last executing test programs: 22m52.19930222s ago: executing program 32 (id=242): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, &(0x7f0000000c40)) 22m48.10619002s ago: executing program 33 (id=254): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x600}, 0x800, 0x0, 0x1, 0x8, 0x40}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, 0x0, 0x0, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) 19m46.732926239s ago: executing program 34 (id=697): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) syz_io_uring_setup(0x106, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000400000200000000071182f0000000000950000000000000069423ca4e5d09c56ea10d11cb57741788838fefa9fde83cdd9705cad45300c2b73551935d48845c503fdfe8b3a16a6157d77bf766602b7e98e482ca481aa6e1d23a097729ecdcc1e92443badedd291f2b93ab5988da810e3318b229a7fb7caa379826e36e97b4c8050a508a13258a2c54b28413d4f50bf486fb470882c710aa5c9a9b686f84ad843b45ec266c5534353f0950ad4e923e72d3733fc204f5f18"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x64, r6, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x80}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x64}, 0x1, 0x620b}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0xa8, 0x0, 0x2}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, 0x0, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) 11m48.703552076s ago: executing program 4 (id=1957): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x0, 0x28}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) socket$inet_udp(0x2, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r3) vmsplice(0xffffffffffffffff, &(0x7f0000001440), 0x0, 0x4) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) fallocate(r0, 0x8, 0x4, 0x7) 11m48.301157804s ago: executing program 4 (id=1962): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@dstopts={{0x18, 0x29, 0x37, {0x62}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1000}}], 0x30}}], 0x1, 0x6004c0d4) 11m48.020468417s ago: executing program 4 (id=1963): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x800000000003) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000240)={0x80000000, 0xfff}) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000200)={0x6, 0x0, [{0xbf1, 0x0, 0x9}, {0xa98, 0x0, 0x6}, {0xb27, 0x0, 0x3}, {0xa21, 0x0, 0x6}, {0x21e}, {0x887, 0x0, 0x6}]}) 11m47.601313705s ago: executing program 4 (id=1964): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000500)={[{@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_nolock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r0, 0x0, 0x0, 0x8800000) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0xa10408, &(0x7f00000001c0)={[{@nojournal_checksum}, {@dioread_lock}, {@mblk_io_submit}, {}, {@noload}, {@inlinecrypt}, {@debug}, {@usrjquota}]}, 0x3, 0x581, &(0x7f0000000c00)="$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") open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) write$binfmt_misc(r1, &(0x7f0000000340)="be", 0x1) 11m46.13925831s ago: executing program 4 (id=1967): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x3, 0x5, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0xffffffff, 0x0, 0x1, 'queue1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) poll(&(0x7f0000000080)=[{r0, 0x20}], 0x1, 0xfbe) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x2, @time={0xf, 0x7}, 0x7, {0x3, 0xbb}, 0x3d, 0x2, 0x9}) 11m44.432451105s ago: executing program 4 (id=1975): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 11m43.605567292s ago: executing program 35 (id=1975): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 11m38.883814841s ago: executing program 1 (id=1994): getdents(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0xbb) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='net_prio.prioidx\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000002cf5741000000000000000000000008500000061"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 11m34.790632561s ago: executing program 1 (id=2000): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = open(&(0x7f0000000380)='./bus\x00', 0xeb40, 0x14) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r4], 0x2b) sendfile(r6, r4, 0x0, 0x4000000053d2) 11m33.884394761s ago: executing program 1 (id=2002): ioperm(0x0, 0x201, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) 11m33.712135098s ago: executing program 1 (id=2004): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000500)={[{@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_nolock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r0, 0x0, 0x0, 0x8800000) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0xa10408, &(0x7f00000001c0)={[{@nojournal_checksum}, {@dioread_lock}, {@mblk_io_submit}, {}, {@noload}, {@inlinecrypt}, {@debug}, {@usrjquota}]}, 0x3, 0x581, &(0x7f0000000c00)="$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") open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) write$binfmt_misc(r1, &(0x7f0000000340)="be", 0x1) 11m32.54895199s ago: executing program 6 (id=2006): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x9, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x3) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 11m31.490476847s ago: executing program 1 (id=2007): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 11m31.077183125s ago: executing program 6 (id=2008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001ac0), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001b80)={{}, &(0x7f0000001b00), &(0x7f0000001b40)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001cc0)={{0x1}, &(0x7f0000001c40), 0x0}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001d80)={0x1b, 0x0, 0x0, 0xfffffff3, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001e80)={0x0, 0x80000001, 0x8}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setrlimit(0xf, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffb2) 11m29.992245773s ago: executing program 6 (id=2009): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = open(&(0x7f0000000380)='./bus\x00', 0xeb40, 0x14) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r4], 0x2b) sendfile(r6, r4, 0x0, 0x4000000053d2) 11m29.211599757s ago: executing program 1 (id=2013): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x845) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b40)=ANY=[], 0x24}}, 0x2000c004) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x1e, 0x0, 0x101}}) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000300)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)="b3ed03ec7bfba0191cab0788d097eed56afbe923db69efb04418197881157132704176ba3159e322e84a095cb74973f302044a6b56c266c4aae38407da29ef1ce87c4e28fb47751c89858aeb2222be83943199834e594a01e31daf5c242b6108f1d20b36a9cc82823c2781184bfbd7dd93bc7a06b9a0aee848e821efdc2e103903cf0bbf13a93c8f16e9c261577130c2c3b42561f16f873a2401e7ee56ebe397f6db346c67228732398490441e44fdc324d268bfa625", 0xb6}, {&(0x7f0000000340)="56bf382dab3488e617b247360c62e514ba8239398badd8acab5eced966a218d2726ad3259f90a7da79f152ad8785190e1350f227e6d02254f6cc4c2d468b6cdb503ca834e36a57a9b066f5068c9c4da2", 0x50}], 0x2, &(0x7f00000002c0)=[@mark={{0x14, 0x1, 0x24, 0x7f}}], 0x18}, 0x800) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) r5 = add_key(&(0x7f00000009c0)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000580)="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", 0x437, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @multicast2}, 0x10) keyctl$revoke(0x3, r5) io_uring_enter(0xffffffffffffffff, 0x2464, 0x6c1a, 0x0, &(0x7f0000000540)={[0x7fff]}, 0x8) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) close(r4) syz_open_dev$tty1(0xc, 0x4, 0x1) keyctl$join(0x1, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) 11m28.728890549s ago: executing program 36 (id=2013): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x845) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b40)=ANY=[], 0x24}}, 0x2000c004) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x1e, 0x0, 0x101}}) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000300)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)="b3ed03ec7bfba0191cab0788d097eed56afbe923db69efb04418197881157132704176ba3159e322e84a095cb74973f302044a6b56c266c4aae38407da29ef1ce87c4e28fb47751c89858aeb2222be83943199834e594a01e31daf5c242b6108f1d20b36a9cc82823c2781184bfbd7dd93bc7a06b9a0aee848e821efdc2e103903cf0bbf13a93c8f16e9c261577130c2c3b42561f16f873a2401e7ee56ebe397f6db346c67228732398490441e44fdc324d268bfa625", 0xb6}, {&(0x7f0000000340)="56bf382dab3488e617b247360c62e514ba8239398badd8acab5eced966a218d2726ad3259f90a7da79f152ad8785190e1350f227e6d02254f6cc4c2d468b6cdb503ca834e36a57a9b066f5068c9c4da2", 0x50}], 0x2, &(0x7f00000002c0)=[@mark={{0x14, 0x1, 0x24, 0x7f}}], 0x18}, 0x800) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) r5 = add_key(&(0x7f00000009c0)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000580)="5fa0b5cafca58ebb0aee4d280306656adca2e62e4bf0758a2319a4a461c86bbfa913cbc2c1668503938a8645ca5829653e91fe8b5370ac3f4c140c2193faf75efb10e1292908c62d019a7391b74cab034b05d025108e01e6054f09c4eb8c31b7ad9164093c887104156ff54f0d5d2ee81b58c53c59d70b35008d225f25216afda83419542e15ae8f25f116a64a5eac3d55f85c3e4beea643d4980380b75d2ee79a3c5f17d066a41f86cf6de52c35760752f93f84b7e9c1875c31b71efe7ec503f9b7548a53be63ce3cc76622e544f2a1c8cc56b336e734a2ab4b045c53fd408b188d3da1f9f193092c56dd327016dd8c8533425da54fce29d59b6eb06efce4bee6600202ae6b6a996a708eea1465f5e207220bb0e2fb6f1e5622a5ce728844cdfd8bfeb76ac7e9a97e718a3ef06e95f0a01eaa60be21e8259eb1e70cd991ff7abd14783d790aeb2d38af083f0ca60c603aaf7cdcd2b432ba83c203425b2990696d3ef28a825d80ca24d4810a02a468ebc6f3910e3dfa7eadeb4808a6b913da92dcbe842b08b70ef8fcdba80b4b5e2bddf357e763e8dde5df4b1be103e909f912adae3d92a099dd8059af3e48fe11fcc8831022da2bab7f3db95efbac14dc75db5fbaeab27c7a1a4007035837239e7d6eeba46a45d5a9de360054e7f31e91842514fe7d718f906b3fefe8328db5cac35db290be1fa97a16f682c12f78c53e1330fb5b86c4bbcbe50c33adffd1f7762483ee2900b4c856d49fd43c7d93b472023b7fa4462413a2e3e58a24542956e89c8051cbe775246b8b1c910530e1d034433f1a3d37187dd8525992ab82c8fa936c7387c2a38da408781fd3a71bfcced65fe48a6e01053c5b2b2fa5778ddee8070fef2daa704136677643ff05b524bbbb06c60f5209518189b427540f9664fc0303a74b27d36a16b8d1455b0c25916a16c21d33e1aef60c687507038457e807b36f9e48fb95a9fb1bf79e2771d2b329c1c36c9bcd7661341129b7a215dc4caae45256eea5aa5529c3e20243faf15e050641e2b7b7b1e22d93031bd4fcad2290165fd8241c0ccf4bcd74053a197a7fa706accd148140f47cbef568ba4e1ae993f8924c2e19f2f273bf43916d759d6843ca3dd9f4ed8d9d46eb5936de2bef4b81679f23000000007862218db8101b1ef91ee176b5a38a1bff5a8eedd8bb13a0849d8fffa9094da09162791be1e9800aa8ec42affb447ddb42794394707a796d3d9b55485951a16aec1f21b47dbee8970910304846390892320fc506b63afddb67fe18ee90f54a527b0b145dcb1344ab338ddee2e947f64a5413457d61dd158f5c1de20b88ff33bd6ec9dc75761944c5faad39994f87501691f02e2e36d7bb731222013d2edbe0ac2eca106e345c9d7fdbeca68f0ca330675c8dada359a24ea8d3c2f87a5fe093753df5a9a6f91cc5d8ad6ab3952205dd7244f76229a162d6560fe4bbf2359c742a27a6c69bc94029c69ed92b5d5f3b533cf7dcf71132600f528930830929dfb326a42831", 0x437, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @multicast2}, 0x10) keyctl$revoke(0x3, r5) io_uring_enter(0xffffffffffffffff, 0x2464, 0x6c1a, 0x0, &(0x7f0000000540)={[0x7fff]}, 0x8) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) close(r4) syz_open_dev$tty1(0xc, 0x4, 0x1) keyctl$join(0x1, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) 11m28.708702089s ago: executing program 6 (id=2015): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000500)={[{@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_nolock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r0, 0x0, 0x0, 0x8800000) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0xa10408, &(0x7f00000001c0)={[{@nojournal_checksum}, {@dioread_lock}, {@mblk_io_submit}, {}, {@noload}, {@inlinecrypt}, {@debug}, {@usrjquota}]}, 0x3, 0x581, &(0x7f0000000c00)="$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") open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) write$binfmt_misc(r1, &(0x7f0000000340)="be", 0x1) 11m27.714358813s ago: executing program 6 (id=2016): bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x7669, 0xfffffffffffffffe, 0x0, 0x0) 11m27.001497125s ago: executing program 6 (id=2018): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x0, 0x28}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) socket$inet_udp(0x2, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r4) vmsplice(0xffffffffffffffff, &(0x7f0000001440), 0x0, 0x4) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) fallocate(r0, 0x8, 0x4, 0x7) 11m26.556392655s ago: executing program 37 (id=2018): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x0, 0x28}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) socket$inet_udp(0x2, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r4) vmsplice(0xffffffffffffffff, &(0x7f0000001440), 0x0, 0x4) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) fallocate(r0, 0x8, 0x4, 0x7) 8m44.27225275s ago: executing program 9 (id=2438): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) 8m41.042029923s ago: executing program 9 (id=2447): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ea00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2080d6, &(0x7f0000000540), 0x1, 0x4c0, &(0x7f0000000580)="$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") 8m40.628854851s ago: executing program 9 (id=2449): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0xdd, 0xa}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) io_setup(0x202, &(0x7f0000000200)) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r4, 0x0, 0x40400d4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0xfffffffc, 0x0, 'queue1\x00', 0x200000}) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 8m37.02812271s ago: executing program 9 (id=2459): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x8000) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') chdir(&(0x7f0000000040)='./file0\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 8m35.988371736s ago: executing program 9 (id=2461): unshare(0x400) r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x1, 0x80000) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40084149, 0x0) 8m35.579979794s ago: executing program 9 (id=2464): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 8m33.973304975s ago: executing program 38 (id=2464): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 8m6.24491878s ago: executing program 0 (id=2521): socket$nl_route(0x10, 0x3, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000000, 0x820b01) 8m0.864187826s ago: executing program 0 (id=2533): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000001d00)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES64, @ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="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"], 0x1, 0x5e7, &(0x7f0000000680)="$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") listxattr(&(0x7f00000003c0)='./file0\x00', 0x0, 0x1) 7m58.319401599s ago: executing program 0 (id=2538): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = open(&(0x7f0000000380)='./bus\x00', 0xeb40, 0x14) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r4], 0x2b) sendfile(r6, r4, 0x0, 0x4000000053d2) 7m56.802405556s ago: executing program 0 (id=2540): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@init_itable}, {@lazytime}, {@norecovery}]}, 0x2, 0x44e, &(0x7f0000001640)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) 7m53.836315267s ago: executing program 0 (id=2545): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0x7fff) sendto$inet6(r6, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) shutdown(r6, 0x1) 7m53.283481921s ago: executing program 0 (id=2546): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) 7m52.693304728s ago: executing program 39 (id=2546): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) 1m2.907284857s ago: executing program 3 (id=3147): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r5, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) tkill(r4, 0x7) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') 1m1.644559152s ago: executing program 3 (id=3151): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x84) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpu.max.burst\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x5) 58.675107551s ago: executing program 3 (id=3157): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r4, &(0x7f0000000200)=""/202, 0xca) tkill(r3, 0x7) 57.150652907s ago: executing program 3 (id=3158): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff80802840}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x8}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FADVISE={0x18, 0x48, 0x0, @fd_index=0x4, 0x15, 0x0, 0x8, 0x1}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) 53.390237182s ago: executing program 3 (id=3167): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) sendmmsg$sock(r1, &(0x7f0000000380)=[{{&(0x7f0000000100)=@rc={0x1f, @any, 0x80}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)="45ce8dd231776470667b8514963d11f348550bc74f1e0f20d6343dbe2cb0531b8f470e28cf263de6008c170dd996ea368596e28ccd7a7b1008e982035be2e13c91773f28b1b6f2f42b2ebac0de0ebe34b50f09d69f8c306eaa09e897f5f487ee68a74d6b3bf39d", 