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000038424a08000000ff0000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="00008cff07887e7cf83500000000000045"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) 6.292958986s ago: executing program 8 (id=3761): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_getevents(0x0, 0xc, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x1004000, &(0x7f0000000540)={[{@lastblock={'lastblock', 0x3d, 0xffffffffffffff7f}}, {@fileset={'fileset', 0x3d, 0x1}}, {@noadinicb}, {@longad}, {@unhide}, {@uid_forget}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@dmode={'dmode', 0x3d, 0x2}}, {@dmode={'dmode', 0x3d, 0xffffffff80000001}}, {@nostrict}, {@session}, {@partition={'partition', 0x3d, 0x6}}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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") bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, 0x0, 0x25, 0x0, @val=@iter={&(0x7f0000000480)=@cgroup={0x3}, 0x10}}, 0x20) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x2) getdents(0xffffffffffffffff, 0x0, 0x54) 4.718500586s ago: executing program 2 (id=3762): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nls={'nls', 0x3d, 'cp437'}}]}, 0x1, 0x5d4, &(0x7f0000001980)="$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") r0 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) io_setup(0x20, &(0x7f0000001140)) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 3.04966319s ago: executing program 8 (id=3763): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x4, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x61, 0x0, 0x61, 0x2e, 0x71]}}, &(0x7f0000000300)=""/223, 0x2b, 0xdf, 0x1}, 0x28) 2.858322153s ago: executing program 3 (id=3764): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x10000, &(0x7f00000003c0)=ANY=[], 0x3, 0x189, &(0x7f0000000200)="$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") socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) bind$alg(r1, &(0x7f0000001280)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) 2.563318939s ago: executing program 0 (id=3765): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fff6) io_setup(0x81, &(0x7f0000001440)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f0000000580)=@v1={0x2, "33312754f8309c"}, 0x8, 0x2) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x4, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x800, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 2.120416058s ago: executing program 0 (id=3766): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x17, 0x87, 0x80000000, 0x871, 0x20000, 0xffffffffffffffff, 0x3}, 0x50) 1.782591844s ago: executing program 0 (id=3767): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r2], 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 0s ago: executing program 0 (id=3768): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000001500)=ANY=[@ANYBLOB="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"/3400], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000004c0), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='timer_start\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) kernel console output (not intermixed with test programs): 419][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 867.741090][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 867.965627][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 868.132632][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 868.159660][T14104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.280770][T14104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.326382][T14104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.351707][T14104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.480168][T14104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.521652][T14104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.546573][T14104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.557692][T14104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.569700][T14104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 868.586584][T14104] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.595547][T14104] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.605888][T14104] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.983484][T14104] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.272508][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 869.326514][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 869.637768][T14534] loop1: detected capacity change from 0 to 512 [ 869.746344][T14534] EXT4-fs (loop1): Test dummy encryption mode enabled [ 869.792616][T14534] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.2687: inline data xattr refers to an external xattr inode [ 869.876310][T14534] EXT4-fs (loop1): Remounting filesystem read-only [ 869.967123][T14534] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.2687: couldn't read orphan inode 12 (err -117) [ 870.055254][T14534] EXT4-fs (loop1): Remounting filesystem read-only [ 870.062857][T14534] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 870.096194][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.102647][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.153336][ T5028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.199066][ T5028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.284176][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 870.319276][ T5024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.343922][ T5024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.360026][T13786] EXT4-fs (loop1): unmounting filesystem. [ 870.372661][T14542] loop0: detected capacity change from 0 to 1024 [ 870.431710][ T26] audit: type=1326 audit(1759049069.342:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14544 comm="syz.8.2690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcf38eec9 code=0x7ffc0000 [ 870.461516][ T5024] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 870.525787][T14547] binder: BINDER_SET_CONTEXT_MGR already set [ 870.569089][ T26] audit: type=1326 audit(1759049069.412:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14544 comm="syz.8.2690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f1bcf38eec9 code=0x7ffc0000 [ 870.602208][T14547] binder: 14543:14547 ioctl 4018620d 200000004a80 returned -16 [ 870.652425][ T26] audit: type=1326 audit(1759049069.412:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14544 comm="syz.8.2690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcf38eec9 code=0x7ffc0000 [ 870.792685][ T26] audit: type=1800 audit(1759049069.452:240): pid=14542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2681" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 872.039472][T14570] loop0: detected capacity change from 0 to 1024 [ 873.121217][T14549] loop1: detected capacity change from 0 to 512 [ 873.260973][T14549] journal_path: Lookup failure for './file1/file2' [ 873.372739][T14549] EXT4-fs: error: could not find journal device path [ 880.040539][T14623] loop1: detected capacity change from 0 to 1024 [ 880.157739][T14412] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 880.202024][T14623] input: syz1 as /devices/virtual/input/input16 [ 880.642912][T14614] loop0: detected capacity change from 0 to 512 [ 880.654353][T14614] journal_path: Lookup failure for './file0/../file0' [ 880.661313][T14614] EXT4-fs: error: could not find journal device path [ 881.389709][T14315] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 883.615852][T14659] loop1: detected capacity change from 0 to 164 [ 883.702418][T14659] Unable to read rock-ridge attributes [ 885.411526][T14659] Unable to read rock-ridge attributes [ 885.493062][T14667] Unable to read rock-ridge attributes [ 885.503359][T14659] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 887.857575][T14680] loop1: detected capacity change from 0 to 1024 [ 887.961128][T14677] loop9: detected capacity change from 0 to 8192 [ 887.986560][ T26] audit: type=1800 audit(1759049086.912:241): pid=14680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2720" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 888.212824][T14677] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 889.297673][T14689] loop1: detected capacity change from 0 to 1024 [ 890.790360][T14689] EXT4-fs: Ignoring removed orlov option [ 890.960544][T14689] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 891.636300][T13786] EXT4-fs (loop1): unmounting filesystem. [ 893.109015][T14723] loop1: detected capacity change from 0 to 1024 [ 893.647478][T14729] loop1: detected capacity change from 0 to 1024 [ 893.765157][T14729] hfsplus: request for non-existent node 16777216 in B*Tree [ 893.833603][T14729] hfsplus: request for non-existent node 16777216 in B*Tree [ 893.960614][T14729] hfsplus: request for non-existent node 16777216 in B*Tree [ 894.001844][T14729] hfsplus: request for non-existent node 16777216 in B*Tree [ 894.199384][ T5019] hfsplus: request for non-existent node 16777216 in B*Tree [ 894.238426][ T5019] hfsplus: request for non-existent node 16777216 in B*Tree [ 895.744374][T14749] loop9: detected capacity change from 0 to 512 [ 895.755466][T14749] journal_path: Lookup failure for './file0/../file0' [ 895.762509][T14749] EXT4-fs: error: could not find journal device path [ 897.876435][ T4284] Bluetooth: hci3: command 0x0406 tx timeout [ 898.220468][T14761] loop0: detected capacity change from 0 to 1024 [ 898.280708][T14761] EXT4-fs: Ignoring removed orlov option [ 898.444038][T14761] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 898.611721][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 898.858858][T14777] loop0: detected capacity change from 0 to 2048 [ 898.922718][T14777] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 899.111599][T14783] loop9: detected capacity change from 0 to 164 [ 899.231461][T14783] Unable to read rock-ridge attributes [ 899.383274][T14783] Unable to read rock-ridge attributes [ 899.744218][ T4267] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 899.863372][ T4267] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 901.269050][T14806] loop1: detected capacity change from 0 to 8 [ 901.320470][T14794] fido_id[14794]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 902.835932][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 902.868924][T14806] SQUASHFS error: Unable to read inode 0x11f [ 903.059505][T14817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2751'. [ 905.748046][T14836] loop9: detected capacity change from 0 to 164 [ 905.874111][T14838] ipt_REJECT: ECHOREPLY no longer supported. [ 906.034736][T14836] Unable to read rock-ridge attributes [ 906.325109][T14836] Unable to read rock-ridge attributes [ 906.459486][T14847] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2759'. [ 911.062184][T14865] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2764'. [ 911.345779][T14870] loop0: detected capacity change from 0 to 128 [ 911.389088][T14870] EXT4-fs (loop0): Test dummy encryption mode enabled [ 911.470072][T14870] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 911.535201][T14870] ext4 filesystem being mounted at /464/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 912.180846][T14870] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 912.209235][T14888] loop9: detected capacity change from 0 to 512 [ 912.351012][T14888] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 913.074533][T14888] EXT4-fs (loop9): 1 truncate cleaned up [ 913.080267][T14888] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 913.173690][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 913.192347][T14888] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.2770: bg 0: block 256: padding at end of block bitmap is not set [ 913.409296][T14888] EXT4-fs (loop9): Remounting filesystem read-only [ 913.521543][T13241] EXT4-fs (loop9): unmounting filesystem. [ 918.472056][T14915] loop1: detected capacity change from 0 to 1024 [ 922.692922][T14936] loop0: detected capacity change from 0 to 8 [ 922.720686][T14936] SQUASHFS error: lzo decompression failed, data probably corrupt [ 922.742110][T14936] SQUASHFS error: Failed to read block 0x91: -5 [ 922.748445][T14936] SQUASHFS error: Unable to read metadata cache entry [8f] [ 922.808841][T14936] SQUASHFS error: Unable to read inode 0x11f [ 925.444032][T14954] loop0: detected capacity change from 0 to 8 [ 925.494616][T14954] SQUASHFS error: Unknown inode type 257 in squashfs_iget! [ 932.024597][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.030990][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.384417][T15000] xt_time: unknown flags 0xc [ 934.770517][T15007] loop0: detected capacity change from 0 to 128 [ 934.912053][T15007] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 934.931826][T15007] FAT-fs (loop0): Filesystem has been set read-only [ 934.942550][T15007] syz.0.2805: attempt to access beyond end of device [ 934.942550][T15007] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 934.981906][T15007] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 935.001857][T15007] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 935.053960][T15007] syz.0.2805: attempt to access beyond end of device [ 935.053960][T15007] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 935.092108][T15007] syz.0.2805: attempt to access beyond end of device [ 935.092108][T15007] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 935.105697][T15007] syz.0.2805: attempt to access beyond end of device [ 935.105697][T15007] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 935.119540][T15007] syz.0.2805: attempt to access beyond end of device [ 935.119540][T15007] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 935.135788][T15007] syz.0.2805: attempt to access beyond end of device [ 935.135788][T15007] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 935.151412][T15007] syz.0.2805: attempt to access beyond end of device [ 935.151412][T15007] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 935.165331][T15007] syz.0.2805: attempt to access beyond end of device [ 935.165331][T15007] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 935.179024][T15007] syz.0.2805: attempt to access beyond end of device [ 935.179024][T15007] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 935.192756][T15007] syz.0.2805: attempt to access beyond end of device [ 935.192756][T15007] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 935.413591][ T26] audit: type=1800 audit(1759050669.814:242): pid=15007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2805" name="file2" dev="loop0" ino=1048820 res=0 errno=0 [ 935.789850][T15013] loop0: detected capacity change from 0 to 1024 [ 935.905120][T15013] hfsplus: found bad thread record in catalog [ 936.622577][ T5024] hfsplus: b-tree write err: -5, ino 4 [ 938.292500][T15033] loop0: detected capacity change from 0 to 1024 [ 940.282064][T15037] loop1: detected capacity change from 0 to 2048 [ 