last executing test programs: 7m3.214090774s ago: executing program 0 (id=138): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socket(0x8, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) mlockall(0x7) prlimit64(0x0, 0xe, 0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000400)='./file0\x00', 0x8, &(0x7f0000000440)=ANY=[@ANYRESDEC], 0x1, 0x5510, &(0x7f00000079c0)="$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") 6m58.801636451s ago: executing program 0 (id=141): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) symlink(0x0, &(0x7f0000000000)='./file0\x00') preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m56.159467135s ago: executing program 0 (id=146): pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30) r3 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r3, &(0x7f0000000040), 0x10) io_submit(r4, 0x1, &(0x7f00000012c0)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000200)="0500000093cb1faf16da39de706f646800580f02000000003f420f0000000000ff030f02000000003f420f00000000003bf81b05ff000000", 0x38}]) 6m53.371068451s ago: executing program 0 (id=150): ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x1d, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) 6m52.197646425s ago: executing program 0 (id=153): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x650ce4b086bd44cb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5d580000000000001800168014000180100002000100000050040000135200001400030067726574617030"], 0x5c}}, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00'}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) 6m49.865117174s ago: executing program 0 (id=156): prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/67, 0x0, 0x8080000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0x8}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x373a635a847df2dd}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) 6m34.47357278s ago: executing program 32 (id=156): prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/67, 0x0, 0x8080000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0x8}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x373a635a847df2dd}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) 1m31.421390595s ago: executing program 3 (id=632): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000180)='u', 0x1}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r2, &(0x7f0000000180)={0x1d, r3, 0x3, {0x2, 0x0, 0x6}}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000014c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) sendto$packet(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m30.226825241s ago: executing program 3 (id=635): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r4, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000600), 0xfec8) recvmmsg(r5, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/105, 0xffffffc4}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000740)=""/135, 0x87, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000000640)={0x0, 0x989680}) 1m28.988882902s ago: executing program 3 (id=639): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000300)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], 0x0, 0x1, r5}) 1m27.688674917s ago: executing program 3 (id=640): openat$comedi(0xffffffffffffff9c, 0x0, 0x208ee2fc1aaba58f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400c0c1, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x80079a0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = dup(r1) getrlimit(0x4, 0x0) write$UHID_INPUT(r2, &(0x7f0000001040)={0xe, {"a2e3ad21ed0d52f90b9b39094bf70e06d038e7ff7fc6e5539b324b298b089b0708376d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d1780700523c921b1b9b31310d075d0936cd3b78130daa61f94b61404d64aec1b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c088215ec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6f44ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d208001349b41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2a15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee53259289d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c1980778efa5ea567b7b7430acc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a0700d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8440daaa69bf5c8f4350aeae9ca1207e76061b28f27da19acc7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211c7847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e781171e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b906ce2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7ae288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289d8523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c78e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e7c7b2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df06720ba2b26bbfcc807c8aabb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db38b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1040}}, 0x1006) 1m26.604433464s ago: executing program 3 (id=643): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) poll(0x0, 0x0, 0xff) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x58}}, 0x4000080) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x8001, 