0x67}, {&(0x7f0000000400)="dafc692602d19cbb9d4b4ddda78c40ff641677be0e846c37fa1bfa8190d1290fc4e2c05c85b7750cb12af0e31fe3cf4fb9091c2813ac524fb2cec75d1981b2c1e232e20f13aec8", 0x47}, {&(0x7f0000000480)="1a2eb667fd0c2575ee13075eb95b17d3bd9a0422d8a1830a937a05a5d18fd01080947809be4d1899163f7af68a6d743f431a82c03db01d2bfdde39b55d147c7c531e", 0x42}], 0x3, &(0x7f00000001c0)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffffa}}], 0x18}}], 0x1, 0x4000000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x8000000, 0x0, 0x1, 0x1}, 0x20) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00010002"], 0x8) 50.720366288s ago: executing program 3 (id=3169): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r0 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0xb5ac, 0x400, 0x0, 0x4003}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) io_uring_enter(r3, 0x3519, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000140)) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60}) 50.096199725s ago: executing program 40 (id=3169): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r0 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0xb5ac, 0x400, 0x0, 0x4003}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) io_uring_enter(r3, 0x3519, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000140)) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60}) 15.317848842s ago: executing program 8 (id=3218): r0 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0xa065, 0x0, 0x0, 0x240024e}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f00000000c0)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r3, 0x628, 0xe656, 0x43, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x1000, 0x800, 0x3}, 0x20) syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1104, 0x0, 0x0, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 15.250335085s ago: executing program 2 (id=3177): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) sendmmsg$sock(r1, &(0x7f0000000380)=[{{&(0x7f0000000100)=@rc={0x1f, @any, 0x80}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)="45ce8dd231776470667b8514963d11f348550bc74f1e0f20d6343dbe2cb0531b8f470e28cf263de6008c170dd996ea368596e28ccd7a7b1008e982035be2e13c91773f28b1b6f2f42b2ebac0de0ebe34b50f09d69f8c306eaa09e897f5f487ee68a74d6b3bf39d", 0x67}, {&(0x7f0000000400)="dafc692602d19cbb9d4b4ddda78c40ff641677be0e846c37fa1bfa8190d1290fc4e2c05c85b7750cb12af0e31fe3cf4fb9091c2813ac524fb2cec75d1981b2c1e232e20f13aec8", 0x47}, {&(0x7f0000000480)="1a2eb667fd0c2575ee13075eb95b17d3bd9a0422d8a1830a937a05a5d18fd01080947809be4d1899163f7af68a6d743f431a82c03db01d2bfdde39b55d147c7c531e", 0x42}], 0x3, &(0x7f00000001c0)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffffa}}], 0x18}}], 0x1, 0x4000000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x8000000, 0x0, 0x1, 0x1}, 0x20) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00010002"], 0x8) 15.118453441s ago: executing program 5 (id=3219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, 0x0, 0x0, 0x280449c, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x40400) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) 12.857147829s ago: executing program 7 (id=3221): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) listen(r0, 0x4) 10.966987842s ago: executing program 5 (id=3222): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x4000003, 0x179}, &(0x7f0000000100)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}, {0x0}], 0x2}) close(0x3) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) 9.752412655s ago: executing program 8 (id=3223): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x400) getsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, 0x0) 9.362089081s ago: executing program 7 (id=3224): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000013) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) 9.185851399s ago: executing program 2 (id=3225): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110009, &(0x7f0000000300)=0xd8}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x98, 0x98, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.116114192s ago: executing program 8 (id=3226): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xd2a727af3cb3995f, &(0x7f0000000900)}, 0x10) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff010}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x1, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x4000000) sendmmsg$inet(r5, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x76ce, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) r10 = socket(0x1e, 0x4, 0x0) r11 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r10, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(0xffffffffffffffff, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x64, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x52, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001042000000000006ba9000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a6000000bf91000000000000b7020000020000008500000085000000b70000"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x1e, &(0x7f00000002c0)=""/30, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x1, 0x9, 0x6}, 0x10, r12, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000006c0)=[{0x1, 0x2, 0xb}], 0x10, 0x1}, 0x94) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) 9.093448803s ago: executing program 7 (id=3227): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r5, &(0x7f0000000200)=""/202, 0xca) tkill(r4, 0x7) 8.419988312s ago: executing program 2 (id=3228): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300, 0x1000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa}]}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) 8.130984625s ago: executing program 2 (id=3229): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r4, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) tkill(r3, 0x7) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') 6.356089282s ago: executing program 2 (id=3230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x280449c, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x40400) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) 5.920613021s ago: executing program 5 (id=3231): r0 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "07ec75e421a88fe11ebf50ebd4ab73d9f56f1e3a096016a603851d8c2d5592e4e497f9cf977f1c25cda1cad3e28c420fadb9b19fb246a69d0d174d36ed97fbcd", 0x1c}, 0x48, 0xffffffffffffffff) keyctl$revoke(0x3, r0) add_key(&(0x7f0000002a00)='rxrpc\x00', 0x0, 0x0, 0x0, r0) 5.402747674s ago: executing program 5 (id=3232): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) listen(r0, 0x4) 4.175382968s ago: executing program 5 (id=3233): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) epoll_create1(0x80000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) read$char_usb(r2, &(0x7f0000000100)=""/177, 0x39) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000280)={0x6, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/173, 0xad}, {&(0x7f00000001c0)=""/160, 0xa0}], &(0x7f0000000140)=[0x8, 0x8], 0x2}, 0x20) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000240001002cbd7000fcdbdf25f8ff000006000300"], 0x3c}}, 0x0) 4.169681658s ago: executing program 7 (id=3234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xf9, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0xd8e, 0x1, 0x9, 0x5, 0x1, 0x37, 0x92fb, 0xc}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4804) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 2.126051937s ago: executing program 2 (id=3235): iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) pipe2$9p(0x0, 0x80800) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x176) umount2(0x0, 0x2) 1.937180085s ago: executing program 8 (id=3236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40900, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2b01, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x9, 0xa6a, 0x6361, 0x805, 0x19, 0x9}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x2000000000000008, 0x0, 0x2, 0xf1df, 0x2}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20048850}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56441, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0x10, 0xb}, {0x3, 0x4}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x9}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x140400a4}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.583660741s ago: executing program 7 (id=3237): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110009, &(0x7f0000000300)=0xd8}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x98, 0x98, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.074483573s ago: executing program 7 (id=3238): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0xf9, 0xc8e}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x24, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}}, 0x24}}, 0x0) io_uring_enter(r3, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r4, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) 1.026171745s ago: executing program 8 (id=3239): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r4, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) tkill(r3, 0x7) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') 5.89228ms ago: executing program 8 (id=3240): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x4000003, 0x179}, &(0x7f0000000100)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}, {0x0}], 0x2}) close(0x3) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) 0s ago: executing program 5 (id=3241): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) listen(r0, 0x4) kernel console output (not intermixed with test programs): =0 gid=0 ses=4294967295 subj=unconfined pid=15074 comm="syz.7.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 923.208098][ T27] audit: type=1326 audit(2000000636.439:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15074 comm="syz.7.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 923.231324][T15073] tap0: tun_chr_ioctl cmd 1074025672 [ 923.231823][ T27] audit: type=1326 audit(2000000636.439:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15074 comm="syz.7.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 923.256591][T15073] tap0: ignored: set checksum enabled [ 923.516561][T15081] loop7: detected capacity change from 0 to 2048 [ 923.894216][T15081] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 925.359048][T15100] loop7: detected capacity change from 0 to 4096 [ 925.359619][T15100] EXT4-fs: Ignoring removed mblk_io_submit option [ 925.359751][T15100] EXT4-fs: Ignoring removed nomblk_io_submit option [ 925.664025][T15090] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2249'. [ 925.688723][T15100] EXT4-fs: Mount option(s) incompatible with ext2 [ 926.280803][T15109] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2268'. [ 926.326316][T15109] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 929.908608][T15158] loop8: detected capacity change from 0 to 128 [ 929.935811][T15158] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 931.252762][T15158] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 931.546340][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 931.546355][ T27] audit: type=1326 audit(2000000644.989:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15170 comm="syz.7.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 931.600758][T13794] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 931.623871][ T27] audit: type=1326 audit(2000000644.989:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15170 comm="syz.7.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 931.700214][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.706801][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.717486][ T27] audit: type=1326 audit(2000000645.039:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15170 comm="syz.7.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 931.820326][ T27] audit: type=1326 audit(2000000645.039:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15170 comm="syz.7.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 931.915512][ T27] audit: type=1326 audit(2000000645.039:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15170 comm="syz.7.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 932.184875][ T27] audit: type=1326 audit(2000000645.039:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15170 comm="syz.7.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 932.434764][ T27] audit: type=1326 audit(2000000645.039:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15170 comm="syz.7.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 932.992410][ T27] audit: type=1326 audit(2000000645.039:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15170 comm="syz.7.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 933.090184][ T27] audit: type=1326 audit(2000000645.039:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15170 comm="syz.7.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 933.271126][ T27] audit: type=1326 audit(2000000645.039:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15170 comm="syz.7.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 935.268171][T15211] loop8: detected capacity change from 0 to 1024 [ 935.317421][T15211] EXT4-fs: Ignoring removed nomblk_io_submit option [ 935.352447][T15211] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 935.387589][T15211] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 935.433060][T15211] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 935.452861][T15211] System zones: 0-1, 3-36 [ 935.488792][T15211] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 935.686082][T13794] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 935.979195][T15227] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2280'. [ 938.948702][T15264] loop7: detected capacity change from 0 to 512 [ 940.215521][T15264] EXT4-fs error (device loop7): ext4_xattr_inode_iget:449: comm syz.7.2298: error while reading EA inode 32 err=-116 [ 940.417014][T15264] EXT4-fs (loop7): 1 orphan inode deleted [ 940.463829][T15264] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 940.644128][T15264] EXT4-fs error (device loop7): ext4_lookup:1862: inode #2: comm syz.7.2298: deleted inode referenced: 15 [ 940.712181][T15273] loop9: detected capacity change from 0 to 512 [ 940.763763][T15273] EXT4-fs: Ignoring removed oldalloc option [ 940.813649][T15273] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 940.861427][T15273] EXT4-fs (loop9): 1 truncate cleaned up [ 940.869179][T13619] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.889719][T15273] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 941.646404][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 941.646419][ T27] audit: type=1326 audit(2000000655.089:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15287 comm="syz.7.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 941.661359][T13837] EXT4-fs error (device loop9): mb_free_blocks:1938: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 941.739390][T15288] loop7: detected capacity change from 0 to 8 [ 941.774361][T15288] unable to read id index table [ 941.786518][ T27] audit: type=1326 audit(2000000655.089:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15287 comm="syz.7.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 941.877535][T13837] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 941.886714][T13108] blk_print_req_error: 4 callbacks suppressed [ 941.886724][T13108] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 941.919237][ T27] audit: type=1326 audit(2000000655.149:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15287 comm="syz.7.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 942.030388][ T27] audit: type=1326 audit(2000000655.149:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15287 comm="syz.7.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 942.053985][ T27] audit: type=1326 audit(2000000655.149:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15287 comm="syz.7.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 942.081785][ T27] audit: type=1326 audit(2000000655.159:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15287 comm="syz.7.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 942.085697][T15295] loop5: detected capacity change from 0 to 512 [ 942.151244][ T27] audit: type=1326 audit(2000000655.159:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15287 comm="syz.7.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 942.193435][ T27] audit: type=1326 audit(2000000655.159:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15287 comm="syz.7.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 942.313304][ T27] audit: type=1326 audit(2000000655.159:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15287 comm="syz.7.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 942.354652][ T27] audit: type=1326 audit(2000000655.159:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15287 comm="syz.7.