940.390860][T15037] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 940.440635][T15037] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 942.139632][ T7] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 942.371164][ T7] usb 10-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 942.396042][ T7] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.409780][ T7] usb 10-1: Product: syz [ 942.417571][ T7] usb 10-1: Manufacturer: syz [ 942.437405][ T7] usb 10-1: SerialNumber: syz [ 942.454964][ T7] usb 10-1: config 0 descriptor?? [ 942.488015][ T7] ch341 10-1:0.0: ch341-uart converter detected [ 944.513791][ T7] usb 10-1: failed to send control message: -110 [ 944.520249][ T7] ch341-uart: probe of ttyUSB0 failed with error -110 [ 945.239621][ T4793] usb 10-1: USB disconnect, device number 3 [ 945.264609][ T4793] ch341 10-1:0.0: device disconnected [ 945.520798][T15068] loop1: detected capacity change from 0 to 1024 [ 946.592190][T15078] ipt_REJECT: ECHOREPLY no longer supported. [ 947.457252][T15085] loop9: detected capacity change from 0 to 2048 [ 948.333800][T15085] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found! [ 948.346744][T15085] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 951.513139][T15099] loop9: detected capacity change from 0 to 512 [ 952.102312][ T4705] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 952.292041][ T4705] usb 10-1: device descriptor read/64, error -71 [ 952.946606][T15050] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 952.991893][ T4705] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 953.006959][T15109] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 953.044021][T15109] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 953.161903][ T4705] usb 10-1: device descriptor read/64, error -71 [ 953.241847][T15050] usb 1-1: Using ep0 maxpacket: 16 [ 953.249506][T15050] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 953.259370][T15109] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 953.268386][T15109] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 955.106960][ T26] audit: type=1326 audit(1759050688.474:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15110 comm="syz.8.2830" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bcf38eec9 code=0x0 [ 955.120561][ T4705] usb usb10-port1: attempt power cycle [ 955.170259][T15109] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 955.172532][T15050] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 955.180190][T15109] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 955.241141][T15050] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 955.300343][T15050] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 955.330521][T15050] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.407906][T15050] usb 1-1: config 0 descriptor?? [ 955.436925][T15050] usb 1-1: can't set config #0, error -71 [ 955.464544][T15126] loop0: detected capacity change from 0 to 1024 [ 956.962654][T15050] usb 1-1: USB disconnect, device number 22 [ 957.042027][ T4705] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 957.104102][ T4705] usb 10-1: device descriptor read/8, error -71 [ 959.159887][ T26] audit: type=1326 audit(1759050693.434:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15146 comm="syz.0.2843" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c8db8eec9 code=0x0 [ 960.818425][T15158] ipt_REJECT: ECHOREPLY no longer supported. [ 962.139718][T15171] loop9: detected capacity change from 0 to 512 [ 962.206692][T15171] EXT4-fs: Ignoring removed orlov option [ 962.239832][T15171] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2195: inode #15: comm syz.9.2850: corrupted in-inode xattr [ 962.382499][T15171] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.2850: couldn't read orphan inode 15 (err -117) [ 962.466183][T15171] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 962.798186][T13241] EXT4-fs (loop9): unmounting filesystem. [ 963.008167][T15184] loop9: detected capacity change from 0 to 1024 [ 967.721707][T15215] ipt_REJECT: ECHOREPLY no longer supported. [ 967.834772][T15217] loop9: detected capacity change from 0 to 1024 [ 967.909182][T15220] loop1: detected capacity change from 0 to 512 [ 967.939058][T14412] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 967.956852][T15217] input: syz1 as /devices/virtual/input/input17 [ 968.031573][T15220] EXT4-fs: Ignoring removed orlov option [ 968.168938][T15220] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.2862: corrupted in-inode xattr [ 969.833444][T15220] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.2862: couldn't read orphan inode 15 (err -117) [ 969.876867][T15220] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 970.290081][T13786] EXT4-fs (loop1): unmounting filesystem. [ 970.427862][T15234] loop9: detected capacity change from 0 to 8 [ 970.478682][T15234] SQUASHFS error: Unable to read inode 0x11f [ 974.794586][T15246] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 976.406826][T15254] Bluetooth: MGMT ver 1.22 [ 976.990094][T15264] ipt_REJECT: ECHOREPLY no longer supported. [ 977.288716][T15266] loop9: detected capacity change from 0 to 512 [ 977.304688][T15266] journal_path: Lookup failure for './file0/../file0' [ 977.311946][T15266] EXT4-fs: error: could not find journal device path [ 977.857689][T15273] loop9: detected capacity change from 0 to 512 [ 977.895056][T15277] loop1: detected capacity change from 0 to 1024 [ 977.905190][T15273] EXT4-fs: Ignoring removed orlov option [ 979.879868][T15273] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2195: inode #15: comm syz.9.2875: corrupted in-inode xattr [ 979.956235][T15273] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.2875: couldn't read orphan inode 15 (err -117) [ 980.176886][T15273] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 981.935079][T13241] EXT4-fs (loop9): unmounting filesystem. [ 982.202195][ T5012] hfsplus: b-tree write err: -5, ino 4 [ 982.946736][T15309] loop1: detected capacity change from 0 to 512 [ 982.954158][T15309] journal_path: Lookup failure for './file0/../file0' [ 982.960996][T15309] EXT4-fs: error: could not find journal device path [ 983.633284][T15313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2887'. [ 984.822075][T14412] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 987.782818][T15332] loop0: detected capacity change from 0 to 512 [ 987.805177][T15332] EXT4-fs: Ignoring removed orlov option [ 989.308488][T15332] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.2893: corrupted in-inode xattr [ 989.409842][T15332] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.2893: couldn't read orphan inode 15 (err -117) [ 989.478548][T15332] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 990.141804][T15343] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2879'. [ 990.635540][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 990.987376][T15348] loop0: detected capacity change from 0 to 1024 [ 992.995550][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.007468][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.128883][T15378] loop0: detected capacity change from 0 to 8 [ 993.165547][T15378] SQUASHFS error: Unable to read inode 0x11f [ 995.926227][T15394] loop1: detected capacity change from 0 to 128 [ 996.116195][T15398] loop9: detected capacity change from 0 to 512 [ 996.286995][T15398] EXT4-fs: Ignoring removed orlov option [ 997.198404][T15398] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2195: inode #15: comm syz.9.2908: corrupted in-inode xattr [ 997.234304][T15398] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.2908: couldn't read orphan inode 15 (err -117) [ 997.304221][T15398] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 998.027746][T13241] EXT4-fs (loop9): unmounting filesystem. [ 1000.504284][T15408] loop1: detected capacity change from 0 to 2048 [ 1000.719935][T15427] loop0: detected capacity change from 0 to 256 [ 1000.743130][T15408] Alternate GPT is invalid, using primary GPT. [ 1000.750011][T15408] loop1: p1 p2 p3 [ 1001.389713][T15427] exfat: Deprecated parameter 'namecase' [ 1002.087907][T15427] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1002.622814][T15432] netlink: 88 bytes leftover after parsing attributes in process `syz.8.2918'. [ 1002.631892][T15432] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2918'. [ 1004.703233][T15430] udevd[15430]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1004.718265][T14375] udevd[14375]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 1005.324586][T14412] udevd[14412]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1005.636494][T15447] loop1: detected capacity change from 0 to 1024 [ 1006.732740][ T7225] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 1008.335595][ T7225] usb 1-1: config 0 has an invalid interface number: 197 but max is 0 [ 1008.344241][ T7225] usb 1-1: config 0 has no interface number 0 [ 1008.350403][ T7225] usb 1-1: config 0 interface 197 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1008.369785][ T7225] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=b2.f8 [ 1008.383126][ T7225] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.391197][ T7225] usb 1-1: Product: syz [ 1008.395810][ T7225] usb 1-1: Manufacturer: syz [ 1008.400466][ T7225] usb 1-1: SerialNumber: syz [ 1008.426206][ T7225] usb 1-1: config 0 descriptor?? [ 1008.431980][T15450] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1009.460412][ T7225] asix 1-1:0.197 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1009.471275][ T7225] asix: probe of 1-1:0.197 failed with error -71 [ 1009.481563][ T7225] usb 1-1: USB disconnect, device number 23 [ 1011.179850][T15476] loop0: detected capacity change from 0 to 128 [ 1011.290107][T15476] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1012.305607][ T26] audit: type=1326 audit(1759051514.367:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15479 comm="syz.8.2932" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1bcf38eec9 code=0x0 [ 1012.355173][T15476] ext4 filesystem being mounted at /501/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1012.396125][T15476] EXT4-fs (loop0): shut down requested (1) [ 1013.049674][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 1013.158377][T15490] loop9: detected capacity change from 0 to 512 [ 1013.168555][T15490] journal_path: Lookup failure for './file0/../file0' [ 1013.175512][T15490] EXT4-fs: error: could not find journal device path [ 1013.832742][T14412] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1015.014839][T15501] loop9: detected capacity change from 0 to 1024 [ 1015.077546][T14412] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1016.148909][T15515] loop1: detected capacity change from 0 to 512 [ 1016.178356][T15515] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1016.207724][T15515] EXT4-fs (loop1): 1 truncate cleaned up [ 1016.221965][T15515] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1017.809848][T15515] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 1017.852104][T15519] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 1017.924326][T15515] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #18: comm syz.1.2940: mark_inode_dirty error [ 1018.826035][T13786] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /70/bus: bad entry in directory: inode out of bounds - offset=24, inode=11, rec_len=20, size=1024 fake=0 [ 1018.964463][T15535] loop9: detected capacity change from 0 to 512 [ 1019.002100][T13786] EXT4-fs (loop1): unmounting filesystem. [ 1019.018201][T15535] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1019.206145][T15535] EXT4-fs (loop9): 1 truncate cleaned up [ 1019.231921][T15535] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1019.420926][T15535] syz.9.2946 (pid 15535) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1019.590069][T15541] EXT4-fs error (device loop9): ext4_find_dest_de:2115: inode #2: block 13: comm syz.9.2946: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1019.822256][T15542] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 1020.192192][T13241] EXT4-fs (loop9): unmounting filesystem. [ 1020.420016][ T5019] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.828149][ T5019] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.967960][T15552] xt_limit: Overflow, try lower: 167772/2147483648 [ 1023.779968][ T5019] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.214384][ T5019] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.101488][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1026.112705][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1026.121081][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1026.152106][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1026.160041][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1026.169086][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1026.188067][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1026.195522][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1026.203253][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1026.211489][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1026.219537][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1026.226917][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1027.219255][T15567] chnl_net:caif_netlink_parms(): no params data found [ 1028.252033][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 1029.403027][T15567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.414302][T15567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.503114][T15567] device bridge_slave_0 entered promiscuous mode [ 1030.945672][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 1031.182078][T15567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.198788][T15567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.234193][T15610] loop0: detected capacity change from 0 to 16 [ 1031.263092][T15567] device bridge_slave_1 entered promiscuous mode [ 1031.305470][T15610] erofs: (device loop0): mounted with root inode @ nid 36. [ 1031.447602][T15614] loop9: detected capacity change from 0 to 1024 [ 1031.456390][T15610] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1031.526311][ T4283] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 1031.538424][T15610] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 1031.581030][ T26] audit: type=1800 audit(1759051534.497:246): pid=15610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2956" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1031.807230][T15567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1032.123513][T15567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1032.159278][T15622] loop0: detected capacity change from 0 to 164 [ 1032.271470][T15622] Unable to read rock-ridge attributes [ 1032.475931][T15622] Unable to read rock-ridge attributes [ 1032.538893][T15567] team0: Port device team_slave_0 added [ 1034.078034][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 