0x8) read(r2, &(0x7f0000000040)=""/12, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[]) mount(0x0, 0x0, &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) syz_mount_image$hfs(&(0x7f0000000480), &(0x7f0000000140)='./file1\x00', 0x3000840, &(0x7f00000004c0)=ANY=[@ANYBLOB="6469725f756d61736b3d303030303030303030303030303030342c66696c655f756d61736b3d30303030303030303030303030303030303030313334302c696f636861727365743d6d61637475726b6973682c636f6465706167653d69736f383835392d362c63726561746f723d4ddd71752c00eace691af6ae10469da9b01baceb6a9486a6be7f83429052dab3e6e5e287ba3d79e809945e4361c0019a8ed88ae1c6c541bb9a966c0e4d7bde2f8e3add0af5a9c74c520f889381fbcf573e0000000000"], 0x11, 0x2e1, &(0x7f0000000ac0)="$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") r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r3, 0xffffffffffffffff, 0xee01) 1m19.189090233s ago: executing program 3 (id=651): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x0, &(0x7f0000006680)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppoe(0x18, 0x1, 0x0) syz_io_uring_setup(0x2d61, &(0x7f00000006c0)={0x0, 0x0, 0x80, 0x0, 0x251}, &(0x7f0000000300), &(0x7f0000000400)) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt(r1, 0x106, 0x66a, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0xfffffffffffffffe, &(0x7f0000000080)) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000002000000000000000000024000300a0cb879a47f5bc7a0000003fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00"], 0xec}, 0x1, 0x0, 0x0, 0x20000851}, 0x20040050) 1m1.933740267s ago: executing program 33 (id=651): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x0, &(0x7f0000006680)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppoe(0x18, 0x1, 0x0) syz_io_uring_setup(0x2d61, &(0x7f00000006c0)={0x0, 0x0, 0x80, 0x0, 0x251}, &(0x7f0000000300), &(0x7f0000000400)) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt(r1, 0x106, 0x66a, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0xfffffffffffffffe, &(0x7f0000000080)) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000002000000000000000000024000300a0cb879a47f5bc7a0000003fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00"], 0xec}, 0x1, 0x0, 0x0, 0x20000851}, 0x20040050) 14.613626409s ago: executing program 4 (id=730): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4404}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) pipe2$9p(&(0x7f0000000400), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000180), &(0x7f0000000200)=0x4) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x7}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000008}, 0x80) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) socket$kcm(0x11, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x20501, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.872619421s ago: executing program 4 (id=736): syz_emit_ethernet(0x1e, &(0x7f0000000040)={@local, @empty, @void, {@can={0xc, {{0x2, 0x0, 0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "020c23b59a3b2c1f"}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0x4) r2 = inotify_init1(0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0xa4000061) copy_file_range(r1, &(0x7f0000000080), r0, 0x0, 0xfffffffffffffff8, 0x0) 9.53366165s ago: executing program 4 (id=739): socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setresuid(0xee01, 0x0, 0xffffffffffffffff) keyctl$session_to_parent(0x12) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x240, &(0x7f00000002c0)="$eJzs3T1oO2UcB/DvXRL/tg1SdRHEFxARLZS6CS51UShIKSKCChURF6UVaotb6+TioLNKJ5ciblZH6VJcFMGpaoe6CFocLA46RJJrpbYRX1Jz4n0+cLm75J77Pcfd97kQOBKgsaaTzCdpJZlJ0klSnN/gzmqaPl3dnthfTnq9x34oBttV65WzdlNJtpI8kGSvLPJCO9nYferop4NH7nl9vXP3u7tPToz1IE8dHx0+evLO4msfLNy/8dkX3y0WmU/3d8d19Yoh77WL5KZ/o9h/RNGuuwf8FUuvvP9lP/c3J7lrkP9OylQn74216/Y6ue/tP2r75vef3zrOvgJXr9fr9O+BWz2gccok3RTlbJJquSxnZ6vv8F+1JssXV9dennl+dX3lubpHKuCqdJPDhz+69uHUhfx/26ryD/xPVT9KHT6+tPN1f+GkVXeHgLG4rZr17/8zz2zeG/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmH5pJ/aC75h+aSf2iu8/kHAJqld63uJ5CButQ9/gAAAAAAAAAAAAAAAAAAAJdtT+wvn03jqvnJW8nxQ0naw+q3Bv9HnFw/eJ38sehv9puiajaSp+8YcQcjeq/mp69v+Kbe+p/eXm/9zZVk69Ukc+325euvOL3+/rkb/+TzzrMjFvibigvrDz4x3voX/bJTb/2Fg+Tj/vgzN2z8KXPLYD58/On2z9+I9V/6ecQdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDa/BgAA//8YZW08") r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r4, &(0x7f0000000000)='2', 0x1, 0x4fed0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 9.533285299s ago: executing program 2 (id=740): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x9}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x62}, 0x28) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) r3 = accept4(r0, 0x0, 0x0, 0x80800) recvmsg$qrtr(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000008c0)=""/222, 0xde}], 0x1, 0x0, 0x0, 0x2000}, 0x38, 0x10000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000200001002bbd700000ff00000a108000000000080400010014000200fc020000000000000000000000000000140001002001"], 0x44}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2a, 0x0, &(0x7f0000000180), 0x0, 0x849, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 9.435215127s ago: executing