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 943.074268][T15295] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 943.098902][T15288] loop7: detected capacity change from 0 to 512 [ 943.112563][T15295] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 943.156539][T15295] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 943.160954][T15288] journal_path: Lookup failure for './bus' [ 943.243012][T15295] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 943.262485][T15288] EXT4-fs: error: could not find journal device path [ 943.271221][T15295] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 943.279395][T15295] EXT4-fs (loop5): orphan cleanup on readonly fs [ 943.347772][T15295] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.2300: bg 0: block 34: padding at end of block bitmap is not set [ 943.458264][T15295] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2300: Failed to acquire dquot type 1 [ 943.523057][T15295] EXT4-fs (loop5): 1 truncate cleaned up [ 943.551030][T15295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 943.754592][T15295] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 944.089086][ T6794] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.770853][T15326] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2310'. [ 946.177874][T15340] loop8: detected capacity change from 0 to 128 [ 949.883491][T15375] mmap: syz.5.2322 (15375): VmData 37462016 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 951.090176][ T27] kauditd_printk_skb: 75 callbacks suppressed [ 951.090190][ T27] audit: type=1326 audit(2000000664.529:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15382 comm="syz.7.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 951.152595][ T27] audit: type=1326 audit(2000000664.559:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15382 comm="syz.7.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 952.505025][ T27] audit: type=1326 audit(2000000664.569:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15382 comm="syz.7.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 952.592596][ T27] audit: type=1326 audit(2000000664.569:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15382 comm="syz.7.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 952.683106][ T27] audit: type=1326 audit(2000000664.579:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15382 comm="syz.7.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 952.772926][ T27] audit: type=1326 audit(2000000664.579:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15382 comm="syz.7.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 952.842418][ T27] audit: type=1326 audit(2000000664.579:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15382 comm="syz.7.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 952.916348][ T27] audit: type=1326 audit(2000000664.579:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15382 comm="syz.7.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 952.953371][T15398] loop7: detected capacity change from 0 to 512 [ 953.010826][ T27] audit: type=1326 audit(2000000664.579:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15382 comm="syz.7.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e838f749 code=0x7ffc0000 [ 953.085390][T15398] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.2328: inode has both inline data and extents flags [ 953.177672][T15398] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.2328: couldn't read orphan inode 15 (err -117) [ 953.229340][T15398] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 953.461740][T13619] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.907067][ T27] audit: type=1326 audit(2000000667.349:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15429 comm="syz.8.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 956.511233][T15448] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2333'. [ 957.513205][T15456] loop8: detected capacity change from 0 to 4096 [ 957.520093][T15456] EXT4-fs: Ignoring removed mblk_io_submit option [ 957.526749][T15456] EXT4-fs: Ignoring removed nomblk_io_submit option [ 957.824742][T15456] EXT4-fs: Mount option(s) incompatible with ext2 [ 963.681826][T15507] loop9: detected capacity change from 0 to 4096 [ 963.689007][T15507] EXT4-fs: Ignoring removed mblk_io_submit option [ 963.792525][T15507] EXT4-fs: Ignoring removed nomblk_io_submit option [ 964.015917][T15507] EXT4-fs: Mount option(s) incompatible with ext2 [ 964.649272][T15524] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2349'. [ 965.610644][T15539] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2348'. [ 965.641833][T15537] loop7: detected capacity change from 0 to 512 [ 965.703186][T15537] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 965.766253][T15537] EXT4-fs (loop7): 1 truncate cleaned up [ 965.783719][T15537] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 966.029154][T13619] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 966.279245][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 966.279258][ T27] audit: type=1326 audit(2000000679.719:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15553 comm="syz.9.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c29b8f749 code=0x7ffc0000 [ 966.319610][T15556] loop9: detected capacity change from 0 to 512 [ 966.353191][ T27] audit: type=1326 audit(2000000679.739:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15553 comm="syz.9.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c29b8f749 code=0x7ffc0000 [ 966.439953][T15556] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 966.457464][ T27] audit: type=1326 audit(2000000679.759:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15553 comm="syz.9.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5c29b8f749 code=0x7ffc0000 [ 966.573393][ T27] audit: type=1326 audit(2000000679.759:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15553 comm="syz.9.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c29b8f749 code=0x7ffc0000 [ 966.689277][ T27] audit: type=1326 audit(2000000679.759:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15553 comm="syz.9.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c29b8f749 code=0x7ffc0000 [ 966.752535][ T27] audit: type=1326 audit(2000000679.759:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15553 comm="syz.9.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5c29b8f749 code=0x7ffc0000 [ 967.786776][T15567] loop7: detected capacity change from 0 to 4096 [ 967.793784][T15567] EXT4-fs: Ignoring removed mblk_io_submit option [ 967.800330][T15567] EXT4-fs: Ignoring removed nomblk_io_submit option [ 968.095723][T15567] EXT4-fs: Mount option(s) incompatible with ext2 [ 968.156017][ T27] audit: type=1326 audit(2000000679.759:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15553 comm="syz.9.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5c29b8f783 code=0x7ffc0000 [ 968.203266][ T27] audit: type=1326 audit(2000000679.759:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15553 comm="syz.9.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5c29b8e1ff code=0x7ffc0000 [ 968.332807][ T27] audit: type=1326 audit(2000000679.759:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15553 comm="syz.9.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5c29b8f7d7 code=0x7ffc0000 [ 968.355222][ T27] audit: type=1326 audit(2000000679.759:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15553 comm="syz.9.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5c29b8df90 code=0x7ffc0000 [ 968.558930][T15572] bridge_slave_0: left allmulticast mode [ 968.611167][T15572] bridge_slave_0: left promiscuous mode [ 968.641807][T15572] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.668708][T15572] bridge_slave_1: left allmulticast mode [ 968.694185][T15572] bridge_slave_1: left promiscuous mode [ 968.710288][T15572] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.753537][T15572] bond0: (slave bond_slave_0): Releasing backup interface [ 968.779195][T15572] bond0: (slave bond_slave_1): Releasing backup interface [ 968.887506][T15572] team0: Port device team_slave_0 removed [ 968.931917][T15572] team0: Port device team_slave_1 removed [ 968.964365][T15572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 968.971841][T15572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 968.991317][T15572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 969.010146][T15572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 969.331697][T15587] loop5: detected capacity change from 0 to 4096 [ 969.438706][T15587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 970.423064][T15608] loop9: detected capacity change from 0 to 1024 [ 970.430560][T15608] EXT4-fs: Ignoring removed bh option [ 970.447179][T15608] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 970.981633][T15605] loop8: detected capacity change from 0 to 4096 [ 970.988938][T15605] EXT4-fs: Ignoring removed mblk_io_submit option [ 970.996055][T15605] EXT4-fs: Ignoring removed nomblk_io_submit option [ 971.274627][T15605] EXT4-fs: Mount option(s) incompatible with ext2 [ 971.392166][T15608] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 971.490635][ T6794] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 971.534504][T15608] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4031: comm syz.9.2364: Allocating blocks 385-513 which overlap fs metadata [ 971.613664][T15613] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2363'. [ 971.637160][T15608] EXT4-fs (loop9): pa ffff888079793488: logic 16, phys. 129, len 24 [ 971.646246][T15608] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 971.956453][T13837] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.872537][T13798] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 975.311519][T13798] usb 9-1: unable to get BOS descriptor or descriptor too short [ 975.461417][T13798] usb 9-1: not running at top speed; connect to a high speed hub [ 975.878134][T13798] usb 9-1: config 5 has an invalid interface number: 47 but max is 0 [ 975.892377][T13798] usb 9-1: config 5 has no interface number 0 [ 975.905898][T13798] usb 9-1: New USB device found, idVendor=19d2, idProduct=ffb8, bcdDevice=60.a2 [ 975.933024][T13798] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.941101][T13798] usb 9-1: Product: syz [ 975.982434][T13798] usb 9-1: Manufacturer: syz [ 976.003219][T13798] usb 9-1: SerialNumber: syz [ 976.744903][T15673] loop5: detected capacity change from 0 to 4096 [ 976.751919][T15673] EXT4-fs: Ignoring removed mblk_io_submit option [ 976.758611][T15673] EXT4-fs: Ignoring removed nomblk_io_submit option [ 977.253175][T15673] EXT4-fs: Mount option(s) incompatible with ext2 [ 977.270556][T13798] usb 9-1: USB disconnect, device number 2 [ 977.426108][T13022] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 977.972572][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 977.972587][ T27] audit: type=1326 audit(2000000691.399:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15689 comm="syz.8.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 978.178488][ T27] audit: type=1326 audit(2000000691.399:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15689 comm="syz.8.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 978.201083][ T27] audit: type=1326 audit(2000000691.419:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15689 comm="syz.8.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 978.224526][ T27] audit: type=1326 audit(2000000691.419:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15689 comm="syz.8.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 978.247380][ T27] audit: type=1326 audit(2000000691.419:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15689 comm="syz.8.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 978.274645][ T27] audit: type=1326 audit(2000000691.419:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15689 comm="syz.8.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 978.308001][ T27] audit: type=1326 audit(2000000691.419:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15689 comm="syz.8.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 978.330759][ T27] audit: type=1326 audit(2000000691.419:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15689 comm="syz.8.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 978.382461][ T27] audit: type=1326 audit(2000000691.419:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15689 comm="syz.8.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 980.361752][T15728] loop9: detected capacity change from 0 to 4096 [ 980.368769][T15728] EXT4-fs: Ignoring removed mblk_io_submit option [ 980.375381][T15728] EXT4-fs: Ignoring removed nomblk_io_submit option [ 981.348555][T15728] EXT4-fs: Mount option(s) incompatible with ext2 [ 981.561326][T15735] loop5: detected capacity change from 0 to 1024 [ 981.793649][T15735] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 981.966059][ T6794] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.179505][T15755] pimreg: entered allmulticast mode [ 983.212540][T15755] pimreg: left allmulticast mode [ 984.805640][T15793] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2394'. [ 986.902180][ T27] audit: type=1326 audit(2000000700.339:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15823 comm="syz.9.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c29b8f749 code=0x7ffc0000 [ 987.037128][ T27] audit: type=1326 audit(2000000700.339:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15823 comm="syz.9.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c29b8f749 code=0x7ffc0000 [ 987.127895][ T27] audit: type=1326 audit(2000000700.389:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15823 comm="syz.9.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5c29b8f749 code=0x7ffc0000 [ 987.187230][ T27] audit: type=1326 audit(2000000700.389:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15823 comm="syz.9.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c29b8f749 code=0x7ffc0000 [ 987.257945][ T27] audit: type=1326 audit(2000000700.389:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15823 comm="syz.9.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c29b8f749 code=0x7ffc0000 [ 987.294609][ T27] audit: type=1326 audit(2000000700.389:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15823 comm="syz.9.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f5c29b8f749 code=0x7ffc0000 [ 987.323427][ T27] audit: type=1326 audit(2000000700.389:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15823 comm="syz.9.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c29b8f749 code=0x7ffc0000 [ 987.436240][ T27] audit: type=1326 audit(2000000700.389:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15823 comm="syz.9.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f5c29b8f749 code=0x7ffc0000 [ 987.544681][ T27] audit: type=1326 audit(2000000700.389:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15823 comm="syz.9.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c29b8f749 code=0x7ffc0000 [ 988.892166][ T27] audit: type=1326 audit(2000000700.389:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15823 comm="syz.9.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f5c29b8f749 code=0x7ffc0000 [ 989.063023][T15850] netlink: 180 bytes leftover after parsing attributes in process `syz.9.2406'. [ 989.171553][T15855] netlink: 180 bytes leftover after parsing attributes in process `syz.9.2406'. [ 989.849319][T15850] netlink: 180 bytes leftover after parsing attributes in process `syz.9.2406'. [ 990.327824][T15877] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2414'. [ 992.153684][ T27] kauditd_printk_skb: 42 callbacks suppressed [ 992.153698][ T27] audit: type=1326 audit(2000000705.599:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15890 comm="syz.8.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 992.731709][ T27] audit: type=1326 audit(2000000705.599:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15890 comm="syz.8.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 992.913882][ T27] audit: type=1326 audit(2000000705.679:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15890 comm="syz.8.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 992.967365][ T27] audit: type=1326 audit(2000000705.679:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15890 comm="syz.8.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 993.050936][ T27] audit: type=1326 audit(2000000705.679:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15890 comm="syz.8.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 993.099274][ T27] audit: type=1326 audit(2000000705.679:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15890 comm="syz.8.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 993.126584][ T27] audit: type=1326 audit(2000000705.689:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15890 comm="syz.8.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 993.157844][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.164395][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.190887][ T27] audit: type=1326 audit(2000000705.689:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15890 comm="syz.8.