1035.490573][T15567] team0: Port device team_slave_1 added [ 1035.709825][T15567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1035.722279][T15567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1035.792032][T15567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1036.846671][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 1038.397852][T15567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1038.441959][T15567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1038.480039][T15655] loop9: detected capacity change from 0 to 512 [ 1038.567184][T15655] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1038.602100][T15567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1038.647950][T15655] EXT4-fs (loop9): 1 truncate cleaned up [ 1038.658706][T15655] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1038.679865][T15658] netlink: 'syz.2.2968': attribute type 15 has an invalid length. [ 1038.823501][ T5019] device hsr_slave_0 left promiscuous mode [ 1038.849817][ T5019] device hsr_slave_1 left promiscuous mode [ 1038.910092][ T5019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1038.930270][ T5019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1038.982146][ T5019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1039.001646][ T5019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1039.022508][ T5019] device bridge_slave_1 left promiscuous mode [ 1039.028758][ T5019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.047471][T15655] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 1039.079681][ T5019] device bridge_slave_0 left promiscuous mode [ 1039.099335][ T5019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.126465][T15655] EXT4-fs error (device loop9): ext4_dirty_inode:6119: inode #18: comm syz.9.2975: mark_inode_dirty error [ 1040.772960][T13241] EXT4-fs error (device loop9): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /99/bus: bad entry in directory: inode out of bounds - offset=24, inode=11, rec_len=20, size=1024 fake=0 [ 1040.915249][ T5019] device veth1_macvtap left promiscuous mode [ 1040.921359][ T5019] device veth0_macvtap left promiscuous mode [ 1040.944885][ T5019] device veth1_vlan left promiscuous mode [ 1040.950868][ T5019] device veth0_vlan left promiscuous mode [ 1040.956033][T13241] EXT4-fs (loop9): unmounting filesystem. [ 1043.283856][T15687] loop0: detected capacity change from 0 to 512 [ 1043.294019][T15687] journal_path: Lookup failure for './file0/../file0' [ 1043.300951][T15687] EXT4-fs: error: could not find journal device path [ 1043.952723][T14412] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1046.861561][ T5019] team0 (unregistering): Port device team_slave_1 removed [ 1046.990545][ T5019] team0 (unregistering): Port device team_slave_0 removed [ 1047.118127][ T5019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1047.310076][ T5019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1051.637741][ T5019] bond0 (unregistering): Released all slaves [ 1051.820300][T15567] device hsr_slave_0 entered promiscuous mode [ 1051.840157][T15567] device hsr_slave_1 entered promiscuous mode [ 1051.847695][T15567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1051.856232][T15567] Cannot create hsr debugfs directory [ 1054.427613][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.667478][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.243599][ T4283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1056.257496][ T4283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1056.267406][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1056.278887][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1056.287204][ T4283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1056.294728][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1058.342873][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 1058.960989][ T5019] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.164480][ T5019] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.426228][T15768] chnl_net:caif_netlink_parms(): no params data found [ 1059.501093][T15810] loop0: detected capacity change from 0 to 4096 [ 1059.619494][ T5019] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.792913][T15810] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1059.881540][ T5019] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.893860][T15807] fs-verity: sha256 using implementation "sha256-avx2" [ 1059.994445][T15567] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1060.155854][T15567] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1060.219667][T15768] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.412177][ T4283] Bluetooth: hci2: command 0x041b tx timeout [ 1060.475635][T15768] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.993428][T15768] device bridge_slave_0 entered promiscuous mode [ 1061.004438][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 1061.033413][T15567] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1061.073384][T15768] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.080611][T15768] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.109539][T15768] device bridge_slave_1 entered promiscuous mode [ 1061.153559][T15567] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1061.431018][T15768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1061.512203][T15768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1061.707427][T15768] team0: Port device team_slave_0 added [ 1061.765726][T15768] team0: Port device team_slave_1 added [ 1062.015424][T15861] loop0: detected capacity change from 0 to 512 [ 1062.841903][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 1063.078047][T15768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1063.102425][T15768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1063.142015][T15861] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1063.214662][T15861] ext4 filesystem being mounted at /517/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1063.241867][T15768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1063.375328][T15861] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #2: comm syz.0.3022: corrupted inode contents [ 1063.430357][T15768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1063.448320][T15768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1063.542014][T15861] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #2: comm syz.0.3022: mark_inode_dirty error [ 1063.578636][T15768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1063.590543][T15861] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #2: comm syz.0.3022: corrupted inode contents [ 1063.622557][T15876] netlink: 'syz.8.3024': attribute type 4 has an invalid length. [ 1063.702868][T15861] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.3022: mark_inode_dirty error [ 1063.716179][T15878] netlink: 'syz.8.3024': attribute type 4 has an invalid length. [ 1063.754093][T15880] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #18: comm syz.0.3022: directory missing '.' [ 1063.790236][T15567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1063.876627][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1063.912672][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1063.931044][T15567] 8021q: adding VLAN 0 to HW filter on device team0 [ 1064.033084][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 1064.343495][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1064.368975][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1064.422661][ T5022] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.429819][ T5022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1064.499711][T15768] device hsr_slave_0 entered promiscuous mode [ 1064.514204][T15768] device hsr_slave_1 entered promiscuous mode [ 1064.548872][T15768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1064.576294][T15768] Cannot create hsr debugfs directory [ 1064.746795][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1064.773022][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1064.813029][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1064.842750][ T5022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.849894][ T5022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1064.872283][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1064.889160][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1064.901927][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 1066.133414][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1066.154733][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1066.177165][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1066.203194][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1066.232579][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1066.260357][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1066.295543][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1066.567149][T15567] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1066.599339][T15567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1066.662520][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1066.674612][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1066.815221][T15920] 9pnet_fd: Insufficient options for proto=fd [ 1069.951729][ T26] audit: type=1326 audit(1759051571.937:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15945 comm="syz.2.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed74f8eec9 code=0x7ffc0000 [ 1070.001798][ T26] audit: type=1326 audit(1759051571.937:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15945 comm="syz.2.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed74f8eec9 code=0x7ffc0000 [ 1070.051523][T15949] loop0: detected capacity change from 0 to 1024 [ 1070.111859][ T26] audit: type=1326 audit(1759051571.937:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15945 comm="syz.2.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fed74f8eec9 code=0x7ffc0000 [ 1070.246835][ T26] audit: type=1326 audit(1759051571.947:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15945 comm="syz.2.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed74f8eec9 code=0x7ffc0000 [ 1070.371780][ T26] audit: type=1326 audit(1759051571.947:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15945 comm="syz.2.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed74f8eec9 code=0x7ffc0000 [ 1070.452113][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1070.474416][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1071.115354][ T5019] device hsr_slave_0 left promiscuous mode [ 1071.183239][ T5019] device hsr_slave_1 left promiscuous mode [ 1071.223294][ T5019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1071.241028][ T5019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1071.269673][ T5019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1071.288077][ T5019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1071.308988][ T5019] device bridge_slave_1 left promiscuous mode [ 1071.322034][ T5019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.347045][ T5019] device bridge_slave_0 left promiscuous mode [ 1071.362174][ T5019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.481136][ T5019] device veth1_macvtap left promiscuous mode [ 1071.505361][ T5019] device veth0_macvtap left promiscuous mode [ 1071.511562][ T5019] device veth1_vlan left promiscuous mode [ 1071.550828][ T5019] device veth0_vlan left promiscuous mode [ 1076.848194][ T5019] team0 (unregistering): Port device team_slave_1 removed [ 1076.983051][ T5019] team0 (unregistering): Port device team_slave_0 removed [ 1077.101916][ T5019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1077.232663][ T5019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1081.064393][ T5019] bond0 (unregistering): Released all slaves [ 1081.258990][T15567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1081.722250][T10646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1081.742670][T10646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1082.148688][ T7] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1083.517002][ T7] usb 1-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1083.561797][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.041070][ T7] usb 1-1: Product: syz [ 1084.048344][ T7] usb 1-1: Manufacturer: syz [ 1084.054296][ T7] usb 1-1: SerialNumber: syz [ 1084.094473][ T7] usb 1-1: config 0 descriptor?? [ 1084.181848][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1084.212734][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1086.610424][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1086.621387][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1086.737748][ T7] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1086.801773][ T7] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 1086.866564][ T4284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1086.874085][ T7] asix: probe of 1-1:0.0 failed with error -71 [ 1086.887841][ T4284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1086.897376][ T4284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1086.907047][ T4284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1086.912086][ T7] usb 1-1: USB disconnect, device number 24 [ 1086.931869][ T4284] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1086.942592][ T4284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1088.972074][ T4285] Bluetooth: hci5: command 0x0409 tx timeout [ 1089.991032][T16065] loop0: detected capacity change from 0 to 164 [ 1090.027903][T16065] Unable to read rock-ridge attributes [ 1090.093628][T16065] Unable to read rock-ridge attributes [ 1090.379829][T15768] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1090.546155][T15768] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1091.619514][ T4285] Bluetooth: hci5: command 0x041b tx timeout [ 1091.719709][T15768] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1091.738509][T15768] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1093.367852][T16044] chnl_net:caif_netlink_parms(): no params data found [ 1093.691899][ T4285] Bluetooth: hci5: command 0x040f tx timeout [ 1094.206252][T16044] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.294182][T16044] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.415221][T16044] device bridge_slave_0 entered promiscuous mode [ 1094.824430][T16044] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.831573][T16044] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.903191][T16044] device bridge_slave_1 entered promiscuous mode [ 1095.120854][T16044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1095.436196][T16044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1095.456497][T15768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1095.487119][T15768] 8021q: adding VLAN 0 to HW filter on device team0 [ 1095.773000][ T4285] Bluetooth: hci5: command 0x0419 tx timeout [ 