program 1 (id=741): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FITRIM(0xffffffffffffffff, 0xc4009420, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r4, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000600), 0xfec8) recvmmsg(r5, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/105, 0xffffffc4}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000740)=""/135, 0x87, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000000640)={0x0, 0x989680}) 8.299424099s ago: executing program 1 (id=742): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x8, 0x800) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r4, &(0x7f0000000300), 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x3}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x48}}, 0x0) 8.149514441s ago: executing program 4 (id=743): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000100}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000380)=0x0) syz_io_uring_setup(0x5e2, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) r5 = mq_open(&(0x7f000084dff0)='!sali\x1cqxte&\xac\xe87x\x00', 0x6e93ebbbcc0884f2, 0x12e, &(0x7f0000000300)={0x0, 0x1, 0x7}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c\x87\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$nl_xfrm(r6, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 7.463731807s ago: executing program 2 (id=744): socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) read$usbfs(r5, &(0x7f0000001040)=""/192, 0xc0) write$tun(r5, &(0x7f0000000400)=ANY=[], 0xa2) 6.500555955s ago: executing program 1 (id=745): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 4.262846185s ago: executing program 2 (id=746): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc00455d0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x20302, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x300) write$binfmt_misc(r4, 0x0, 0x0) 4.236715458s ago: executing program 1 (id=747): openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x412c00, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) 3.052092083s ago: executing program 2 (id=748): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x2915048, 0x0, 0x1, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, &(0x7f00000000c0)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, 0x0) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000000c0)={r4, 0x4}, 0x8) 2.999535807s ago: executing program 4 (id=749): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500), 0x280, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f00000005c0)={'security\x00', 0x0, [0xffff8000, 0x396b, 0x3ff, 0x800]}, &(0x7f0000000640)=0x54) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) socket$nl_generic(0x10, 0x3, 0x10) creat(0x0, 0x80) 1.418934665s ago: executing program 2 (id=750): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r3, 0x0, 0xd, 0xfffffffffffffffe) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000014c0)={'macvtap0\x00', &(0x7f00000013c0)=@ethtool_drvinfo={0x3, "3768ca9bdb9072480b2f1c8f8182ce0898651461231fb740854b22a4379de586", "43a38879022a99b405a660e7cd1d15725e68a25c5152bd0bd227ffb8739f1cfc", "131c5b4bdb8af434447f3cb705650db1c0f8ddb541648cc0b1d318873f8c9a85", "f16051bbcb4dda20aea0d433f8c6f05bce62635e71c972c7929a58603233d497", "1cb283a6b524caa0cfd3fc2d99e7cad81b31b74f347dff63fa93236b8a8a2ccb"}}) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.390940307s ago: executing program 4 (id=757): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000300)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], 0x0, 0x1, r5}) 1.389931607s ago: executing program 1 (id=751): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 20.043388ms ago: executing program 1 (id=752): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@allocspi={0xf8, 0x16, 0x629, 0x70bd2a, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@local, 0x4e22, 0xd64c, 0x4e23, 0x4, 0x2, 0x20, 0x0, 0x73}, {@in=@loopback, 0x4d2, 0x33}, @in=@remote, {0x401, 0xd, 0x2, 0xffff, 0x4, 0x6, 0x0, 0xfffffffffffffffa}, {0x4554, 0x0, 0xffffffffffffffff, 0x1000}, {0x5, 0x8, 0x3}, 0x70bd2a, 0x0, 0xa, 0x3, 0xdf, 0x14}, 0x1, 0x6}}, 0xf8}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2, 0x9, 0x6, 0x2, 0x2, 0x0, 0x70bd0b, 0x25dfdbff}, 0x10}}, 0x10) 0s ago: executing program 2 (id=753): syz_mount_image$udf(&(0x7f00000019c0), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1016400, &(0x7f0000000680)=ANY=[], 0x1, 0xc5e, &(0x7f0000001a00)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000006000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x4001, 0x3, 0x298, 0x168, 0x700001b, 0x148, 0x168, 0x148, 0x200, 0x206, 0x240, 0x200, 0x240, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'tunl0\x00', 'sit0\x00', {}, {}, 0x0, 0x2}, 0x1ea, 0x100, 0x168, 0x0, {0x390, 0x8f00}, [@common=@inet=@iprange={{0x68}, {@ipv6=@mcast2, @ipv4=@multicast2, @ipv6=@empty, @ipv6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x32}}, @common=@inet=@socket3={{0x28}, 0x6}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1f, 0x8000, 0x0, 0x2, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x168}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000240)=ANY=[], 