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 993.612421][ T8] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 993.780721][T15910] loop9: detected capacity change from 0 to 1024 [ 993.803579][ T8] usb 9-1: not running at top speed; connect to a high speed hub [ 993.818149][ T8] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 993.832406][ T8] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 993.844838][ T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.862477][ T8] usb 9-1: Product: syz [ 993.868134][ T8] usb 9-1: Manufacturer: syz [ 993.873061][ T8] usb 9-1: SerialNumber: syz [ 994.100175][ T8] cdc_ncm 9-1:1.0: bind() failure [ 994.117331][ T8] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 994.134211][ T8] cdc_ncm 9-1:1.1: bind() failure [ 994.156333][ T8] usb 9-1: USB disconnect, device number 3 [ 994.508232][T15929] loop9: detected capacity change from 0 to 16 [ 994.524762][T15929] erofs: (device loop9): mounted with root inode @ nid 36. [ 995.663046][ T27] audit: type=1326 audit(2000000709.099:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15939 comm="syz.8.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 995.698546][ T27] audit: type=1326 audit(2000000709.099:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15939 comm="syz.8.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 995.962113][T15947] loop9: detected capacity change from 0 to 256 [ 997.609581][T15957] loop8: detected capacity change from 0 to 512 [ 997.710669][T15957] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #17: comm syz.8.2434: iget: immutable or append flags not allowed on symlinks [ 997.788018][T15957] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.2434: couldn't read orphan inode 17 (err -117) [ 997.837829][T15957] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 998.776684][T13794] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.019001][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 999.019015][ T27] audit: type=1326 audit(2000000712.459:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15977 comm="syz.8.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 999.182547][ T27] audit: type=1326 audit(2000000712.489:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15977 comm="syz.8.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 999.271719][ T27] audit: type=1326 audit(2000000712.489:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15977 comm="syz.8.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 999.294623][ T27] audit: type=1326 audit(2000000712.489:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15977 comm="syz.8.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 999.322986][ T27] audit: type=1326 audit(2000000712.489:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15977 comm="syz.8.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 999.346155][ T27] audit: type=1326 audit(2000000712.489:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15977 comm="syz.8.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 999.393988][ T27] audit: type=1326 audit(2000000712.489:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15977 comm="syz.8.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 1001.020196][T16005] loop9: detected capacity change from 0 to 512 [ 1001.081317][T16005] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #17: comm syz.9.2447: iget: immutable or append flags not allowed on symlinks [ 1001.144321][T16005] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.2447: couldn't read orphan inode 17 (err -117) [ 1001.176519][T16005] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1001.336285][T13837] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.141499][T16045] loop8: detected capacity change from 0 to 128 [ 1006.240349][T16045] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1006.322228][T16045] ext4 filesystem being mounted at /106/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1006.505937][T13794] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1006.632169][ T79] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.164837][T16054] kvm: user requested TSC rate below hardware speed [ 1008.174404][ T79] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.277819][T16054] kvm: pic: single mode not supported [ 1008.278321][T16054] kvm: pic: non byte read [ 1008.342925][T16054] kvm: pic: non byte write [ 1008.347476][T16054] kvm: pic: non byte read [ 1008.351979][T16054] kvm: pic: non byte write [ 1008.368804][T16054] kvm: pic: non byte read [ 1008.374832][ T79] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.395113][T16054] kvm: pic: non byte write [ 1008.399644][T16054] kvm: pic: non byte read [ 1008.410246][T16054] kvm: pic: non byte write [ 1008.419731][T16054] kvm: pic: non byte read [ 1008.425752][T16054] kvm: pic: non byte write [ 1008.436596][T16054] kvm: pic: non byte read [ 1008.441211][T16054] kvm: pic: non byte write [ 1008.449962][T16054] kvm: pic: non byte read [ 1008.488802][ T79] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.506704][T16054] kvm: pic: non byte write [ 1008.511235][T16054] kvm: pic: non byte read [ 1008.532717][T16054] kvm: pic: non byte write [ 1008.546045][T16054] kvm: pic: non byte read [ 1008.572587][T16054] kvm: pic: non byte write [ 1008.578207][T16054] kvm: pic: non byte read [ 1008.623061][T16054] kvm: pic: non byte write [ 1008.861284][T13620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1008.871175][T13620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1008.881272][T13620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1009.201921][T13620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1009.215140][T13620] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1009.225494][T13620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1009.362743][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1009.430311][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1009.456906][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1009.484145][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1009.491943][ T5799] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1009.500242][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1010.117977][T16080] loop7: detected capacity change from 0 to 8 [ 1010.320177][T16080] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1010.328546][T16080] SQUASHFS error: Failed to read block 0x82: -5 [ 1010.334969][T16080] SQUASHFS error: Unable to read metadata cache entry [80] [ 1010.342323][T16080] SQUASHFS error: Unable to read inode 0x11f [ 1010.804057][ T27] audit: type=1326 audit(2000000724.239:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16081 comm="syz.8.2470" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcb8ff8f749 code=0x0 [ 1010.989930][T16062] chnl_net:caif_netlink_parms(): no params data found [ 1011.173806][T16062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.181013][T16062] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.188331][T16062] bridge_slave_0: entered allmulticast mode [ 1011.198131][T16062] bridge_slave_0: entered promiscuous mode [ 1011.206402][T16062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.213573][T16062] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.220717][T16062] bridge_slave_1: entered allmulticast mode [ 1011.228393][T16062] bridge_slave_1: entered promiscuous mode [ 1011.277348][T16062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1011.319002][T16062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1011.359298][T16062] team0: Port device team_slave_0 added [ 1011.445062][T16062] team0: Port device team_slave_1 added [ 1011.635139][T13620] Bluetooth: hci0: command tx timeout [ 1012.444288][T16062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1012.454919][T16062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1013.699793][T13620] Bluetooth: hci0: command tx timeout [ 1013.706373][T16062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1013.778286][T16062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1013.789962][T16062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1014.315657][T16062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1014.875189][ T79] hsr_slave_0: left promiscuous mode [ 1014.975111][ T79] hsr_slave_1: left promiscuous mode [ 1015.077999][ T79] veth1_macvtap: left promiscuous mode [ 1015.083737][ T79] veth0_macvtap: left promiscuous mode [ 1015.089376][ T79] veth1_vlan: left promiscuous mode [ 1015.105467][ T79] veth0_vlan: left promiscuous mode [ 1015.318477][T16143] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2479'. [ 1015.776201][T13620] Bluetooth: hci0: command tx timeout [ 1017.853048][T13620] Bluetooth: hci0: command tx timeout [ 1018.130982][T16152] loop8: detected capacity change from 0 to 4096 [ 1018.137977][T16152] EXT4-fs: Ignoring removed mblk_io_submit option [ 1018.144646][T16152] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1018.197352][T16152] EXT4-fs: Mount option(s) incompatible with ext2 [ 1018.798493][ T79] bond0 (unregistering): Released all slaves [ 1020.660722][T16062] hsr_slave_0: entered promiscuous mode [ 1020.766925][T16062] hsr_slave_1: entered promiscuous mode [ 1020.791914][T16166] binder: 16165:16166 unknown command 1074553619 [ 1020.800345][T16166] binder: 16165:16166 ioctl c0306201 200000000040 returned -22 [ 1020.811025][T16062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1020.836064][T16062] Cannot create hsr debugfs directory [ 1021.942386][T16187] loop5: detected capacity change from 0 to 4096 [ 1021.951260][T16187] EXT4-fs: Ignoring removed mblk_io_submit option [ 1021.958604][T16187] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1022.098894][T16187] EXT4-fs: Mount option(s) incompatible with ext2 [ 1022.780312][T16199] loop5: detected capacity change from 0 to 512 [ 1022.941507][T16199] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2249: inode #15: comm syz.5.2493: corrupted in-inode xattr: invalid ea_ino [ 1022.965751][T16204] input: syz0 as /devices/virtual/input/input14 [ 1022.970585][T16199] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2493: couldn't read orphan inode 15 (err -117) [ 1023.010980][T16199] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1023.776599][ T6794] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.971418][T16222] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2497'. [ 1024.994974][T16224] loop8: detected capacity change from 0 to 512 [ 1025.087850][T16224] EXT4-fs (loop8): 1 truncate cleaned up [ 1025.119938][T16224] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1025.996171][T16206] EXT4-fs error (device loop8): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 1026.091318][T13794] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.233959][T16255] loop8: detected capacity change from 0 to 4096 [ 1028.378935][T16255] EXT4-fs: Ignoring removed mblk_io_submit option [ 1028.386208][T16255] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1028.398998][T16255] EXT4-fs: Mount option(s) incompatible with ext2 [ 1028.894916][T16062] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1028.940688][T16062] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1028.975523][T16263] loop5: detected capacity change from 0 to 1024 [ 1028.988432][T16062] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1029.046839][T16263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1029.062107][T16062] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1029.125019][T16263] EXT4-fs error (device loop5): ext4_lookup:1858: comm syz.5.2506: inode #12: comm syz.5.2506: iget: illegal inode # [ 1029.326188][ T6794] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.337234][T16062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.442718][T16062] 8021q: adding VLAN 0 to HW filter on device team0 [ 1029.494572][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.501707][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.542521][ T27] audit: type=1326 audit(2000000742.979:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16275 comm="syz.5.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5358f749 code=0x7ffc0000 [ 1029.578116][ T27] audit: type=1326 audit(2000000742.979:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16275 comm="syz.5.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5358f749 code=0x7ffc0000 [ 1029.580539][T12929] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.607670][T12929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.643894][ T27] audit: type=1326 audit(2000000743.019:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16275 comm="syz.5.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7d5358f749 code=0x7ffc0000 [ 1029.692844][ T27] audit: type=1326 audit(2000000743.019:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16275 comm="syz.5.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5358f749 code=0x7ffc0000 [ 1029.836186][ T27] audit: type=1326 audit(2000000743.019:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16275 comm="syz.5.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5358f749 code=0x7ffc0000 [ 1030.025137][ T27] audit: type=1326 audit(2000000743.059:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16275 comm="syz.5.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f7d5358f749 code=0x7ffc0000 [ 1030.174014][ T27] audit: type=1326 audit(2000000743.059:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16275 comm="syz.5.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5358f749 code=0x7ffc0000 [ 1030.715595][ T27] audit: type=1326 audit(2000000743.059:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16275 comm="syz.5.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5358f749 code=0x7ffc0000 [ 1031.969453][T16307] loop7: detected capacity change from 0 to 4096 [ 1031.978596][T16307] EXT4-fs: Ignoring removed mblk_io_submit option [ 1031.985837][T16307] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1032.287406][T16307] EXT4-fs: Mount option(s) incompatible with ext2 [ 1032.389529][T16062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1032.544027][T16062] veth0_vlan: entered promiscuous mode [ 1032.619702][T16062] veth1_vlan: entered promiscuous mode [ 1032.731383][T16314] loop8: detected capacity change from 0 to 1024 [ 1032.783302][T16314] EXT4-fs (loop8): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 1032.802365][T16062] veth0_macvtap: entered promiscuous mode [ 1032.814458][T16314] EXT4-fs (loop8): can't mount with both data=journal and delalloc [ 1032.858733][T16062] veth1_macvtap: entered promiscuous mode [ 1032.937624][T16062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.979095][T16062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.035017][T16062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.083825][T16062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.122451][T16062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.156953][T16062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.204981][T16062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1033.262701][T16062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.301114][T16062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.303266][T16320] loop8: detected capacity change from 0 to 1024 [ 1033.337120][T16062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.362849][T16062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.407984][T16062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.439216][T16062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.468260][T16062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1033.510354][ T27] audit: type=1804 audit(2000000746.949:722): pid=16320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2516" name="/newroot/128/file1/file1" dev="loop8" ino=20 res=1 errno=0 [ 1033.534579][T16062] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.558943][T16062] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.582635][T16062] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.611885][T16062] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.952735][T12929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.960580][T12929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.073369][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1034.097355][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1036.546121][T16343] loop8: detected capacity change from 0 to 4096 [ 1036.555235][T16343] EXT4-fs: Ignoring removed mblk_io_submit option [ 1036.562259][T16343] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1036.623595][T16343] EXT4-fs: Mount option(s) incompatible with ext2 [ 1037.649016][ T27] audit: type=1326 audit(2000000751.079:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16361 comm="syz.5.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5358f749 code=0x7ffc0000 [ 1037.724115][ T27] audit: type=1326 audit(2000000751.079:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16361 comm="syz.5.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5358f749 code=0x7ffc0000 [ 1037.816659][ T27] audit: type=1326 audit(2000000751.129:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16361 comm="syz.5.