1099.394780][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1099.417476][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1099.457395][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1099.491880][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1099.500824][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.508008][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1099.522255][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1099.551192][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1099.561221][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.568365][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1099.592106][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1099.603485][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1099.633006][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1099.643287][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1099.663316][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1099.672661][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1099.702414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1099.722034][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1099.742140][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1099.762306][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1099.782581][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1099.790811][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1099.863691][T15768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1099.885846][T16044] team0: Port device team_slave_0 added [ 1099.937554][T16144] loop0: detected capacity change from 0 to 512 [ 1099.992971][T16144] EXT4-fs: Ignoring removed orlov option [ 1100.053502][T16144] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.3091: corrupted in-inode xattr [ 1100.077821][T16044] team0: Port device team_slave_1 added [ 1100.129112][T16144] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.3091: couldn't read orphan inode 15 (err -117) [ 1100.203239][T16144] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1101.005244][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 1101.093559][T16044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1101.100562][T16044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1101.233283][T16044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1101.294450][T16044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1101.311841][T16044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1101.384742][T16044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1101.793530][T16044] device hsr_slave_0 entered promiscuous mode [ 1101.811207][T16044] device hsr_slave_1 entered promiscuous mode [ 1101.986031][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1102.034170][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1102.067666][T15768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1107.387723][T16202] loop0: detected capacity change from 0 to 512 [ 1107.399828][T16202] EXT4-fs: Ignoring removed orlov option [ 1107.544628][T16202] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.3100: corrupted in-inode xattr [ 1107.635084][ T5019] device hsr_slave_0 left promiscuous mode [ 1107.650009][T16202] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.3100: couldn't read orphan inode 15 (err -117) [ 1107.662871][ T5019] device hsr_slave_1 left promiscuous mode [ 1107.694371][ T5019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1107.713593][T16202] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1107.732495][ T5019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1107.779040][ T5019] device bridge_slave_1 left promiscuous mode [ 1107.792022][ T5019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.976445][ T5019] device bridge_slave_0 left promiscuous mode [ 1107.993904][ T5019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.463243][ T5019] device hsr_slave_0 left promiscuous mode [ 1108.465327][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 1108.475297][ T5019] device hsr_slave_1 left promiscuous mode [ 1108.508872][ T5019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1108.527827][ T5019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1108.571505][ T5019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1108.647483][ T5019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1108.884519][ T5019] device bridge_slave_1 left promiscuous mode [ 1108.915803][ T5019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.947755][ T5019] device bridge_slave_0 left promiscuous mode [ 1108.963666][ T5019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.288684][ T5019] device veth1_macvtap left promiscuous mode [ 1109.299335][ T5019] device veth0_macvtap left promiscuous mode [ 1109.316877][ T5019] device veth1_vlan left promiscuous mode [ 1109.340665][ T5019] device veth0_vlan left promiscuous mode [ 1110.849675][ T26] audit: type=1326 audit(1759051612.647:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16219 comm="syz.2.3106" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed74f8eec9 code=0x0 [ 1111.588987][ T5019] team0 (unregistering): Port device team_slave_1 removed [ 1111.686589][ T5019] team0 (unregistering): Port device team_slave_0 removed [ 1111.756051][ T5019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1111.862203][ T5019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1113.285321][ T5019] bond0 (unregistering): Released all slaves [ 1114.180230][ T5019] team0 (unregistering): Port device team_slave_1 removed [ 1114.259012][ T5019] team0 (unregistering): Port device team_slave_0 removed [ 1114.330189][ T5019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1114.404411][ T5019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1114.443022][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1114.465690][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1114.475516][ T4285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1114.511211][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1114.522021][ T4285] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1114.529650][ T4285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1115.152197][ T5019] bond0 (unregistering): Released all slaves [ 1115.673403][T16248] loop0: detected capacity change from 0 to 512 [ 1115.725663][T16248] EXT4-fs: Ignoring removed orlov option [ 1115.857226][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.863678][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.901277][T16248] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.3113: corrupted in-inode xattr [ 1115.946280][T16248] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.3113: couldn't read orphan inode 15 (err -117) [ 1116.022963][T16248] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1116.297868][T16044] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1116.978600][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 1116.992183][T16044] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1117.052048][T16044] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1117.065428][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 1117.247921][T16242] chnl_net:caif_netlink_parms(): no params data found [ 1117.283751][T16264] loop0: detected capacity change from 0 to 164 [ 1117.314291][T16264] Unable to read rock-ridge attributes [ 1117.359953][T16264] Unable to read rock-ridge attributes [ 1117.442814][T16044] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1118.789126][T16242] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.814735][T16242] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.854790][T16242] device bridge_slave_0 entered promiscuous mode [ 1119.142379][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 1119.721048][T16242] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.752044][T16242] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.780681][T16242] device bridge_slave_1 entered promiscuous mode [ 1119.793751][T16293] loop0: detected capacity change from 0 to 512 [ 1119.837165][T16293] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1119.886761][T16044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1119.896436][T16242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1119.910759][T16293] EXT4-fs (loop0): 1 truncate cleaned up [ 1119.929250][T16293] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1120.038773][T16293] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.3123: corrupted in-inode xattr [ 1120.091789][ T26] audit: type=1800 audit(1759051622.957:253): pid=16293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3123" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1120.112714][T16044] 8021q: adding VLAN 0 to HW filter on device team0 [ 1120.153873][T16293] EXT4-fs (loop0): Remounting filesystem read-only [ 1120.160684][T16293] EXT4-fs warning (device loop0): ext4_xattr_set_entry:1732: inode #15: comm syz.0.3123: unable to update i_inline_off [ 1120.176117][T16242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1120.178369][T16292] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.3123: corrupted in-inode xattr [ 1120.268306][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1120.333778][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1120.565609][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1120.581490][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1120.590108][T16292] EXT4-fs (loop0): Remounting filesystem read-only [ 1120.650109][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.657364][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1120.686028][T16292] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.3123: corrupted in-inode xattr [ 1120.824051][T16292] EXT4-fs (loop0): Remounting filesystem read-only [ 1120.830796][T16292] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.3123: corrupted in-inode xattr [ 1120.896441][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1120.927851][T16292] EXT4-fs (loop0): Remounting filesystem read-only [ 1120.935052][T16292] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.3123: corrupted in-inode xattr [ 1120.948131][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1120.956407][T16292] EXT4-fs (loop0): Remounting filesystem read-only [ 1120.981936][T16292] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.3123: corrupted in-inode xattr [ 1120.994899][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1121.003920][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.011041][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1121.026675][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1121.035902][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1121.044060][T16292] EXT4-fs (loop0): Remounting filesystem read-only [ 1121.050767][T16292] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.3123: corrupted in-inode xattr [ 1121.064968][T16292] EXT4-fs (loop0): Remounting filesystem read-only [ 1121.082242][T16292] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.3123: corrupted in-inode xattr [ 1121.099513][T16242] team0: Port device team_slave_0 added [ 1121.116292][T16242] team0: Port device team_slave_1 added [ 1121.128770][T16292] EXT4-fs (loop0): Remounting filesystem read-only [ 1121.155360][T16292] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.3123: corrupted in-inode xattr [ 1121.189602][T16242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1121.197350][T16292] EXT4-fs (loop0): Remounting filesystem read-only [ 1121.204354][T16242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1121.262097][ T4285] Bluetooth: hci3: command 0x040f tx timeout [ 1121.271100][T16292] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.3123: corrupted in-inode xattr [ 1121.296633][T16242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1121.321582][T16242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1121.330444][T16242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1121.365679][T16242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1121.482653][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1121.567957][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1121.667180][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1121.949184][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1121.994636][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1122.095143][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1122.104757][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1122.120666][T16044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1123.543449][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 1123.598767][T16242] device hsr_slave_0 entered promiscuous mode [ 1123.632851][T16242] device hsr_slave_1 entered promiscuous mode [ 1123.672266][T16242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1123.679910][T16242] Cannot create hsr debugfs directory [ 1123.728501][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1123.737835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1125.550439][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1125.571252][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1125.609144][T16044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1125.725884][T10642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1125.763069][T10642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1125.846819][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1125.865758][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1125.901069][T16044] device veth0_vlan entered promiscuous mode [ 1125.919971][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1125.954345][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1126.030351][T16044] device veth1_vlan entered promiscuous mode [ 1126.852606][T16044] device veth0_macvtap entered promiscuous mode [ 1126.861606][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1126.871121][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1126.880270][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1126.889419][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1127.474868][T16044] device veth1_macvtap entered promiscuous mode [ 1127.510826][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1127.523683][T16345] loop0: detected capacity change from 0 to 1024 [ 1128.430823][T16044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1128.501718][T16044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.511607][T16044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1128.578378][T16044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.609837][T16044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1128.952337][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1128.994802][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1129.083713][T16357] loop0: detected capacity change from 0 to 256 [ 1129.133517][T16357] exfat: Deprecated parameter 'namecase' [ 1129.139752][T16357] exfat: Deprecated parameter 'namecase' [ 1129.217582][T16357] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 