0x31) kernel console output (not intermixed with test programs): tadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.757047][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.792746][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.799943][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.826934][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.841180][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.848478][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.874722][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.049945][ T5783] hsr_slave_0: entered promiscuous mode [ 90.056813][ T5783] hsr_slave_1: entered promiscuous mode [ 90.063159][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.071643][ T5783] Cannot create hsr debugfs directory [ 90.082235][ T5784] hsr_slave_0: entered promiscuous mode [ 90.089179][ T5784] hsr_slave_1: entered promiscuous mode [ 90.095516][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.103193][ T5784] Cannot create hsr debugfs directory [ 90.417461][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.440866][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.451099][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.463128][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.550449][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.574990][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.586228][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.599351][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.688013][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.707189][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.718931][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.766036][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.846903][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.863189][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.876981][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.896891][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.960968][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.030444][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.076478][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.083941][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.121153][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.128396][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.177500][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.219834][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.260166][ T2931] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.267442][ T2931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.278764][ T2931] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.286075][ T2931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.306405][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.329041][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.387356][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.410004][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.470284][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.477530][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.516238][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.523432][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.568058][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.576096][ T5796] Bluetooth: hci1: command tx timeout [ 91.576121][ T5799] Bluetooth: hci0: command tx timeout [ 91.581529][ T5796] Bluetooth: hci3: command tx timeout [ 91.621177][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.628439][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.663808][ T5796] Bluetooth: hci2: command tx timeout [ 91.710522][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.717792][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.853447][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.028615][ T5786] veth0_vlan: entered promiscuous mode [ 92.082078][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.094862][ T5786] veth1_vlan: entered promiscuous mode [ 92.219212][ T5786] veth0_macvtap: entered promiscuous mode [ 92.230529][ T5787] veth0_vlan: entered promiscuous mode [ 92.249324][ T5786] veth1_macvtap: entered promiscuous mode [ 92.286145][ T5787] veth1_vlan: entered promiscuous mode [ 92.328934][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.358551][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.373021][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.388304][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.391251][ T8] cfg80211: failed to load regulatory.db [ 92.400319][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.416326][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.436190][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.537940][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.559268][ T5787] veth0_macvtap: entered promiscuous mode [ 92.586895][ T5787] veth1_macvtap: entered promiscuous mode [ 92.645221][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.653346][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.691504][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.704294][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.717227][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.748126][ T5784] veth0_vlan: entered promiscuous mode [ 92.769476][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.780304][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.795507][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.818904][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.821256][ T5784] veth1_vlan: entered promiscuous mode [ 92.832531][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.845603][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.856882][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.866642][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.875902][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.918680][ T5783] veth0_vlan: entered promiscuous mode [ 92.962588][ T5784] veth0_macvtap: entered promiscuous mode [ 92.971996][ T5783] veth1_vlan: entered promiscuous mode [ 92.997735][ T5784] veth1_macvtap: entered promiscuous mode [ 93.030065][ T5783] veth0_macvtap: entered promiscuous mode [ 93.079974][ T5783] veth1_macvtap: entered promiscuous mode [ 93.112899][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.133976][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.144868][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.156054][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.169523][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.222921][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.235406][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.247204][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.258935][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.271937][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.316982][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.328477][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.360078][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.370156][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.394687][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.405725][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.416122][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.427665][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.440021][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.451466][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.484065][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.493054][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.529114][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.615019][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.629588][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.639864][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.653807][ T5796] Bluetooth: hci0: command tx timeout [ 93.653897][ T5799] Bluetooth: hci1: command tx timeout [ 93.661850][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.665636][ T5799] Bluetooth: hci3: command tx timeout [ 93.685863][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.701265][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.721600][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.747245][ T5796] Bluetooth: hci2: command tx timeout [ 93.793191][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.806629][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.824154][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.833095][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.862380][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.876793][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.098151][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.130995][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.272202][ T5885] syz.0.1[5885]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.289218][ T5885] loop0: detected capacity change from 0 to 128 [ 94.586402][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.782830][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.903587][ T5885] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.996055][ T5885] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.046698][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.094997][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.353356][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.243699][ T5789] Bluetooth: hci0: command tx timeout [ 96.249192][ T5789] Bluetooth: hci2: command tx timeout [ 96.254815][ T5799] Bluetooth: hci1: command tx timeout [ 96.260404][ T5796] Bluetooth: hci3: command tx timeout [ 96.285949][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.381310][ T5787] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.467681][ T5899] (null): rxe_set_mtu: Set mtu to 4096 [ 96.534862][ T5899] lo speed is unknown, defaulting to 1000 [ 96.537170][ T5903] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 96.564942][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.574715][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.633058][ T5903] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.640467][ T5903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.648879][ T5903] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.656162][ T5903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.738007][ T5903] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 96.842343][ T5904] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.568160][ T5899] lo speed is unknown, defaulting to 1000 [ 97.640002][ T5899] lo speed is unknown, defaulting to 1000 [ 98.191463][ T5917] Zero length message leads to an empty skb [ 99.734562][ T5919] tty tty3: ldisc open failed (-12), clearing slot 2 [ 101.963627][ T5899] infiniband syz2: set active [ 102.113444][ T5899] infiniband syz2: added lo [ 102.176442][ T5899] syz2: rxe_create_cq: returned err = -12 [ 102.212537][ T5899] infiniband syz2: Couldn't create ib_mad CQ [ 102.242832][ T5899] infiniband syz2: Couldn't open port 1 [ 102.390048][ T5832] lo speed is unknown, defaulting to 1000 [ 102.397547][ T5929] lo speed is unknown, defaulting to 1000 [ 102.408527][ T5899] RDS/IB: syz2: added [ 102.413224][ T5899] smc: adding ib device syz2 with port count 1 [ 102.420044][ T5899] smc: ib device syz2 port 1 has pnetid [ 102.434611][ T5832] lo speed is unknown, defaulting to 1000 [ 102.724823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.739024][ T5899] lo speed is unknown, defaulting to 1000 [ 103.304821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.600779][ T5941] netlink: 'syz.1.16': attribute type 1 has an invalid length. [ 103.873470][ T5944] vlan2: entered allmulticast mode [ 104.304212][ T5944] dummy0: entered allmulticast mode [ 104.440628][ T5899] lo speed is unknown, defaulting to 1000 [ 104.778898][ T5899] lo speed is unknown, defaulting to 1000 [ 104.944710][ T55] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.404863][ T55] usb 2-1: Using ep0 maxpacket: 16 [ 105.547421][ T55] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.587420][ T55] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.648626][ T55] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.661543][ T5899] lo speed is unknown, defaulting to 1000 [ 105.685884][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.699966][ T55] usb 2-1: Product: syz [ 105.704017][ T5954] loop0: detected capacity change from 0 to 512 [ 105.706481][ T55] usb 2-1: Manufacturer: syz [ 105.725012][ T55] usb 2-1: SerialNumber: syz [ 105.878405][ T5954] EXT4-fs (loop0): Test dummy encryption mode enabled [ 105.886909][ T5954] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 105.900962][ T5954] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 105.922041][ T5954] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.20: bad orphan inode 131083 [ 105.945186][ T5954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.982062][ T55] usb 2-1: 0:2 : does not exist [ 106.022204][ T55] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 106.314169][ T55] usb 2-1: USB disconnect, device number 2 [ 106.366892][ T5954] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 106.792675][ T5966] xt_connbytes: Forcing CT accounting to be enabled [ 106.800025][ T5966] set match dimension is over the limit! [ 107.409550][ T5968] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.20: iget: bad extra_isize 1312 (inode size 256) [ 108.003521][ C1] sched: RT throttling activated [ 108.044610][ T5972] @: renamed from vlan0 (while UP) [ 109.517627][ T5981] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.668772][ T5986] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.332071][ T5996] vlan0: entered promiscuous mode [ 111.517096][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.189636][ T5981] kvm: kvm [5980]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x2d00000800 [ 113.109898][ T5999] loop1: detected capacity change from 0 to 131072 [ 113.123640][ T5999] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 113.132534][ T5999] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 113.153571][ T5999] F2FS-fs (loop1): invalid crc value [ 113.188862][ T5999] F2FS-fs (loop1): Found nat_bits in checkpoint [ 113.190160][ T6007] loop0: detected capacity change from 0 to 256 [ 113.253166][ T5934] IPVS: starting estimator thread 0... [ 113.271557][ T6007] ======================================================= [ 113.271557][ T6007] WARNING: The mand mount option has been deprecated and [ 113.271557][ T6007] and is ignored by this kernel. Remove the mand [ 113.271557][ T6007] option from the mount to silence this warning. [ 113.271557][ T6007] ======================================================= [ 113.306850][ T5999] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 113.307162][ T5999] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 113.443830][ T6013] IPVS: using max 16 ests per chain, 38400 per kthread [ 113.514114][ T6007] FAT-fs (loop0): Directory bread(block 64) failed [ 113.557461][ T6007] FAT-fs (loop0): Directory bread(block 65) failed [ 113.564883][ T6007] FAT-fs (loop0): Directory bread(block 66) failed [ 113.571491][ T6007] FAT-fs (loop0): Directory bread(block 67) failed [ 113.578263][ T6007] FAT-fs (loop0): Directory bread(block 68) failed [ 113.584925][ T6007] FAT-fs (loop0): Directory bread(block 69) failed [ 113.591648][ T6007] FAT-fs (loop0): Directory bread(block 70) failed [ 