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f7d5358f749 code=0x7ffc0000 [ 1037.900737][ T27] audit: type=1326 audit(2000000751.129:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16361 comm="syz.5.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5358f749 code=0x7ffc0000 [ 1037.949563][ T27] audit: type=1326 audit(2000000751.129:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16361 comm="syz.5.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5358f749 code=0x7ffc0000 [ 1043.349269][T16417] loop0: detected capacity change from 0 to 1024 [ 1043.723719][T16421] loop8: detected capacity change from 0 to 256 [ 1043.760156][T16421] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1045.191107][T16428] loop5: detected capacity change from 0 to 4096 [ 1045.198393][T16428] EXT4-fs: Ignoring removed mblk_io_submit option [ 1045.205025][T16428] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1045.223364][T16428] EXT4-fs: Mount option(s) incompatible with ext2 [ 1046.072461][T13022] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1046.286419][T16439] loop0: detected capacity change from 0 to 512 [ 1046.357859][T16439] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2249: inode #15: comm syz.0.2540: corrupted in-inode xattr: invalid size in ea xattr [ 1047.636618][T16439] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.2540: couldn't read orphan inode 15 (err -117) [ 1047.738317][T16439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1048.048333][T16062] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 1048.108600][T16062] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15 [ 1048.143307][T16062] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15 [ 1048.533804][T16448] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.798339][ T2990] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.066609][ T2990] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.320261][ T2990] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.230762][ T2990] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.016724][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1052.028761][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1052.042490][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1052.082550][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1052.102632][ T5799] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1052.122673][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1053.267281][T16499] loop8: detected capacity change from 0 to 4096 [ 1053.333308][T16499] EXT4-fs: Ignoring removed mblk_io_submit option [ 1053.372695][T16499] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1053.709074][T16499] EXT4-fs: Mount option(s) incompatible with ext2 [ 1053.770839][T16524] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1053.786085][T16524] Bluetooth: MGMT ver 1.22 [ 1054.284133][T13620] Bluetooth: hci0: command tx timeout [ 1054.597134][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.603636][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.812647][T13620] Bluetooth: hci0: command tx timeout [ 1056.867426][T16539] loop5: detected capacity change from 0 to 256 [ 1057.016849][T16502] chnl_net:caif_netlink_parms(): no params data found [ 1057.024928][T16539] FAT-fs (loop5): Directory bread(block 64) failed [ 1057.068328][T16539] FAT-fs (loop5): Directory bread(block 65) failed [ 1057.102900][T16539] FAT-fs (loop5): Directory bread(block 66) failed [ 1057.109908][T16539] FAT-fs (loop5): Directory bread(block 67) failed [ 1057.152770][T16539] FAT-fs (loop5): Directory bread(block 68) failed [ 1057.172100][T16539] FAT-fs (loop5): Directory bread(block 69) failed [ 1057.212507][T16539] FAT-fs (loop5): Directory bread(block 70) failed [ 1057.240726][T16539] FAT-fs (loop5): Directory bread(block 71) failed [ 1057.342459][T16539] FAT-fs (loop5): Directory bread(block 72) failed [ 1057.349040][T16539] FAT-fs (loop5): Directory bread(block 73) failed [ 1059.181105][T13620] Bluetooth: hci0: command tx timeout [ 1059.194369][T16502] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.203225][T16502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.302579][T16502] bridge_slave_0: entered allmulticast mode [ 1059.345168][T16502] bridge_slave_0: entered promiscuous mode [ 1059.472910][T16502] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.480084][T16502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.531693][T16502] bridge_slave_1: entered allmulticast mode [ 1059.563702][T16502] bridge_slave_1: entered promiscuous mode [ 1059.821254][T16502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1059.975956][T16574] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1060.819907][ T27] audit: type=1326 audit(2000000774.259:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16577 comm="syz.8.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 1060.847134][ T27] audit: type=1326 audit(2000000774.259:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16577 comm="syz.8.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 1060.877070][T16502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1060.886536][ T27] audit: type=1326 audit(2000000774.279:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16577 comm="syz.8.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 1060.988020][ T27] audit: type=1326 audit(2000000774.279:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16577 comm="syz.8.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 1061.229587][ T27] audit: type=1326 audit(2000000774.279:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16577 comm="syz.8.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 1061.253018][T13620] Bluetooth: hci0: command tx timeout [ 1061.258996][ T27] audit: type=1326 audit(2000000774.279:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16577 comm="syz.8.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 1061.281709][ T27] audit: type=1326 audit(2000000774.279:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16577 comm="syz.8.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 1063.138462][T16502] team0: Port device team_slave_0 added [ 1063.493453][T16502] team0: Port device team_slave_1 added [ 1065.150530][T16502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1065.192635][T16502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1065.262358][T16502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1065.284827][T16502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1065.291821][T16502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1065.336444][T16613] loop7: detected capacity change from 0 to 256 [ 1065.362786][T16502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1065.412805][ T27] audit: type=1800 audit(2000000778.849:735): pid=16613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2570" name="file1" dev="loop7" ino=1048647 res=0 errno=0 [ 1066.554541][ T27] audit: type=1326 audit(2000000779.999:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16619 comm="syz.8.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 1066.652359][ T27] audit: type=1326 audit(2000000779.999:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16619 comm="syz.8.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 1066.703623][ T2990] hsr_slave_0: left promiscuous mode [ 1066.718865][ T27] audit: type=1326 audit(2000000779.999:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16619 comm="syz.8.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb8ff8df90 code=0x7ffc0000 [ 1066.742439][ T2990] hsr_slave_1: left promiscuous mode [ 1066.756486][ T27] audit: type=1326 audit(2000000779.999:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16619 comm="syz.8.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb8ff8df90 code=0x7ffc0000 [ 1066.779489][ T27] audit: type=1326 audit(2000000779.999:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16619 comm="syz.8.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 1066.779557][ T2990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1066.852620][ T27] audit: type=1326 audit(2000000779.999:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16619 comm="syz.8.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 1066.856211][ T2990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1066.911946][ T27] audit: type=1326 audit(2000000779.999:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16619 comm="syz.8.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 1066.947703][ T2990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1066.969040][ T27] audit: type=1326 audit(2000000779.999:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16619 comm="syz.8.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 1066.969784][ T2990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1067.032426][ T27] audit: type=1326 audit(2000000779.999:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16619 comm="syz.8.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 1067.097648][ T27] audit: type=1326 audit(2000000779.999:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16619 comm="syz.8.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8ff8f749 code=0x7ffc0000 [ 1067.151553][ T2990] bridge_slave_1: left allmulticast mode [ 1067.190422][ T2990] bridge_slave_1: left promiscuous mode [ 1067.196315][ T2990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.205984][ T2990] bridge_slave_0: left allmulticast mode [ 1067.211700][ T2990] bridge_slave_0: left promiscuous mode [ 1067.453116][T16634] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1067.766864][ T2990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.757799][T16642] loop7: detected capacity change from 0 to 8 [ 1068.805730][T16642] squashfs: Unknown parameter 'ug 5D`' [ 1069.131005][ T2990] veth1_macvtap: left promiscuous mode [ 1069.156521][ T2990] veth0_macvtap: left promiscuous mode [ 1069.203004][ T2990] veth1_vlan: left promiscuous mode [ 1069.241080][ T2990] veth0_vlan: left promiscuous mode [ 1070.088900][T13022] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1071.355736][T16644] loop5: detected capacity change from 0 to 4096 [ 1071.362715][T16644] EXT4-fs: Ignoring removed mblk_io_submit option [ 1071.369270][T16644] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1071.377441][T16644] EXT4-fs: Mount option(s) incompatible with ext2 [ 1071.724684][ T2990] team0 (unregistering): Port device team_slave_1 removed [ 1071.777223][ T2990] team0 (unregistering): Port device team_slave_0 removed [ 1071.825203][ T2990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1071.883757][ T2990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1072.522445][ T2990] bond0 (unregistering): Released all slaves [ 1072.604043][T16502] hsr_slave_0: entered promiscuous mode [ 1072.610676][T16502] hsr_slave_1: entered promiscuous mode [ 1072.617511][T16502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1072.628231][T16502] Cannot create hsr debugfs directory [ 1077.260330][T16502] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1077.748260][T16502] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1077.862151][T16502] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1077.922992][T16502] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1079.273427][T16502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1079.384586][T16502] 8021q: adding VLAN 0 to HW filter on device team0 [ 1079.436253][T11880] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.443481][T11880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1079.497705][T16693] loop8: detected capacity change from 0 to 4096 [ 1079.505658][T11880] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.512838][T11880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1079.595334][T16693] EXT4-fs: Ignoring removed mblk_io_submit option [ 1079.601907][T16693] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1079.703240][T16715] loop5: detected capacity change from 0 to 256 [ 1079.790753][T16693] EXT4-fs: Mount option(s) incompatible with ext2 [ 1079.799112][ T27] audit: type=1800 audit(2000000793.229:746): pid=16715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2586" name="file1" dev="loop5" ino=1048648 res=0 errno=0 [ 1081.374121][T16735] loop8: detected capacity change from 0 to 8 [ 1081.386260][T16735] squashfs: Unknown parameter 'ug 5D`' [ 1082.113669][T16502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1082.778766][T16502] veth0_vlan: entered promiscuous mode [ 1082.848764][T16502] veth1_vlan: entered promiscuous mode [ 1082.910991][T16502] veth0_macvtap: entered promiscuous mode [ 1082.949964][T16502] veth1_macvtap: entered promiscuous mode [ 1083.044344][T16502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1085.432363][T16502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.442196][T16502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1085.577347][T16502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.588302][T16502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1085.599607][T16502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.611734][T16502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1085.634626][T16502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1085.645566][T16502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.658524][T16502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1085.702409][T16502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.722402][T16502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1085.753266][T16502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.766772][T16502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1085.819536][T16502] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.862389][T16502] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.886083][T16502] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.939567][T16502] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.302958][ T2990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.310824][ T2990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.464424][T12368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.482354][T12368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.032687][T13798] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1087.222821][T13798] usb 6-1: Using ep0 maxpacket: 32 [ 1087.239952][T13798] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.270762][T13798] usb 6-1: New USB device found, idVendor=0df6, idProduct=0061, bcdDevice=d3.bf [ 1087.281046][T13798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.291025][T13798] usb 6-1: Product: syz [ 1087.296758][T13798] usb 6-1: Manufacturer: syz [ 1087.306796][T13798] usb 6-1: SerialNumber: syz [ 1087.337640][T13798] usb 6-1: config 0 descriptor?? [ 1088.716359][T16790] loop8: detected capacity change from 0 to 4096 [ 1088.723554][T16790] EXT4-fs: Ignoring removed mblk_io_submit option [ 1088.730120][T16790] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1088.751778][T16790] EXT4-fs: Mount option(s) incompatible with ext2 [ 1088.867997][T13108] I/O error, dev loop8, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1090.346139][T14321] usb 6-1: USB disconnect, device number 18 [ 1092.782271][T16812] loop3: detected capacity change from 0 to 8 [ 1092.791407][T16812] squashfs: Unknown parameter 'ug 5D`' [ 1094.442548][T13108] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1096.088208][T16828] loop3: detected capacity change from 0 to 4096 [ 1096.097464][T16828] EXT4-fs: Ignoring removed mblk_io_submit option [ 1096.104752][T16828] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1096.429840][T16828] EXT4-fs: Mount option(s) incompatible with ext2 [ 1096.527614][T16829] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2606'. [ 1097.320464][T16843] loop7: detected capacity change from 0 to 256 [ 1097.352242][T16843] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1097.385663][ T27] audit: type=1800 audit(2000000810.829:747): pid=16843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2608" name="file1" dev="loop7" ino=1048652 res=0 errno=0 [ 1097.454100][T16845] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779264) [ 1097.586981][T16845] FAT-fs (loop7): Filesystem has been set read-only [ 1098.073115][T16858] loop3: detected capacity change from 0 to 512 [ 1098.187365][T16858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1098.200521][T16858] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1099.752535][ T27] audit: type=1800 audit(2000000812.269:748): pid=16858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2607" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 1099.834959][T16502] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1101.161880][T16883] loop3: detected capacity change from 0 to 4096 [ 1101.168821][T16883] EXT4-fs: Ignoring removed mblk_io_submit option [ 1101.175469][T16883] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1101.412137][T16889] loop8: detected capacity change from 0 to 512 [ 1101.422134][T16889] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1101.442755][T16889] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1101.444457][T16883] EXT4-fs: Mount option(s) incompatible with ext2 [ 1101.456801][T16889] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1101.473592][T16889] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 1101.508107][T16889] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 1101.572765][T16889] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1101.636034][T16889] EXT4-fs error (device loop8): ext4_validate_block_bitmap:439: comm syz.8.2616: bg 0: block 34: padding at end of block bitmap is not set [ 1101.724294][T16889] Quota error (device loop8): write_blk: dquota write failed [ 1101.754933][T16889] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1101.803900][T16889] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.2616: Failed to acquire dquot type 1 [ 1101.874145][T16889] EXT4-fs (loop8): 1 truncate cleaned up [ 1101.891158][T16889] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1102.081725][T13794] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1102.316369][T16905] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2619'. [ 1105.281897][T16927] loop3: detected capacity change from 0 to 4096 [ 1105.349005][T16927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1105.718937][T16502] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1106.228076][T16944] loop8: detected capacity change from 0 to 1024 [ 1106.259032][T16944] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1107.091787][T16937] loop7: detected capacity change from 0 to 4096 [ 1107.098719][T16937] EXT4-fs: Ignoring removed mblk_io_submit option [ 1107.105327][T16937] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1107.306222][T16937] EXT4-fs: Mount option(s) incompatible with ext2 [ 1107.313982][T16944] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1107.500832][T16944] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1107.555979][T16944] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2627'. [ 1107.687850][T13794] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.725159][T16957] loop5: detected capacity change from 0 to 256 [ 1107.847549][T16957] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 1107.938572][T16961] loop8: detected capacity change from 0 to 256 [ 1108.009935][T16961] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1108.115090][T16961] syz.8.2632: attempt to access beyond end of device [ 1108.115090][T16961] loop8: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 1108.168762][T16961] syz.8.2632: attempt to access beyond end of device [ 1108.168762][T16961] loop8: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 1108.375335][ T27] audit: type=1800 audit(2000000821.819:749): pid=16961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2632" name="file1" dev="loop8" ino=1048653 res=0 errno=0 [ 1108.792585][T16966] exFAT-fs (loop8): error, tried to truncate zeroed cluster. [ 1108.800566][T16966] exFAT-fs (loop8): Filesystem has been set read-only [ 1109.261009][T16980] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2634'. [ 1111.030932][T16998] loop5: detected capacity change from 0 to 4096 [ 1111.037931][T16998] EXT4-fs: Ignoring removed mblk_io_submit option [ 1111.044585][T16998] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1111.704307][T16998] EXT4-fs: Mount option(s) incompatible with ext2 [ 1111.762607][T13108] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1115.687767][T17040] loop3: detected capacity change from 0 to 4096 [ 1115.694783][T17040] EXT4-fs: Ignoring removed mblk_io_submit option [ 1115.701325][T17040] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1116.331151][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.346547][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.401970][T17040] EXT4-fs: Mount option(s) incompatible with ext2 [ 1117.720777][T17059] loop5: detected capacity change from 0 to 256 [ 1119.072626][T17059] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 1122.177147][T17092] loop7: detected capacity change from 0 to 4096 [ 1122.184068][T17092] EXT4-fs: Ignoring removed mblk_io_submit option [ 1122.190619][T17092] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1122.267085][T17087] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2650'. [ 1122.282678][T17092] EXT4-fs: Mount option(s) incompatible with ext2 [ 1123.414029][T17111] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1123.425446][T17111] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1123.436085][T17111] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1123.447675][T17111] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1123.459659][T17111] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1123.468091][T17111] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1124.151181][T12925] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.535870][T13620] Bluetooth: hci4: command tx timeout [ 1125.816051][T12925] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.505411][T12925] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.857569][T12925] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.985017][T17109] chnl_net:caif_netlink_parms(): no params data found [ 1127.518733][T17148] loop8: detected capacity change from 0 to 4096 [ 1127.525717][T17148] EXT4-fs: Ignoring removed mblk_io_submit option [ 1127.532252][T17148] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1128.152491][T13620] Bluetooth: hci4: command tx timeout [ 1128.204027][T17148] EXT4-fs: Mount option(s) incompatible with ext2 [ 1128.693717][T17109] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.720308][T17109] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.740060][T17109] bridge_slave_0: entered allmulticast mode [ 1128.751308][T17109] bridge_slave_0: entered promiscuous mode [ 1128.830666][T17109] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.868889][T17109] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.898825][T17109] bridge_slave_1: entered allmulticast mode [ 1128.913828][T17109] bridge_slave_1: entered promiscuous mode [ 1129.068150][T17109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1129.124695][T17109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1129.288774][T17109] team0: Port device team_slave_0 added [ 1129.426437][T17109] team0: Port device team_slave_1 added [ 1129.921255][T17109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1129.948698][T17109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1130.069661][T17109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1130.173486][T13620] Bluetooth: hci4: command tx timeout [ 1130.296174][T17109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1130.327891][T17109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1130.408006][T17109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1130.621421][T17109] hsr_slave_0: entered promiscuous mode [ 1130.664710][T17109] hsr_slave_1: entered promiscuous mode [ 1130.691330][T17109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1130.723664][T17109] Cannot create hsr debugfs directory [ 1132.252382][T13620] Bluetooth: hci4: command tx timeout [ 1132.265668][T17203] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2669'. [ 1133.494153][T12925] hsr_slave_0: left promiscuous mode [ 1133.510584][T12925] hsr_slave_1: left promiscuous mode [ 1133.543228][T12925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1133.555700][T12925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1133.580978][T12925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1133.606719][T12925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1133.615667][T12925] bridge_slave_1: left allmulticast mode [ 1133.621436][T12925] bridge_slave_1: left promiscuous mode [ 1133.632538][T12925] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.650809][T12925] bridge_slave_0: left allmulticast mode [ 1133.665584][T12925] bridge_slave_0: left promiscuous mode [ 1133.680607][T12925] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.749769][T12925] veth1_macvtap: left promiscuous mode [ 1133.761472][T12925] veth0_macvtap: left promiscuous mode [ 1133.781775][T12925] veth1_vlan: left promiscuous mode [ 1133.790542][T17220] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2673'. [ 1133.800146][T12925] veth0_vlan: left promiscuous mode [ 1134.982048][T12925] bond1 (unregistering): Released all slaves [ 1135.474600][T17235] loop8: detected capacity change from 0 to 4096 [ 1135.481524][T17235] EXT4-fs: Ignoring removed mblk_io_submit option [ 1135.488134][T17235] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1136.164315][T17235] EXT4-fs: Mount option(s) incompatible with ext2 [ 1136.819305][T12925] team0 (unregistering): Port device team_slave_1 removed [ 1136.919744][T12925] team0 (unregistering): Port device team_slave_0 removed [ 1137.009549][T12925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1137.079583][T12925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1137.874537][T12925] bond0 (unregistering): Released all slaves [ 1138.430714][T17109] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1138.520059][T17109] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1138.559310][T17109] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1138.683657][T17109] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1140.206083][T17109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1140.278239][T17278] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2685'. [ 1140.302210][T17109] 8021q: adding VLAN 0 to HW filter on device team0 [ 1140.350735][ T2925] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.357942][ T2925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1140.441890][ T2925] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.449029][ T2925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1141.296054][T17109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1142.556208][T17109] veth0_vlan: entered promiscuous mode [ 1142.646511][T17109] veth1_vlan: entered promiscuous mode [ 1142.737926][T17109] veth0_macvtap: entered promiscuous mode [ 1142.826805][T17109] veth1_macvtap: entered promiscuous mode [ 1142.908055][T17109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1142.964169][T17109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1143.032669][T17109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1143.080000][T17109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1143.122355][T17109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1143.182402][T17109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1143.221225][T17109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1143.275820][T17109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1143.312115][T17109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1143.362619][T17109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1143.392336][T17109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1143.442598][T17109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1143.472617][T17109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1143.513883][T17109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1143.545983][T17109] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.591545][T17109] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.785592][T17319] loop8: detected capacity change from 0 to 4096 [ 1143.792638][T17319] EXT4-fs: Ignoring removed mblk_io_submit option [ 1143.799189][T17319] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1144.446475][T17109] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.466144][T17109] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.472589][T17319] EXT4-fs: Mount option(s) incompatible with ext2 [ 1145.043011][T12368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.084260][T12368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.206941][ T2990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1146.462528][ T2990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1148.773082][T17362] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2695'. [ 1150.031262][T17383] loop5: detected capacity change from 0 to 4096 [ 1150.038232][T17383] EXT4-fs: Ignoring removed mblk_io_submit option [ 1150.044886][T17383] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1150.142825][T17383] EXT4-fs: Mount option(s) incompatible with ext2 [ 1155.712476][T17441] loop3: detected capacity change from 0 to 4096 [ 1155.719424][T17441] EXT4-fs: Ignoring removed mblk_io_submit option [ 1155.726421][T17441] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1155.828894][T17441] EXT4-fs: Mount option(s) incompatible with ext2 [ 1156.257911][T17448] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2710'. [ 1159.416203][T13852] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1159.654057][T13852] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1159.707661][T13852] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1159.769942][T13852] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1159.795495][T13852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.907293][T13852] usb 6-1: config 0 descriptor?? [ 1159.931068][T13852] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1162.138307][ T5777] usb 6-1: USB disconnect, device number 19 [ 1162.830595][T17552] loop3: detected capacity change from 0 to 4096 [ 1162.883257][T17552] EXT4-fs: Ignoring removed mblk_io_submit option [ 1162.894509][T17552] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1164.910453][T17552] EXT4-fs: Mount option(s) incompatible with ext2 [ 1165.915350][T17591] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2724'. [ 1165.929276][T17590] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2725'. [ 1166.013124][T17590] Unknown options in mask b7f2 [ 1166.889591][T17607] netlink: 228 bytes leftover after parsing attributes in process `syz.7.2723'. [ 1170.439141][T17650] syz_tun: entered allmulticast mode [ 1170.469490][T17650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2736'. [ 1170.641329][T17646] syz_tun: left allmulticast mode [ 1171.451802][T17661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1171.502570][T17661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1171.538942][T17661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1171.694781][T17661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1171.828401][T17645] loop8: detected capacity change from 0 to 4096 [ 1171.936280][T17645] EXT4-fs: Ignoring removed mblk_io_submit option [ 1172.059788][T17645] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1172.415299][T17645] EXT4-fs: Mount option(s) incompatible with ext2 [ 1172.672425][T10080] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1172.993627][T10080] usb 4-1: Using ep0 maxpacket: 8 [ 1173.029064][T10080] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1173.073426][T10080] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1173.087312][T10080] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1173.141779][T10080] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1173.162593][T10080] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1173.162681][T10080] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.572448][T10080] usb 4-1: GET_CAPABILITIES returned 0 [ 1173.605750][T10080] usbtmc 4-1:16.0: can't read capabilities [ 1173.776934][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1173.813800][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1173.822917][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1173.831991][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1173.841060][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1173.850120][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1173.859171][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1174.488515][T17111] Bluetooth: hci0: command 0x0406 tx timeout [ 1174.522998][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1174.532176][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1174.541275][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1174.550365][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1174.645993][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1174.655153][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1174.664239][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1174.674927][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1174.692714][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1174.716224][ T23] usb 4-1: USB disconnect, device number 6 [ 1174.986855][T17700] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2743'. [ 1175.513696][T17710] ptrace attach of "./syz-executor exec"[17109] was attempted by "   \x0c 8  \x09   [ 1175.872472][ T5777] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1176.611066][ T5777] usb 9-1: device descriptor read/64, error -71 [ 1176.922423][ T5777] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1177.082497][ T5777] usb 9-1: device descriptor read/64, error -71 [ 1177.232537][ T5777] usb usb9-port1: attempt power cycle [ 1177.455728][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.462018][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.702640][ T5777] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1177.773556][ T5777] usb 9-1: device descriptor read/8, error -71 [ 1178.094860][ T5777] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1178.179547][ T5777] usb 9-1: device descriptor read/8, error -71 [ 1178.348899][ T5777] usb usb9-port1: unable to enumerate USB device [ 1178.650648][T17744] netlink: 'syz.5.2749': attribute type 10 has an invalid length. [ 1181.327441][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1181.527214][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1181.548692][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1181.592656][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1181.648739][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.884963][ T9] usb 6-1: Product: syz [ 1181.889190][ T9] usb 6-1: Manufacturer: syz [ 1181.920363][ T9] usb 6-1: SerialNumber: syz [ 1181.963110][ T9] usb 6-1: config 0 descriptor?? [ 1182.009422][ T9] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1182.039976][ T9] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1182.507962][T17788] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 1182.514532][T17788] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1182.610953][ T9] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1182.702716][T17788] vhci_hcd vhci_hcd.0: Device attached [ 1182.710017][T17794] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2759'. [ 1182.794881][T17794] syz_tun: entered promiscuous mode [ 1182.800753][T17794] macvtap1: entered promiscuous mode [ 1182.902723][T17794] macvtap1: entered allmulticast mode [ 1182.952449][T17794] syz_tun: entered allmulticast mode [ 1182.978260][T10080] vhci_hcd: vhci_device speed not set [ 1183.052684][T10080] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 1183.191202][T17788] syz_tun: left allmulticast mode [ 1183.293825][T17789] vhci_hcd: connection reset by peer [ 1183.312642][ T12] vhci_hcd: stop threads [ 1183.331683][ T12] vhci_hcd: release socket [ 1183.340260][T17788] syz_tun: left promiscuous mode [ 1183.345369][ T12] vhci_hcd: disconnect device [ 1183.771512][ T9] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1183.852653][ T9] em28xx 6-1:0.0: board has no eeprom [ 1183.972518][ T9] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1184.009295][ T9] em28xx 6-1:0.0: dvb set to bulk mode. [ 1184.035829][ T8] em28xx 6-1:0.0: Binding DVB extension [ 1184.179787][T17810] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2760'. [ 1184.407475][ T8] em28xx 6-1:0.0: Registering input extension [ 1185.456283][ T9] usb 6-1: USB disconnect, device number 20 [ 1185.463140][ T9] em28xx 6-1:0.0: Disconnecting em28xx [ 1185.486194][ T9] em28xx 6-1:0.0: Closing input extension [ 1185.673435][ T9] em28xx 6-1:0.0: Freeing device [ 1188.582450][T10080] vhci_hcd: vhci_device speed not set [ 1189.397289][T17859] loop5: detected capacity change from 0 to 4096 [ 1189.588395][T17859] EXT4-fs: Ignoring removed mblk_io_submit option [ 1189.750316][T17859] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1189.808023][T17859] EXT4-fs: Mount option(s) incompatible with ext2 [ 1197.559694][T17963] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2786'. [ 1198.646272][T17969] loop3: detected capacity change from 0 to 4096 [ 1198.752986][T17969] EXT4-fs: Ignoring removed mblk_io_submit option [ 1198.759559][T17969] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1198.935082][T17969] EXT4-fs: Mount option(s) incompatible with ext2 [ 1200.789582][T17992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2793'. [ 1200.966996][T17992] bond0: option arp_validate: invalid value (18446744072403468074) [ 1202.945269][T18008] loop8: detected capacity change from 0 to 4096 [ 1202.952231][T18008] EXT4-fs: Ignoring removed mblk_io_submit option [ 1202.958894][T18008] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1203.238255][T18008] EXT4-fs: Mount option(s) incompatible with ext2 [ 1208.954407][T18053] tipc: Started in network mode [ 1208.959335][T18053] tipc: Node identity 0ecf2e26c72f, cluster identity 4711 [ 1209.194326][T18053] tipc: Enabled bearer , priority 0 [ 1209.394362][T18053] syzkaller0: entered promiscuous mode [ 1209.399878][T18053] syzkaller0: entered allmulticast mode [ 1209.731869][T18067] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2807'. [ 1210.207739][ T28] tipc: Node number set to 3386912294 [ 1211.415388][T18081] loop8: detected capacity change from 0 to 4096 [ 1211.422455][T18081] EXT4-fs: Ignoring removed mblk_io_submit option [ 1211.429395][T18081] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1211.738491][T18081] EXT4-fs: Mount option(s) incompatible with ext2 [ 1212.270524][T18093] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1215.033464][T18051] tipc: Resetting bearer [ 1216.071055][T18051] tipc: Disabling bearer [ 1218.816070][T18140] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2819'. [ 1220.253442][T18154] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1221.645359][T18156] loop7: detected capacity change from 0 to 4096 [ 1221.752385][T18156] EXT4-fs: Ignoring removed mblk_io_submit option [ 1221.758979][T18156] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1221.976894][T18156] EXT4-fs: Mount option(s) incompatible with ext2 [ 1228.967781][T18214] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2831'. [ 1230.061233][T18222] loop3: detected capacity change from 0 to 4096 [ 1230.068648][T18222] EXT4-fs: Ignoring removed mblk_io_submit option [ 1230.075273][T18222] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1230.274397][T18222] EXT4-fs: Mount option(s) incompatible with ext2 [ 1230.434706][T13108] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1230.735441][T18233] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1237.604440][T18288] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2843'. [ 1238.635433][T18293] loop5: detected capacity change from 0 to 4096 [ 1238.642410][T18293] EXT4-fs: Ignoring removed mblk_io_submit option [ 1238.648985][T18293] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1238.902901][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.911676][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.973812][T18293] EXT4-fs: Mount option(s) incompatible with ext2 [ 1239.435218][T18303] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1246.098519][T17111] Bluetooth: hci4: command 0x0406 tx timeout [ 1247.221756][T18350] loop3: detected capacity change from 0 to 4096 [ 1247.228834][T18350] EXT4-fs: Ignoring removed mblk_io_submit option [ 1247.235455][T18350] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1247.460555][T18350] EXT4-fs: Mount option(s) incompatible with ext2 [ 1247.965301][T18363] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1249.858580][T18378] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2855'. [ 1255.394280][T18412] loop3: detected capacity change from 0 to 4096 [ 1255.401220][T18412] EXT4-fs: Ignoring removed mblk_io_submit option [ 1255.407893][T18412] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1255.740860][T18412] EXT4-fs: Mount option(s) incompatible with ext2 [ 1256.742482][T18353] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1256.952361][T18353] usb 9-1: Using ep0 maxpacket: 16 [ 1256.962225][T18353] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 1256.993449][T18353] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1257.035218][T18353] usb 9-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1257.060649][T18353] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.081642][T18353] usb 9-1: config 0 descriptor?? [ 1257.100345][T18353] pxrc 9-1:0.0: Could not find endpoint [ 1257.114394][T18353] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1257.304992][T18353] usb 9-1: USB disconnect, device number 8 [ 1258.449203][T18444] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1258.543331][T18449] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1260.695041][T18458] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2872'. [ 1263.291559][T18480] loop5: detected capacity change from 0 to 4096 [ 1263.298562][T18480] EXT4-fs: Ignoring removed mblk_io_submit option [ 1263.402532][T18480] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1263.603091][T18480] EXT4-fs: Mount option(s) incompatible with ext2 [ 1263.850246][T13108] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1265.581340][T18499] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1270.402764][T18530] loop3: detected capacity change from 0 to 4096 [ 1270.410403][T18530] EXT4-fs: Ignoring removed mblk_io_submit option [ 1270.512857][T18530] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1270.719696][T18530] EXT4-fs: Mount option(s) incompatible with ext2 [ 1273.503008][T18554] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2890'. [ 1273.530793][T18554] @: renamed from veth0_to_batadv (while UP) [ 1274.455763][T18554] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2890'. [ 1274.493772][T18564] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2884'. [ 1277.082458][T18603] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1280.424668][T18620] loop7: detected capacity change from 0 to 4096 [ 1280.431643][T18620] EXT4-fs: Ignoring removed mblk_io_submit option [ 1280.532513][T18620] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1280.742810][T18620] EXT4-fs: Mount option(s) incompatible with ext2 [ 1285.664843][T18650] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1287.519833][T18665] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2905'. [ 1289.799869][T18681] loop8: detected capacity change from 0 to 4096 [ 1289.806943][T18681] EXT4-fs: Ignoring removed mblk_io_submit option [ 1289.813661][T18681] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1290.149891][T18681] EXT4-fs: Mount option(s) incompatible with ext2 [ 1300.344252][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.350607][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1304.588486][T18789] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2920'. [ 1318.064030][T18903] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2940'. [ 1321.295107][T18922] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1328.464000][T18971] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2955'. [ 1331.727117][T18998] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1337.205608][T19043] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2967'. [ 1338.119981][T19047] loop3: detected capacity change from 0 to 4096 [ 1338.127379][T19047] EXT4-fs: Ignoring removed mblk_io_submit option [ 1338.134792][T19047] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1338.360681][T19047] EXT4-fs: Mount option(s) incompatible with ext2 [ 1344.901680][T19103] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1347.585680][T19125] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2980'. [ 1348.637119][T19129] loop7: detected capacity change from 0 to 4096 [ 1348.645687][T19129] EXT4-fs: Ignoring removed mblk_io_submit option [ 1348.654302][T19129] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1348.988746][T19129] EXT4-fs: Mount option(s) incompatible with ext2 [ 1354.120535][T19167] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1361.903777][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.928586][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.102692][T19217] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2995'. [ 1363.340712][T19218] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1364.240209][T19233] netlink: 'syz.3.2997': attribute type 17 has an invalid length. [ 1364.293254][T19233] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2997'. [ 1364.694134][ T5777] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1364.932605][ T5777] usb 4-1: Using ep0 maxpacket: 8 [ 1365.012677][ T5777] usb 4-1: config 0 has an invalid descriptor of length 223, skipping remainder of the config [ 1365.048849][ T5777] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1365.086035][ T5777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.158142][ T5777] usb 4-1: Product: syz [ 1365.193080][ T5777] usb 4-1: Manufacturer: syz [ 1365.222479][ T5777] usb 4-1: SerialNumber: syz [ 1365.263365][ T5777] usb 4-1: config 0 descriptor?? [ 1366.182152][ T5777] usb 4-1: USB disconnect, device number 7 [ 1371.783335][T19276] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1373.446165][T19289] loop7: detected capacity change from 0 to 4096 [ 1373.454100][T19289] EXT4-fs: Ignoring removed mblk_io_submit option [ 1373.463554][T19289] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1374.308834][T19289] EXT4-fs: Mount option(s) incompatible with ext2 [ 1376.344458][T19313] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3011'. [ 1386.460961][T19364] loop5: detected capacity change from 0 to 4096 [ 1386.469999][T19364] EXT4-fs: Ignoring removed mblk_io_submit option [ 1386.480190][T19364] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1387.555120][T19364] EXT4-fs: Mount option(s) incompatible with ext2 [ 1390.870010][T19394] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3026'. [ 1394.664504][T19415] loop7: detected capacity change from 0 to 4096 [ 1394.674112][T19415] EXT4-fs: Ignoring removed mblk_io_submit option [ 1394.683458][T19415] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1395.586126][T19415] EXT4-fs: Mount option(s) incompatible with ext2 [ 1403.522486][T13798] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1403.712451][T13798] usb 6-1: Using ep0 maxpacket: 8 [ 1403.731777][T13798] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1403.943305][T13798] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1404.797164][T13798] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1404.942519][T13798] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1405.986998][T13798] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1406.003423][T13798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.128961][T13798] usb 6-1: can't set config #16, error -71 [ 1406.279216][T13798] usb 6-1: USB disconnect, device number 21 [ 1406.465212][T19498] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3043'. [ 1415.983755][ T8] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1416.282455][ T8] usb 9-1: Using ep0 maxpacket: 8 [ 1416.307440][ T8] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1416.332088][ T8] usb 9-1: config 0 has no interface number 0 [ 1416.371839][ T8] usb 9-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1416.471607][ T8] usb 9-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1416.512841][ T8] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1416.569757][T19593] netlink: 'syz.7.3054': attribute type 10 has an invalid length. [ 1416.586890][ T8] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1416.620599][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.922696][T19593] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3054'. [ 1416.945171][T19593] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1416.962890][ T8] usb 9-1: config 0 descriptor?? [ 1416.969320][T19593] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1417.026007][ T8] ldusb 9-1:0.55: Interrupt in endpoint not found [ 1417.040209][T19593] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1417.502536][ T28] usb 9-1: USB disconnect, device number 9 [ 1419.052786][T19603] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1421.514682][T19614] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1422.652480][T19630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3069'. [ 1423.242943][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.250323][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.347168][T13798] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1423.555591][T13798] usb 4-1: Using ep0 maxpacket: 8 [ 1423.614252][T13798] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1423.641274][T13798] usb 4-1: config 0 has no interface number 0 [ 1423.667574][T13798] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1423.687488][T13798] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1423.722362][T13798] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1423.759955][T13798] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1423.788597][T13798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.989941][T13798] usb 4-1: config 0 descriptor?? [ 1424.899060][T13798] ldusb 4-1:0.55: Interrupt in endpoint not found [ 1425.030740][T19647] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3075'. [ 1426.436737][T10078] usb 4-1: USB disconnect, device number 8 [ 1428.679471][T19674] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1431.185925][T19694] overlayfs: missing 'lowerdir' [ 1432.538515][T19703] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1437.082564][T13798] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1437.322729][T13798] usb 6-1: Using ep0 maxpacket: 8 [ 1437.372057][T13798] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1437.431711][T13798] usb 6-1: config 0 has no interface number 0 [ 