1129.337467][T16044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1129.371703][T16044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.381591][T16044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1129.695814][T16044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.981872][T16044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1130.207311][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1130.848310][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1130.915745][T16044] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.954603][T16044] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.000296][T16044] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.173349][T16044] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.045292][T16391] Invalid option length (64439) for dns_resolver key [ 1132.468209][ T5008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1132.477372][ T5008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1132.579857][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1132.595302][T16397] loop0: detected capacity change from 0 to 1024 [ 1132.887580][ T5010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1132.935686][ T5010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.470764][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1133.494790][T16242] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1134.037015][T16242] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1134.057101][T16242] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1134.123509][T16419] loop3: detected capacity change from 0 to 1024 [ 1134.249669][T16419] input: syz1 as /devices/virtual/input/input19 [ 1135.345783][T16242] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1135.392480][T16428] loop0: detected capacity change from 0 to 1024 [ 1135.490076][ T5019] device hsr_slave_0 left promiscuous mode [ 1135.574087][ T5019] device hsr_slave_1 left promiscuous mode [ 1135.585994][ T5019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1135.611309][ T5019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1135.641323][ T5019] device bridge_slave_1 left promiscuous mode [ 1135.662153][ T5019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.745407][ T5019] device bridge_slave_0 left promiscuous mode [ 1135.764083][ T5019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.023284][ T26] audit: type=1326 audit(1759051638.947:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16447 comm="syz.8.3158" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bcf38eec9 code=0x0 [ 1136.688082][ T5019] team0 (unregistering): Port device team_slave_1 removed [ 1136.814154][ T5019] team0 (unregistering): Port device team_slave_0 removed [ 1136.927883][ T5019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1137.072806][ T5019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1139.351278][T16479] loop3: detected capacity change from 0 to 128 [ 1139.390062][T16479] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1139.415244][T16479] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1140.502075][T16488] loop3: detected capacity change from 0 to 1024 [ 1140.516905][T16488] input: syz1 as /devices/virtual/input/input20 [ 1140.533928][ T5019] bond0 (unregistering): Released all slaves [ 1141.019538][T16242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1141.055607][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1141.066151][T16499] loop0: detected capacity change from 0 to 164 [ 1141.073623][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1141.090523][T16499] Unable to read rock-ridge attributes [ 1141.132550][T16242] 8021q: adding VLAN 0 to HW filter on device team0 [ 1141.166003][T16499] Unable to read rock-ridge attributes [ 1141.198435][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1141.248758][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1141.321586][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.328815][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1141.382191][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1141.417968][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1141.437603][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.444805][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1141.512453][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1141.576644][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1141.605599][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1142.001824][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1142.040452][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1142.083126][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1142.107696][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1142.262408][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1142.794181][T16242] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1142.883430][T16242] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1143.801777][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1143.810452][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1143.830182][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1143.842219][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1143.861276][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1143.997370][T16541] loop3: detected capacity change from 0 to 1024 [ 1144.041375][T16541] EXT4-fs: Ignoring removed orlov option [ 1144.113639][T16543] loop0: detected capacity change from 0 to 1024 [ 1144.141391][T16541] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1144.161828][T16541] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1144.246560][T16339] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1144.253877][T16541] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 3: comm syz.3.3178: lblock 3 mapped to illegal pblock 3 (length 1) [ 1144.276757][T16543] input: syz1 as /devices/virtual/input/input21 [ 1144.352493][T16541] EXT4-fs (loop3): Remounting filesystem read-only [ 1144.365690][T16556] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: block 3: comm syz.3.3178: lblock 3 mapped to illegal pblock 3 (length 1) [ 1144.404650][T16556] EXT4-fs (loop3): Remounting filesystem read-only [ 1144.419079][T16556] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: block 3: comm syz.3.3178: lblock 3 mapped to illegal pblock 3 (length 1) [ 1144.445984][T16556] EXT4-fs (loop3): Remounting filesystem read-only [ 1144.458773][T16556] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: block 3: comm syz.3.3178: lblock 3 mapped to illegal pblock 3 (length 1) [ 1144.485190][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1144.504176][T16556] EXT4-fs (loop3): Remounting filesystem read-only [ 1144.525585][T16556] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: block 3: comm syz.3.3178: lblock 3 mapped to illegal pblock 3 (length 1) [ 1144.578606][T16556] EXT4-fs (loop3): Remounting filesystem read-only [ 1144.605937][T16556] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: block 3: comm syz.3.3178: lblock 3 mapped to illegal pblock 3 (length 1) [ 1144.677580][T16556] EXT4-fs (loop3): Remounting filesystem read-only [ 1144.689972][T16556] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: block 3: comm syz.3.3178: lblock 3 mapped to illegal pblock 3 (length 1) [ 1144.710763][ T7] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1144.721164][T16556] EXT4-fs (loop3): Remounting filesystem read-only [ 1144.743102][ T7] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.757972][T16556] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: block 3: comm syz.3.3178: lblock 3 mapped to illegal pblock 3 (length 1) [ 1144.772904][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1144.781003][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1144.788712][ T7] usb 3-1: config 220 has no interface number 2 [ 1144.795599][ T7] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1144.800187][T16242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1144.823208][T16556] EXT4-fs (loop3): Remounting filesystem read-only [ 1144.835390][ T7] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1144.851794][ T7] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1144.879262][ T7] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1144.920510][ T7] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1144.937186][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.950579][ T7] usb 3-1: Product: syz [ 1144.959189][T16044] EXT4-fs (loop3): unmounting filesystem. [ 1144.959619][ T7] usb 3-1: Manufacturer: syz [ 1144.978722][ T7] usb 3-1: SerialNumber: syz [ 1145.178500][T16577] loop0: detected capacity change from 0 to 1024 [ 1145.215345][ T7] usb 3-1: selecting invalid altsetting 0 [ 1145.222345][ T7] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1145.294679][ T7] usb 3-1: No valid video chain found. [ 1145.474586][ T7] usb 3-1: selecting invalid altsetting 0 [ 1146.085566][ T7] usbtest: probe of 3-1:220.1 failed with error -22 [ 1146.097551][ T7] usb 3-1: USB disconnect, device number 6 [ 1146.442732][T16593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3186'. [ 1147.045854][T16600] loop0: detected capacity change from 0 to 128 [ 1147.067371][T16600] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1147.119859][T16600] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1148.181530][T10642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1148.229913][T10642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1148.381460][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1148.416184][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1148.416358][T16614] loop0: detected capacity change from 0 to 8 [ 1148.468553][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1148.488822][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1148.508512][T16242] device veth0_vlan entered promiscuous mode [ 1148.550885][T16242] device veth1_vlan entered promiscuous mode [ 1148.556469][T16617] input: syz1 as /devices/virtual/input/input22 [ 1148.642363][T16242] device veth0_macvtap entered promiscuous mode [ 1148.687623][ T5031] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1148.695385][T16610] SQUASHFS error: Failed to read block 0x4de: -5 [ 1148.701901][ T7225] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1148.710483][ T5031] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1148.755516][ T5031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1148.760062][T16610] SQUASHFS error: Failed to read block 0x4de: -5 [ 1148.780385][ T5031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1148.819628][ T5031] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1148.876887][ T26] audit: type=1800 audit(1759051651.757:255): pid=16610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3192" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 1148.916311][T16242] device veth1_macvtap entered promiscuous mode [ 1148.921765][ T7225] usb 4-1: Using ep0 maxpacket: 32 [ 1148.931210][ T7225] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1148.961872][ T7225] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1148.978104][T16242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1148.982250][ T7225] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1149.014155][T16242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1149.045281][ T7225] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1149.046627][T16242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1149.079047][ T7225] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1149.084176][T16242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1149.103387][T16242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1149.103609][ T7225] usb 4-1: Product: syz [ 1149.129128][T16242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1149.138558][ T7225] usb 4-1: Manufacturer: syz [ 1149.158777][ T7225] usb 4-1: SerialNumber: syz [ 1149.168087][T16242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1149.196246][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1149.209039][ T7225] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input23 [ 1149.212060][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1149.271299][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1149.311340][T16242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1149.339976][T16242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1149.364669][T16242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1149.404523][T16242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1149.425012][T16242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1149.480611][T16242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1149.531960][ T4318] usb 4-1: USB disconnect, device number 2 [ 1149.546181][T16242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1149.572545][ T4318] appletouch 4-1:1.0: input: appletouch disconnected [ 1149.600054][ T5031] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1149.637348][ T5031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1149.670698][T16242] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.700187][T16242] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.730385][T16242] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.831569][T16242] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.007872][ T5019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.039158][ T5031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.081889][ T5019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.103126][ T5031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.133669][ T5031] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1151.172923][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1151.544286][T16649] loop5: detected capacity change from 0 to 1024 [ 1151.616912][T16653] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3198'. [ 1151.965047][T16654] loop3: detected capacity change from 0 to 2048 [ 1152.070219][T16654] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1153.633293][T16667] loop3: detected capacity change from 0 to 128 [ 1153.692798][T16667] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1156.295667][T16685] loop0: detected capacity change from 0 to 1024 [ 1156.398074][T16634] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1156.480830][T16685] input: syz1 as /devices/virtual/input/input24 [ 1157.786761][T16697] loop3: detected capacity change from 0 to 2048 [ 1157.808436][T16697] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1157.821594][T16697] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1158.552899][T16711] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3213'. [ 1160.084427][T16724] loop5: detected capacity change from 0 to 128 [ 1160.135329][T16724] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1160.162962][T16724] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1162.169244][T16735] loop5: detected capacity change from 0 to 8 [ 1162.318524][T16735] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1162.505424][T16735] SQUASHFS error: Failed to read block 0x0: -5 [ 1163.343130][T16735] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1163.381784][T16735] SQUASHFS error: Failed to read block 0x0: -5 [ 1163.422309][ T26] audit: type=1800 audit(1759051666.347:256): pid=16735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3219" name="file2" dev="loop5" ino=3 res=0 errno=0 [ 1163.961604][T16763] loop5: detected capacity change from 0 to 1024 [ 1164.073924][T16763] input: syz1 as /devices/virtual/input/input25 [ 1164.999658][T16780] loop3: detected capacity change from 0 to 512 [ 1165.057354][T16780] EXT4-fs: Ignoring removed mblk_io_submit option [ 1165.198189][T16780] EXT4-fs: Ignoring removed mblk_io_submit option [ 1165.255362][T16780] EXT4-fs: Mount option(s) incompatible with ext2 [ 1165.388136][T16789] loop5: detected capacity change from 0 to 164 [ 1165.430686][T16789] Unable to read rock-ridge attributes [ 1167.364245][T16789] Unable to read rock-ridge attributes [ 1169.779696][T16830] loop0: detected capacity change from 0 to 1024 [ 1169.804064][T16830] EXT4-fs: Ignoring removed orlov option [ 1169.912669][T16830] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1172.191553][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 1174.082753][T16887] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3244'. [ 1175.477457][T16903] loop0: detected capacity change from 0 to 164 [ 1175.534141][T16903] Unable to read rock-ridge attributes [ 1175.671943][T16903] Unable to read rock-ridge attributes [ 1176.024790][T16908] loop0: detected capacity change from 0 to 256 [ 1176.088113][T16908] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1176.170307][T16908] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1176.250305][T16908] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 1176.434715][ T26] audit: type=1800 audit(1759051679.357:257): pid=16908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3251" name="file1" dev="loop0" ino=1048833 res=0 errno=0 [ 1176.736019][T16920] loop5: detected capacity change from 0 to 512 [ 1177.392598][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.403397][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.668431][T16920] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1177.711995][T16920] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1177.799460][T16920] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #12: comm syz.5.3255: invalid size [ 1178.827168][T16938] loop0: detected capacity change from 0 to 1024 [ 1179.023606][T16242] EXT4-fs (loop5): unmounting filesystem. [ 1179.030720][T16938] input: syz1 as /devices/virtual/input/input26 [ 1179.784257][T16948] loop5: detected capacity change from 0 to 164 [ 1179.882772][T16948] Unable to read rock-ridge attributes [ 1180.076177][T16948] Unable to read rock-ridge attributes [ 1180.411801][T16956] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3262'. [ 1184.021826][ T4942] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1184.221812][ T4942] usb 6-1: Using ep0 maxpacket: 8 [ 1184.229479][ T4942] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1184.356522][ T4942] usb 6-1: config 1 has an invalid interface number: 20 but max is 0 [ 1184.502524][ T4942] usb 6-1: config 1 has no interface number 0 [ 1184.681156][ T4942] usb 6-1: config 1 interface 20 has no altsetting 0 [ 1184.861759][ T4942] usb 6-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 2.cc [ 1185.148950][ T4942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.189479][ T4942] usb 6-1: SerialNumber: syz [ 1185.305666][ T4942] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.20/input/input27 [ 1185.381094][ T3624] bcm5974 6-1:1.20: could not read from device [ 1185.431553][ T4942] usb 6-1: USB disconnect, device number 3 [ 1185.440419][ T3624] bcm5974 6-1:1.20: could not read from device [ 1186.637300][T16999] loop5: detected capacity change from 0 to 164 [ 1186.727398][T16999] Unable to read rock-ridge attributes [ 1187.342212][T16999] Unable to read rock-ridge attributes [ 1190.725807][T17024] loop0: detected capacity change from 0 to 8 [ 1193.582989][T17046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3284'. [ 1194.494672][T17053] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3288'. [ 1194.746743][T17059] loop3: detected capacity change from 0 to 256 [ 1194.802634][T17059] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1194.860641][T17059] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1195.710027][T17059] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1197.850802][T17072] loop0: detected capacity change from 0 to 2048 [ 1198.172771][T17072] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1199.556310][T17093] UDF-fs: error (device loop0): udf_read_inode: (ino 1345) failed !bh [ 1201.028510][T17103] loop5: detected capacity change from 0 to 2048 [ 1201.100010][T17103] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1201.141584][ T26] audit: type=1800 audit(1759052472.061:258): pid=17103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3298" name="file1" dev="loop5" ino=1415 res=0 errno=0 [ 1201.595670][T17102] loop3: detected capacity change from 0 to 1024 [ 1203.089637][T17114] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1203.101199][T17114] I/O error, dev loop5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1203.110655][T17114] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1203.121890][T17114] I/O error, dev loop5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1203.131349][T17114] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 1203.141039][T17114] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 1203.148764][T17114] UDF-fs: Scanning with blocksize 512 failed [ 1203.160885][T17114] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1203.171331][T17114] I/O error, dev loop5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1203.180976][T17114] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1203.191711][T17114] I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1203.201383][T17114] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 1203.211137][T17114] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 1203.218911][T17114] UDF-fs: Scanning with blocksize 1024 failed [ 1203.622546][T17114] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1203.631981][T17114] I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1203.641399][T17114] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1203.651119][T17114] I/O error, dev loop5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1203.660558][T17114] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 1203.670133][T17114] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 1203.677806][T17114] UDF-fs: Scanning with blocksize 2048 failed [ 1203.711441][T17114] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1203.720882][T17114] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1203.730582][T17114] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 1203.740171][T17114] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 1203.747833][T17114] UDF-fs: Scanning with blocksize 4096 failed [ 1203.753927][T17114] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 1204.802490][T17117] loop0: detected capacity change from 0 to 1024 [ 1204.852504][T17117] EXT4-fs: Invalid uid value -1 [ 1205.579060][T17126] loop3: detected capacity change from 0 to 8 [ 1205.660556][T17126] SQUASHFS error: Unable to read inode 0x11f [ 1206.015100][T17131] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3299'. [ 1213.095934][T17182] loop5: detected capacity change from 0 to 2048 [ 1213.302443][T17186] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3318'. [ 1213.453547][T17182] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1213.652580][T17190] loop3: detected capacity change from 0 to 256 [ 1215.431382][ T4283] Bluetooth: hci5: command 0x0406 tx timeout [ 1215.499465][T17194] loop0: detected capacity change from 0 to 1024 [ 1215.512601][T17194] EXT4-fs: inline encryption not supported [ 1215.518706][T17194] EXT4-fs: Ignoring removed nobh option [ 1215.622525][T17194] EXT4-fs: Ignoring removed bh option [ 1215.671785][T17194] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1215.872808][T17194] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1216.169987][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 1218.546243][T17243] loop3: detected capacity change from 0 to 8 [ 1218.603970][T17235] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3329'. [ 1218.813691][T17243] SQUASHFS error: Unable to read inode 0x11f [ 1223.724780][T17289] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3344'. [ 1228.071244][T17346] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3359'. [ 1229.698071][T17354] device pim6reg1 entered promiscuous mode [ 1234.015401][T17408] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3380'. [ 1234.848751][T17409] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3379'. [ 1238.663752][T17457] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3391'. [ 1238.762425][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.774345][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.643887][ T4283] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1240.655754][ T4283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1240.667421][ T4283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1240.677040][ T4283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1240.684962][ T4283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1240.692359][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1240.816960][T17479] loop3: detected capacity change from 0 to 8 [ 1241.072167][T17479] SQUASHFS error: Unable to read inode 0x11f [ 1241.134021][T16875] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.733325][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 1243.331311][T16875] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.711854][T16875] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.884549][T17507] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3404'. [ 1243.893639][T17507] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3404'. [ 1244.811939][ T4283] Bluetooth: hci0: command 0x041b tx timeout [ 1245.489312][T16875] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.911823][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 1247.781042][T17472] chnl_net:caif_netlink_parms(): no params data found [ 1248.631239][T17555] device wg2 entered promiscuous mode [ 1248.870243][T17564] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3416'. [ 1248.879600][T17564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3416'. [ 1248.973815][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 1249.543585][T17568] loop5: detected capacity change from 0 to 1024 [ 1251.461984][T17472] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.469207][T17472] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.589048][T17472] device bridge_slave_0 entered promiscuous mode [ 1251.637693][T17472] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.676762][T17472] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.711433][T17472] device bridge_slave_1 entered promiscuous mode [ 1252.501429][T17597] device wg2 entered promiscuous mode [ 1252.512184][T17472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1252.532322][T17602] loop3: detected capacity change from 0 to 8 [ 1252.570787][T17602] SQUASHFS error: Unable to read inode 0x11f [ 1253.248646][T17472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1253.924319][T17472] team0: Port device team_slave_0 added [ 1255.648652][T17615] loop3: detected capacity change from 0 to 512 [ 1255.656009][T17615] journal_path: Lookup failure for './file0/../file0' [ 1255.662892][T17615] EXT4-fs: error: could not find journal device path [ 1255.766530][T17622] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3429'. [ 1255.775599][T17622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3429'. [ 1255.825277][T17472] team0: Port device team_slave_1 added [ 1256.485923][T17472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1256.496799][T17472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1256.612013][T17472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1256.673744][T17472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1256.680845][T17472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1256.811757][T17472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1257.312538][T17472] device hsr_slave_0 entered promiscuous mode [ 1257.359119][T17472] device hsr_slave_1 entered promiscuous mode [ 1257.378778][T17472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1257.401925][T17472] Cannot create hsr debugfs directory [ 1257.772728][T17657] loop3: detected capacity change from 0 to 8 [ 1258.254712][T17657] SQUASHFS error: Unable to read inode 0x11f [ 1258.603993][T16875] device hsr_slave_0 left promiscuous mode [ 1258.620725][T16875] device hsr_slave_1 left promiscuous mode [ 1258.771076][T16875] device veth1_macvtap left promiscuous mode [ 1259.042179][T16875] device veth0_macvtap left promiscuous mode [ 1259.082304][T16875] device veth1_vlan left promiscuous mode [ 1259.120034][T16875] device veth0_vlan left promiscuous mode [ 1266.317035][T16875] bond0 (unregistering): Released all slaves [ 1271.061069][T17472] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1271.123684][T17472] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1271.370295][T17472] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1271.852070][T17472] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1273.341930][T17787] loop3: detected capacity change from 0 to 8 [ 1273.427019][T17787] SQUASHFS error: Unable to read inode 0x11f [ 1273.748688][T17796] loop5: detected capacity change from 0 to 1024 [ 1274.457981][T17472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1274.635272][T17472] 8021q: adding VLAN 0 to HW filter on device team0 [ 1274.662223][T10646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1274.690701][T10646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1274.852085][T16877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1274.892306][T16877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1274.904195][T16877] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.911369][T16877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1274.967470][T16877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1275.003163][T16877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1275.041968][T16877] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.049175][T16877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1275.188980][T16877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1275.204421][T16877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1275.451909][T16877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1275.469693][T16877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1275.579880][T17827] loop5: detected capacity change from 0 to 512 [ 1275.590301][T17827] journal_path: Lookup failure for './file0/../file0' [ 1275.597288][T17827] EXT4-fs: error: could not find journal device path [ 1275.778006][T16877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1276.046661][T16877] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1276.212873][T17791] blk_print_req_error: 3 callbacks suppressed [ 1276.212889][T17791] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1276.232011][T17826] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3470'. [ 1276.285568][T16877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1276.296587][T16877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1276.340732][T16877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1276.568337][T16877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1276.602652][T16877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1276.634695][T16877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1276.703662][T17472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1276.750774][T17839] device veth1_macvtap left promiscuous mode [ 1276.779240][T17839] device macsec0 entered promiscuous mode [ 1278.175282][T17850] loop5: detected capacity change from 0 to 1024 [ 1278.777352][T17858] loop3: detected capacity change from 0 to 2048 [ 1279.000278][T17858] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1279.384228][T17870] device pim6reg1 entered promiscuous mode [ 1279.435690][T16877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1279.454146][T16877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1279.499661][T17472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1279.779930][T16879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1279.802169][T16879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1279.892364][T10646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1279.922533][T10646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1279.944349][T17472] device veth0_vlan entered promiscuous mode [ 1279.952005][T10646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1279.973143][T10646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1280.026754][T17472] device veth1_vlan entered promiscuous mode [ 1280.099323][T10646] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1280.113395][T10646] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1280.152696][T10646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1280.182999][T10646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1280.210485][T17472] device veth0_macvtap entered promiscuous mode [ 1280.438025][T17472] device veth1_macvtap entered promiscuous mode [ 1280.613193][T16881] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1280.687363][T16881] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1281.048994][T17472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1281.171698][T17472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.252445][T17472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1281.294596][T17472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.327174][T17472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1281.384992][T17472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.401802][T17472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1282.804021][T17472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.823633][T17472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1282.838017][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1282.900324][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1282.932356][T17472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1282.956048][T17472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.988677][T17472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1283.019597][T17472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.052221][T17472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1283.071758][T17472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.094206][T17472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1283.125267][T17472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.154386][T17472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1283.219742][T17906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.227362][T17906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.288522][T17907] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.295771][T17907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1283.303266][T17907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.310425][T17907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1283.341379][T17907] device bridge0 entered promiscuous mode [ 1283.371558][T16875] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1283.393543][T16875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1283.423554][T17472] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.442206][T17472] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.481676][T17472] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.490538][T17472] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.473626][ T5043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1284.528150][ T5043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1284.622020][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1284.779223][T16875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1284.823675][T16875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1284.836647][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1292.229921][T17995] loop0: detected capacity change from 0 to 1024 [ 1295.450526][T18028] loop0: detected capacity change from 0 to 1024 [ 1295.563618][T18030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3515'. [ 1297.146661][T18036] device pim6reg1 entered promiscuous mode [ 1300.186233][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.192644][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.379506][T18080] loop0: detected capacity change from 0 to 1024 [ 1303.313506][T18100] device pim6reg1 entered promiscuous mode [ 1307.628230][T18143] syz.2.3546[18143] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1307.628392][T18143] syz.2.3546[18143] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1307.992819][T18147] loop3: detected capacity change from 0 to 2048 [ 1308.090582][T18147] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1310.677028][T18174] loop3: detected capacity change from 0 to 1024 [ 1312.917262][ T4283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1312.928593][ T4283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1312.951913][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1313.002099][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1313.012342][ T4283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1313.019704][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1313.318166][T18206] loop0: detected capacity change from 0 to 2048 [ 1314.883527][T18206] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1315.051880][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 1315.464194][T18226] loop0: detected capacity change from 0 to 1024 [ 1315.801549][T18228] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3570'. [ 1316.590871][T16877] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.461645][ T4283] Bluetooth: hci2: command 0x041b tx timeout [ 1317.696139][T18196] chnl_net:caif_netlink_parms(): no params data found [ 1318.016916][T18241] syz.0.3573[18241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1318.017023][T18241] syz.0.3573[18241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1318.073343][T16877] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.386732][T16877] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.925598][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 1320.069928][T16877] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.158488][T18278] loop3: detected capacity change from 0 to 2048 [ 1321.180950][T18278] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1321.377485][T18283] loop0: detected capacity change from 0 to 1024 [ 1322.237474][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 1322.876433][T18299] xt_cgroup: path and classid specified [ 1325.665433][T18308] loop3: detected capacity change from 0 to 164 [ 1325.698557][T18308] Unable to read rock-ridge attributes [ 1325.729125][T18308] Unable to read rock-ridge attributes [ 1326.185728][T18312] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3588'. [ 1328.203379][T18196] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.210582][T18196] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.218708][T18196] device bridge_slave_0 entered promiscuous mode [ 1328.434249][T18196] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.466578][T18196] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.502985][T18196] device bridge_slave_1 entered promiscuous mode [ 1329.978066][T18318] loop5: detected capacity change from 0 to 1024 [ 1330.525396][T18326] loop0: detected capacity change from 0 to 1024 [ 1330.568047][T18196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1330.790350][T18196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1331.428630][T18196] team0: Port device team_slave_0 added [ 1331.795228][T18196] team0: Port device team_slave_1 added [ 1331.992913][T18196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1331.999929][T18196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1332.082241][T18196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1332.146404][T18347] loop5: detected capacity change from 0 to 164 [ 1332.234223][T18347] Unable to read rock-ridge attributes [ 1332.342220][T18347] Unable to read rock-ridge attributes [ 1332.605556][T18196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1332.613408][T18196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1332.640676][T18196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1335.959917][T18196] device hsr_slave_0 entered promiscuous mode [ 1336.033899][T18196] device hsr_slave_1 entered promiscuous mode [ 1336.076256][T18196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1336.101713][T18196] Cannot create hsr debugfs directory [ 1337.951403][T18394] loop3: detected capacity change from 0 to 164 [ 1338.069413][T18394] Unable to read rock-ridge attributes [ 1338.178107][T18394] Unable to read rock-ridge attributes [ 1338.441072][T18402] loop5: detected capacity change from 0 to 2048 [ 1338.630590][T18402] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1341.544397][T16877] device hsr_slave_0 left promiscuous mode [ 1341.619464][T16877] device hsr_slave_1 left promiscuous mode [ 1341.661892][T16877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1341.671910][T16877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1341.702083][T16877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1341.709537][T16877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1341.833881][T16877] device bridge_slave_1 left promiscuous mode [ 1341.840111][T16877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1341.888013][T16877] device bridge_slave_0 left promiscuous mode [ 1341.913006][T16877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.023998][T16877] device veth1_macvtap left promiscuous mode [ 1342.030078][T16877] device veth0_macvtap left promiscuous mode [ 1343.283192][T16877] device veth1_vlan left promiscuous mode [ 1343.321851][T16877] device veth0_vlan left promiscuous mode [ 1344.431303][T18448] loop5: detected capacity change from 0 to 164 [ 1344.561938][T18448] Unable to read rock-ridge attributes [ 1344.726306][T18448] Unable to read rock-ridge attributes [ 1345.643915][T18454] loop5: detected capacity change from 0 to 512 [ 1345.654423][T18454] journal_path: Lookup failure for './file0/../file0' [ 1345.661362][T18454] EXT4-fs: error: could not find journal device path [ 1346.293089][T18329] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1346.647566][T18456] loop0: detected capacity change from 0 to 2048 [ 1346.771151][T18456] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1348.701411][T16877] team0 (unregistering): Port device team_slave_1 removed [ 1348.814764][T16877] team0 (unregistering): Port device team_slave_0 removed [ 1348.922364][T16877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1349.022636][T16877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1349.869861][T16877] bond0 (unregistering): Released all slaves [ 1352.664135][T18196] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1352.709266][T18196] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1352.709965][T18488] input: syz1 as /devices/virtual/input/input28 [ 1352.746786][T18196] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1352.774955][T18196] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1353.164110][T18496] loop0: detected capacity change from 0 to 2048 [ 1353.321700][T18496] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1353.617979][T18506] syz.2.3636[18506] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1353.618086][T18506] syz.2.3636[18506] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1353.752109][T18196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1353.982114][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1353.990264][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1354.066159][T18196] 8021q: adding VLAN 0 to HW filter on device team0 [ 1354.085301][T18509] loop5: detected capacity change from 0 to 1024 [ 1354.132372][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1354.353214][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1354.450175][ T5017] bridge0: port 1(bridge_slave_0) entered blocking state [ 1354.457441][ T5017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1355.089905][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1355.152401][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1355.217315][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1355.234958][T18524] loop0: detected capacity change from 0 to 164 [ 1355.252233][ T5017] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.259386][ T5017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1355.286717][T18524] Unable to read rock-ridge attributes [ 1355.380723][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1355.453708][T18524] Unable to read rock-ridge attributes [ 1355.463438][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1355.554057][T18196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1355.624109][T18196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1355.667561][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1355.696222][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1355.724184][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1355.760683][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1355.807719][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1355.832417][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1355.850525][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1356.755703][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1356.829978][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1356.850466][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1359.742903][T18568] loop0: detected capacity change from 0 to 1024 [ 1359.978094][T18560] loop5: detected capacity change from 0 to 2048 [ 1361.492224][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1361.499832][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1361.615602][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.621999][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.630298][T18196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1362.020795][T18560] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1362.849583][T18578] loop0: detected capacity change from 0 to 2048 [ 1363.499191][T18578] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 1363.546487][T18578] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1363.691795][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 1365.956906][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1365.982605][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1366.019115][T18196] device veth0_vlan entered promiscuous mode [ 1366.052854][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1366.094885][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1366.125254][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1366.145767][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1366.190474][T18196] device veth1_vlan entered promiscuous mode [ 1366.273887][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1366.315061][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1366.365423][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1366.394082][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1366.426799][T18196] device veth0_macvtap entered promiscuous mode [ 1366.445990][T18196] device veth1_macvtap entered promiscuous mode [ 1366.545710][T18196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1366.572631][T18196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.608580][T18196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1366.650064][T18196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.681671][T18196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1366.721781][T18196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.761665][T18196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1366.801650][T18196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.833471][T18196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1366.842589][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1366.861469][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1368.280836][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1368.330124][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1368.356705][T18196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1368.381986][T18196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.405074][T18196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1368.455850][T18196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.501649][T18196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1368.536917][T18196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.571781][T18196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1368.605902][T18196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.647418][T18196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1368.708312][T18196] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.748032][T18196] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.781904][T18196] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.790687][T18196] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.842749][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1368.872479][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1369.131088][ T5022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1369.171608][ T5022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1369.255073][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1369.266285][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1369.310496][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1369.581128][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1369.607726][T18637] loop0: detected capacity change from 0 to 8 [ 1369.905233][T18637] SQUASHFS error: Unable to read inode 0x11f [ 1373.117777][T18671] input: syz1 as /devices/virtual/input/input29 [ 1375.847298][T18692] loop8: detected capacity change from 0 to 1024 [ 1378.680647][T18744] loop8: detected capacity change from 0 to 1024 [ 1378.825484][T18329] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1378.854206][T18744] input: syz1 as /devices/virtual/input/input30 [ 1379.293810][T18747] device pim6reg1 entered promiscuous mode [ 1379.545575][T18750] loop5: detected capacity change from 0 to 8 [ 1380.743135][T18750] SQUASHFS error: Unable to read inode 0x11f [ 1382.880315][T18780] loop5: detected capacity change from 0 to 1024 [ 1383.034858][T18329] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1383.091896][T18780] input: syz1 as /devices/virtual/input/input31 [ 1391.586839][T18848] loop0: detected capacity change from 0 to 1024 [ 1392.311803][T18848] input: syz1 as /devices/virtual/input/input32 [ 1395.342546][T18868] loop5: detected capacity change from 0 to 1024 [ 1398.304278][T18893] loop8: detected capacity change from 0 to 1024 [ 1398.363371][T18893] input: syz1 as /devices/virtual/input/input33 [ 1401.502318][T18928] loop5: detected capacity change from 0 to 8 [ 1401.737573][T18928] SQUASHFS error: Unable to read inode 0x11f [ 1403.719685][T18945] loop3: detected capacity change from 0 to 2048 [ 1403.890234][T18945] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1404.130407][T18945] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1405.581150][T18969] loop0: detected capacity change from 0 to 1024 [ 1405.681777][T18969] input: syz1 as /devices/virtual/input/input34 [ 1410.120286][T19006] loop3: detected capacity change from 0 to 164 [ 1410.167931][T19006] Unable to read rock-ridge attributes [ 1410.274858][T19006] Unable to read rock-ridge attributes [ 1411.522493][T19021] loop0: detected capacity change from 0 to 8 [ 1411.571451][T19021] SQUASHFS error: Unable to read inode 0x11f [ 1411.683352][T19025] loop8: detected capacity change from 0 to 1024 [ 1411.864348][T17791] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1413.333736][T19025] input: syz1 as /devices/virtual/input/input35 [ 1419.333193][T19095] loop8: detected capacity change from 0 to 2048 [ 1420.192306][T19095] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found! [ 1420.204973][T19095] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1420.273472][T19086] device veth1_macvtap left promiscuous mode [ 1420.371805][T19086] device macsec0 entered promiscuous mode [ 1420.516226][T19098] loop0: detected capacity change from 0 to 164 [ 1420.578438][T19098] Unable to read rock-ridge attributes [ 1420.722470][T19098] Unable to read rock-ridge attributes [ 1420.833015][T19101] loop3: detected capacity change from 0 to 8 [ 1420.885569][T19101] SQUASHFS error: Unable to read inode 0x11f [ 1422.101619][T19118] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3767'. [ 1423.387534][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.432846][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.580732][T19121] [ 1423.583143][T19121] ====================================================== [ 1423.590183][T19121] WARNING: possible circular locking dependency detected [ 1423.597238][T19121] syzkaller #0 Not tainted [ 1423.601676][T19121] ------------------------------------------------------ [ 1423.608724][T19121] syz.0.3768/19121 is trying to acquire lock: [ 1423.614804][T19121] ffff8880b8e281d8 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x184/0x870 [ 1423.623439][T19121] [ 1423.623439][T19121] but task is already holding lock: [ 1423.630797][T19121] ffff8880b8e28418 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 1423.639672][T19121] [ 1423.639672][T19121] which lock already depends on the new lock. [ 1423.639672][T19121] [ 1423.650065][T19121] [ 1423.650065][T19121] the existing dependency chain (in reverse order) is: [ 1423.659068][T19121] [ 1423.659068][T19121] -> #1 (&base->lock){-.-.}-{2:2}: [ 1423.666359][T19121] _raw_spin_lock_irqsave+0xa4/0xf0 [ 1423.672084][T19121] lock_timer_base+0x123/0x270 [ 1423.677373][T19121] __mod_timer+0x117/0xd20 [ 1423.682314][T19121] queue_delayed_work_on+0x126/0x1e0 [ 1423.688122][T19121] kvfree_call_rcu+0x4cb/0x870 [ 1423.693428][T19121] rtnl_register_internal+0x489/0x590 [ 1423.699320][T19121] rtnl_register+0x2e/0x70 [ 1423.704258][T19121] ip_rt_init+0x323/0x3b5 [ 1423.709181][T19121] ip_init+0xa/0x14 [ 1423.713514][T19121] inet_init+0x2bd/0x3cf [ 1423.718281][T19121] do_one_initcall+0x214/0x7a0 [ 1423.723568][T19121] do_initcall_level+0x137/0x1e4 [ 1423.729028][T19121] do_initcalls+0x4b/0x8a [ 1423.733902][T19121] kernel_init_freeable+0x3fa/0x5ac [ 1423.739627][T19121] kernel_init+0x19/0x1b0 [ 1423.744477][T19121] ret_from_fork+0x1f/0x30 [ 1423.749413][T19121] [ 1423.749413][T19121] -> #0 (krc.lock){..-.}-{2:2}: [ 1423.756445][T19121] __lock_acquire+0x2cf8/0x7c50 [ 1423.761818][T19121] lock_acquire+0x1b4/0x490 [ 1423.766842][T19121] _raw_spin_lock+0x2a/0x40 [ 1423.771867][T19121] kvfree_call_rcu+0x184/0x870 [ 1423.777154][T19121] trie_delete_elem+0x52d/0x690 [ 1423.782530][T19121] bpf_prog_5186c38a4019a4cb+0x42/0x46 [ 1423.788527][T19121] bpf_trace_run3+0x1e3/0x400 [ 1423.793730][T19121] enqueue_timer+0x411/0x5c0 [ 1423.798833][T19121] __mod_timer+0x8e1/0xd20 [ 1423.803771][T19121] sk_reset_timer+0x1f/0xb0 [ 1423.808793][T19121] tipc_sk_finish_conn+0x154/0x7e0 [ 1423.814431][T19121] tipc_socketpair+0x250/0x470 [ 1423.819719][T19121] __sys_socketpair+0x2ac/0x540 [ 1423.825088][T19121] __x64_sys_socketpair+0x97/0xb0 [ 1423.830630][T19121] do_syscall_64+0x4c/0xa0 [ 1423.835580][T19121] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1423.841992][T19121] [ 1423.841992][T19121] other info that might help us debug this: [ 1423.841992][T19121] [ 1423.852211][T19121] Possible unsafe locking scenario: [ 1423.852211][T19121] [ 1423.859658][T19121] CPU0 CPU1 [ 1423.865042][T19121] ---- ---- [ 1423.870402][T19121] lock(&base->lock); [ 1423.874475][T19121] lock(krc.lock); [ 1423.880799][T19121] lock(&base->lock); [ 1423.887380][T19121] lock(krc.lock); [ 1423.891185][T19121] [ 1423.891185][T19121] *** DEADLOCK *** [ 1423.891185][T19121] [ 1423.899320][T19121] 2 locks held by syz.0.3768/19121: [ 1423.904511][T19121] #0: ffff8880b8e28418 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 1423.913829][T19121] #1: ffffffff8cb2abe0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0xf0/0x400 [ 1423.923146][T19121] [ 1423.923146][T19121] stack backtrace: [ 1423.929025][T19121] CPU: 0 PID: 19121 Comm: syz.0.3768 Not tainted syzkaller #0 [ 1423.936474][T19121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1423.946526][T19121] Call Trace: [ 1423.949803][T19121] [ 1423.952735][T19121] dump_stack_lvl+0x168/0x22e [ 1423.957414][T19121] ? load_image+0x3b0/0x3b0 [ 1423.961921][T19121] ? show_regs_print_info+0x12/0x12 [ 1423.967211][T19121] ? print_circular_bug+0x12b/0x1a0 [ 1423.972419][T19121] check_noncircular+0x274/0x310 [ 1423.977374][T19121] ? add_chain_block+0x940/0x940 [ 1423.982318][T19121] ? lockdep_lock+0xdc/0x1e0 [ 1423.986915][T19121] ? _find_first_zero_bit+0xcf/0x100 [ 1423.992210][T19121] __lock_acquire+0x2cf8/0x7c50 [ 1423.997072][T19121] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1424.002977][T19121] ? verify_lock_unused+0x140/0x140 [ 1424.008180][T19121] ? kasan_save_stack+0x4c/0x60 [ 1424.013072][T19121] ? kasan_save_stack+0x3a/0x60 [ 1424.017923][T19121] ? __kasan_record_aux_stack+0xb2/0xc0 [ 1424.023475][T19121] ? kvfree_call_rcu+0x108/0x870 [ 1424.028418][T19121] ? trie_delete_elem+0x52d/0x690 [ 1424.033443][T19121] ? bpf_prog_5186c38a4019a4cb+0x42/0x46 [ 1424.039071][T19121] ? bpf_trace_run3+0x1e3/0x400 [ 1424.043924][T19121] ? enqueue_timer+0x411/0x5c0 [ 1424.048683][T19121] ? __mod_timer+0x8e1/0xd20 [ 1424.053276][T19121] ? sk_reset_timer+0x1f/0xb0 [ 1424.057967][T19121] ? tipc_sk_finish_conn+0x154/0x7e0 [ 1424.063254][T19121] ? tipc_socketpair+0x250/0x470 [ 1424.068193][T19121] ? __sys_socketpair+0x2ac/0x540 [ 1424.073222][T19121] ? __x64_sys_socketpair+0x97/0xb0 [ 1424.078420][T19121] ? do_syscall_64+0x4c/0xa0 [ 1424.083005][T19121] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1424.089076][T19121] lock_acquire+0x1b4/0x490 [ 1424.093584][T19121] ? kvfree_call_rcu+0x184/0x870 [ 1424.098530][T19121] ? read_lock_is_recursive+0x10/0x10 [ 1424.103922][T19121] ? __phys_addr+0xb6/0x170 [ 1424.108439][T19121] _raw_spin_lock+0x2a/0x40 [ 1424.112954][T19121] ? kvfree_call_rcu+0x184/0x870 [ 1424.117914][T19121] kvfree_call_rcu+0x184/0x870 [ 1424.122694][T19121] ? rcu_leak_callback+0x10/0x10 [ 1424.127637][T19121] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1424.133549][T19121] ? _raw_spin_unlock+0x40/0x40 [ 1424.138417][T19121] trie_delete_elem+0x52d/0x690 [ 1424.143278][T19121] bpf_prog_5186c38a4019a4cb+0x42/0x46 [ 1424.148734][T19121] bpf_trace_run3+0x1e3/0x400 [ 1424.153428][T19121] ? do_raw_spin_unlock+0x11d/0x230 [ 1424.158652][T19121] ? bpf_trace_run3+0xf0/0x400 [ 1424.163445][T19121] ? bpf_trace_run2+0x3b0/0x3b0 [ 1424.168320][T19121] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1424.174223][T19121] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 1424.179618][T19121] ? _raw_spin_lock+0x40/0x40 [ 1424.184320][T19121] enqueue_timer+0x411/0x5c0 [ 1424.188917][T19121] __mod_timer+0x8e1/0xd20 [ 1424.193357][T19121] sk_reset_timer+0x1f/0xb0 [ 1424.197865][T19121] tipc_sk_finish_conn+0x154/0x7e0 [ 1424.202997][T19121] tipc_socketpair+0x250/0x470 [ 1424.207814][T19121] __sys_socketpair+0x2ac/0x540 [ 1424.212678][T19121] __x64_sys_socketpair+0x97/0xb0 [ 1424.217704][T19121] do_syscall_64+0x4c/0xa0 [ 1424.222124][T19121] ? clear_bhb_loop+0x60/0xb0 [ 1424.226801][T19121] ? clear_bhb_loop+0x60/0xb0 [ 1424.231478][T19121] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1424.237369][T19121] RIP: 0033:0x7f0eae38eec9 [ 1424.241886][T19121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1424.261510][T19121] RSP: 002b:00007f0eaf28c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1424.269961][T19121] RAX: ffffffffffffffda RBX: 00007f0eae5e5fa0 RCX: 00007f0eae38eec9 [ 1424.277936][T19121] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 1424.285907][T19121] RBP: 00007f0eae411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1424.293877][T19121] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000000 [ 1424.301863][T19121] R13: 00007f0eae5e6038 R14: 00007f0eae5e5fa0 R15: 00007ffdc06fe678 [ 1424.309839][T19121]