1437.473240][T13798] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1437.522457][T13798] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1437.575145][T13798] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1437.610744][T13798] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1437.630197][T13798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.649555][T13798] usb 6-1: config 0 descriptor?? [ 1437.672995][T13798] ldusb 6-1:0.55: Interrupt in endpoint not found [ 1438.154527][T14321] usb 6-1: USB disconnect, device number 22 [ 1439.069880][T19740] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1441.732207][T19756] loop8: detected capacity change from 0 to 4096 [ 1441.739197][T19756] EXT4-fs: Ignoring removed mblk_io_submit option [ 1441.745927][T19756] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1441.943054][T19756] EXT4-fs: Mount option(s) incompatible with ext2 [ 1446.111705][T19787] loop8: detected capacity change from 0 to 4096 [ 1446.118762][T19787] EXT4-fs: Ignoring removed mblk_io_submit option [ 1446.125918][T19787] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1446.377817][T19787] EXT4-fs: Mount option(s) incompatible with ext2 [ 1449.912421][T10078] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1450.152526][T10078] usb 6-1: Using ep0 maxpacket: 32 [ 1450.163275][T10078] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1450.186548][T10078] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1450.205442][T10078] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1450.246013][T10078] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1450.276522][T10078] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.303650][T10078] usb 6-1: Product: ﹼ☔ᱹ瞪並撯꜉涑ꉽ䡨ꛠ꽬㚶ㄟ䌪就奏⏿√ﮝ볖玳⍦栀켐늹닇일돸衪ⲍ殩韝ᤃ䋇䶍럿឴੟䯖裆⍧쭲휺녞 [ 1450.329607][T10078] usb 6-1: Manufacturer: Ѓ [ 1450.334809][T10078] usb 6-1: SerialNumber: 浹响椞큑橌鏺䜚뢸Ґᾒ习땜丛稧畏쫴夈Ŗ驄䉭ꕬ뮱堝뚈㖠욦ᢑゲ㶨橛믅읙㏆䝸운轏㫶爚 [ 1450.426713][T19815] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1450.511965][T19816] netlink: 'syz.8.3125': attribute type 1 has an invalid length. [ 1450.567139][T19816] netlink: 'syz.8.3125': attribute type 2 has an invalid length. [ 1450.599549][T10078] usb 6-1: 0:2 : does not exist [ 1450.656804][T10078] usb 6-1: USB disconnect, device number 23 [ 1455.014892][T19853] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1457.142440][T14039] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1457.365376][T14039] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1457.378149][T14039] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.408600][T14039] usb 6-1: Product: syz [ 1457.413200][T14039] usb 6-1: Manufacturer: syz [ 1457.418205][T14039] usb 6-1: SerialNumber: syz [ 1457.428417][T14039] usb 6-1: config 0 descriptor?? [ 1457.443194][T14039] hub 6-1:0.0: bad descriptor, ignoring hub [ 1457.458255][T14039] hub: probe of 6-1:0.0 failed with error -5 [ 1457.660599][T14039] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1457.706150][T14039] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1457.756619][T14039] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1457.802499][T14039] usb 6-1: media controller created [ 1457.853510][T14039] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1458.007232][T14039] DVB: Unable to find symbol dib7000p_attach() [ 1458.022356][T14039] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1458.493690][T14039] rc_core: IR keymap rc-dib0700-rc5 not found [ 1458.646220][T14039] Registered IR keymap rc-empty [ 1458.772654][T14039] dvb-usb: could not initialize remote control. [ 1458.790377][T14039] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1458.882871][T14039] usb 6-1: USB disconnect, device number 24 [ 1458.910446][T13311] udevd[13311]: setting mode of /dev/dvb/adapter1/demux0 to 020660 failed: No such file or directory [ 1458.929912][T13311] udevd[13311]: setting owner of /dev/dvb/adapter1/demux0 to uid=0, gid=28 failed: No such file or directory [ 1458.938100][T19884] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3146'. [ 1459.025476][T14039] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1459.037935][T19884] bond0: Unable to set down delay as MII monitoring is disabled [ 1460.572858][T19902] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1462.832124][T19915] syz.7.3152: attempt to access beyond end of device [ 1462.832124][T19915] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1463.019131][T19914] pim6reg: entered allmulticast mode [ 1463.243853][T19915] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3152'. [ 1468.452683][T10078] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1468.683712][T10078] usb 6-1: Using ep0 maxpacket: 16 [ 1468.726688][T10078] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1468.885165][T10078] usb 6-1: config 0 has no interface number 0 [ 1468.895263][T10078] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1468.914283][T10078] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1468.975061][T10078] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1470.574523][T10078] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1470.620576][T10078] usb 6-1: Product: syz [ 1470.642572][T10078] usb 6-1: SerialNumber: syz [ 1470.670523][T10078] usb 6-1: config 0 descriptor?? [ 1470.722838][T10078] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 1470.759608][T10078] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input17 [ 1470.968771][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1470.986889][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1470.997882][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1471.006156][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1471.015230][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1471.024077][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1471.037905][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1471.046010][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1471.055307][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1471.071143][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1471.082368][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1471.096032][T10078] usb 6-1: USB disconnect, device number 25 [ 1471.215576][T10078] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1471.927207][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.141224][T19959] netlink: 'syz.7.3163': attribute type 39 has an invalid length. [ 1472.434738][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.744557][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.144657][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.603865][T19969] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1473.623480][T19969] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1473.647549][T19969] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1473.677922][T19969] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1473.713349][T19969] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1473.751053][T19969] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1474.701015][ C0] vkms_vblank_simulate: vblank timer overrun [ 1474.865726][ C0] vkms_vblank_simulate: vblank timer overrun [ 1475.540766][T19967] chnl_net:caif_netlink_parms(): no params data found [ 1475.854265][T13620] Bluetooth: hci0: command tx timeout [ 1477.842999][T19967] bridge0: port 1(bridge_slave_0) entered blocking state [ 1477.873047][T19967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.880448][T19967] bridge_slave_0: entered allmulticast mode [ 1478.013788][T13620] Bluetooth: hci0: command tx timeout [ 1478.083886][T19967] bridge_slave_0: entered promiscuous mode [ 1479.567389][T19967] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.604589][T19967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.635831][T19967] bridge_slave_1: entered allmulticast mode [ 1479.659689][T19967] bridge_slave_1: entered promiscuous mode [ 1480.092443][T13620] Bluetooth: hci0: command tx timeout [ 1480.179220][T19967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1480.304372][T20050] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1480.328591][T20051] loop6: detected capacity change from 0 to 524288000 [ 1480.404503][T19967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1480.541033][T20046] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3180'. [ 1480.921491][T19967] team0: Port device team_slave_0 added [ 1481.051874][T19967] team0: Port device team_slave_1 added [ 1481.560304][T19967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1481.600870][T19967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1481.672357][T19967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1481.718314][T19967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1481.726382][T19967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1481.754965][T19967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1481.975981][ T11] hsr_slave_0: left promiscuous mode [ 1482.031811][ T11] hsr_slave_1: left promiscuous mode [ 1482.040866][ T11] bridge_slave_1: left allmulticast mode [ 1482.182610][T13620] Bluetooth: hci0: command tx timeout [ 1482.204034][ T11] bridge_slave_1: left promiscuous mode [ 1482.258658][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1482.534509][ T11] bridge_slave_0: left allmulticast mode [ 1482.540213][ T11] bridge_slave_0: left promiscuous mode [ 1482.567555][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1482.731624][ T11] veth1_macvtap: left promiscuous mode [ 1482.746927][ T11] veth0_macvtap: left promiscuous mode [ 1482.777921][ T11] veth1_vlan: left promiscuous mode [ 1482.830332][ T11] veth0_vlan: left promiscuous mode [ 1485.342782][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.366482][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1487.466627][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1487.795938][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1488.008423][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1488.092533][T13852] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1488.172172][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1488.310546][T13852] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1488.435079][T13852] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1488.473070][T13852] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1488.502546][T13852] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1488.538588][T13852] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1488.558316][T13852] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1488.632403][T13852] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1488.665729][T13852] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1488.682711][T13852] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1488.774719][T13852] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1488.908585][T13852] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1488.957070][T13852] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1488.993779][T13852] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1489.002748][T13852] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1489.022452][T13852] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1489.064938][T13852] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1489.137283][T13852] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1489.180334][T13852] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1489.232624][T13852] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1489.275371][T13852] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1489.292374][T13852] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1489.312596][T13852] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1489.374043][T13852] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1489.403729][T13852] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1489.472470][T13852] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1489.494099][T13852] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1489.522686][T13852] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1489.542358][T13852] usb 6-1: Product: syz [ 1489.547278][T13852] usb 6-1: Manufacturer: syz [ 1489.551896][T13852] usb 6-1: SerialNumber: syz [ 1489.611072][T13852] usb 6-1: config 0 descriptor?? [ 1489.675064][T13852] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 1490.323754][ C0] usb 6-1: yurex_control_callback - control failed: -2 [ 1490.335557][T10078] usb 6-1: USB disconnect, device number 26 [ 1490.344199][T10078] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 1491.335763][ T11] bond0 (unregistering): Released all slaves [ 1491.828682][T19967] hsr_slave_0: entered promiscuous mode [ 1491.911865][T19967] hsr_slave_1: entered promiscuous mode [ 1491.977570][T19967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1492.012689][T19967] Cannot create hsr debugfs directory [ 1494.167701][ C0] vkms_vblank_simulate: vblank timer overrun [ 1495.114576][ C0] vkms_vblank_simulate: vblank timer overrun Stopping sshd: [ 1499.666386][T19967] netdevsim netdevsim2 netdevsim0: renamed from eth0 stopped /usr/sbin/sshd (pid 5547) OK [ 1499.756101][T19967] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1499.826680][T19967] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1499.909074][T19967] netdevsim netdevsim2 netdevsim3: renamed from eth3 Stopping crond: stopped /usr/sbin/crond (pid 5531) OK [ 1501.288595][T19967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1501.376627][T19967] 8021q: adding VLAN 0 to HW filter on device team0 [ 1501.511810][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.519062][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1501.574053][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.581240][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state Stopping dhcpcd... [ 1502.560544][T19967] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1502.605450][T19967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network stopped /sbin/dhcpcd (pid 5456) Stopping network: [ 1503.330628][T19967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1503.541964][T19967] veth0_vlan: entered promiscuous mode [ 1503.676650][T19967] veth1_vlan: entered promiscuous mode [ 1503.762584][T19967] veth0_macvtap: entered promiscuous mode [ 1503.792210][T19967] veth1_macvtap: entered promiscuous mode [ 1503.950832][T19967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1504.002454][T19967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1504.035599][T19967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1504.080058][T19967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1504.132648][T19967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1504.172891][T19967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1504.194810][T19967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1504.257240][T19967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1504.278109][T19967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1504.328243][T19967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1504.361937][T19967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1504.377694][T19967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1504.419140][T19967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1504.450454][T19967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1504.491432][T19967] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.520866][T19967] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.533712][T19967] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.580471][T19967] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.080576][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1505.147617][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1505.744462][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1506.480757][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 OK Stopping iptables: [ 1507.016626][T20260] tipc: Started in network mode [ 1507.021622][T20260] tipc: Node identity ac14140f, cluster identity 4711 [ 1507.064355][T20260] tipc: New replicast peer: 255.255.255.255 [ 1507.096455][T20260] tipc: Enabled bearer , priority 10 OK [ 1507.123490][T20265] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1507.216695][T20267] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3218'. [ 1507.251794][T20267] tipc: Disabling bearer Stopping system message bus: done [ 1513.075224][T20315] iommufd_mock iommufd_mock1: Adding to iommu group 0 Stopping klogd: OK Stopping acpid: [ 1518.077651][T20356] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3233'. [ 1518.237485][T20359] syzkaller0: entered promiscuous mode [ 1518.323005][T20359] syzkaller0: entered allmulticast mode [ 1518.433699][T20362] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3234'. OK Stopping syslogd: [ 1520.230951][T20375] tipc: Enabled bearer , priority 0 [ 1520.259117][T20375] syzkaller0: entered promiscuous mode [ 1520.288658][T20375] syzkaller0: entered allmulticast mode stopped /sbin/syslogd (pid 5144) OK [ 1520.455239][T20377] tipc: Resetting bearer [ 1520.509940][T20374] tipc: Resetting bearer [ 1520.601158][T20374] tipc: Disabling bearer umount: can't remount debugfs read-only umount: can't remount tmpfs read-only serialport: VM disconnected.