113.598332][ T6007] FAT-fs (loop0): Directory bread(block 71) failed [ 113.605599][ T6007] FAT-fs (loop0): Directory bread(block 72) failed [ 113.612158][ T6007] FAT-fs (loop0): Directory bread(block 73) failed [ 113.619568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 113.633898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.711545][ T6020] netlink: zone id is out of range [ 114.363581][ T28] audit: type=1800 audit(1756433055.720:2): pid=6007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.31" name="cpu.stat" dev="loop0" ino=1048592 res=0 errno=0 [ 114.367508][ T6007] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006c61) [ 114.394328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.402903][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.503798][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.37'. [ 120.508545][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 121.827802][ T6059] netlink: 28 bytes leftover after parsing attributes in process `syz.1.42'. [ 124.593822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 124.603722][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 124.614238][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 126.387111][ T6092] loop3: detected capacity change from 0 to 8 [ 127.189392][ T6100] UBIFS error (pid: 6100): cannot open "./file0", error -22 [ 127.204227][ T6098] process 'syz.0.53' launched './file0' with NULL argv: empty string added [ 127.729265][ T6105] SQUASHFS error: lzo decompression failed, data probably corrupt [ 127.737937][ T6105] SQUASHFS error: Failed to read block 0x0: -5 [ 127.744753][ T6105] SQUASHFS error: lzo decompression failed, data probably corrupt [ 127.752649][ T6105] SQUASHFS error: Failed to read block 0x0: -5 [ 127.760689][ T28] audit: type=1800 audit(1756433069.130:3): pid=6105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.52" name="file2" dev="loop3" ino=3 res=0 errno=0 [ 127.797138][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.54'. [ 127.855223][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.54'. [ 127.861183][ T6110] loop2: detected capacity change from 0 to 1024 [ 131.014390][ T6134] tipc: Started in network mode [ 131.033106][ T6134] tipc: Node identity 7ed2c113a486, cluster identity 4711 [ 131.047290][ T6134] tipc: Enabled bearer , priority 0 [ 131.061953][ T6134] syzkaller0: entered promiscuous mode [ 131.071393][ T6134] syzkaller0: entered allmulticast mode [ 131.130723][ T6134] tipc: Resetting bearer [ 131.198445][ T6133] tipc: Resetting bearer [ 131.314071][ T42] hfsplus: b-tree write err: -5, ino 4 [ 131.314161][ T6133] tipc: Disabling bearer [ 131.621588][ T6137] loop2: detected capacity change from 0 to 512 [ 131.671872][ T6137] EXT4-fs: Ignoring removed orlov option [ 131.876301][ T6137] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 132.777916][ T6137] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 132.872359][ T6137] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.63: corrupted in-inode xattr: e_value size too large [ 132.976582][ T6137] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.63: couldn't read orphan inode 15 (err -117) [ 133.212784][ T6137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.300740][ T6147] xt_TCPMSS: Only works on TCP SYN packets [ 133.972597][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.979920][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.181733][ T6151] loop0: detected capacity change from 0 to 4096 [ 135.210712][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.228109][ T6151] ntfs3: Bad value for 'gid' [ 135.233768][ T6154] netlink: 32 bytes leftover after parsing attributes in process `syz.1.67'. [ 135.243360][ T6154] netlink: 32 bytes leftover after parsing attributes in process `syz.1.67'. [ 137.239073][ T6164] binder: 6161:6164 ioctl c0306201 0 returned -14 [ 137.255461][ T6164] netlink: 'syz.0.70': attribute type 4 has an invalid length. [ 138.102936][ T6168] tipc: Started in network mode [ 138.113741][ T6168] tipc: Node identity 6288cbf268c, cluster identity 4711 [ 138.142722][ T6168] tipc: Enabled bearer , priority 0 [ 138.285278][ T6168] tipc: Resetting bearer [ 138.317470][ T6171] syzkaller0: entered promiscuous mode [ 138.655315][ T6167] tipc: Resetting bearer [ 138.716874][ T6167] tipc: Disabling bearer [ 139.557747][ T6180] loop3: detected capacity change from 0 to 1024 [ 146.665069][ T6236] tipc: Enabled bearer , priority 0 [ 146.683205][ T6236] syzkaller0: entered promiscuous mode [ 146.694867][ T6236] syzkaller0: entered allmulticast mode [ 147.111338][ T5897] IPVS: starting estimator thread 0... [ 147.223788][ T6242] IPVS: using max 21 ests per chain, 50400 per kthread [ 147.420410][ T6235] tipc: Resetting bearer [ 147.903957][ T55] tipc: Node number set to 172542962 [ 148.878496][ T6235] tipc: Disabling bearer [ 151.535985][ T50] Bluetooth: hci3: command tx timeout [ 151.859322][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'. [ 153.191603][ T6287] loop1: detected capacity change from 0 to 2048 [ 154.335179][ T6287] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 154.487083][ T5795] udevd[5795]: incorrect nilfs2 checksum on /dev/loop1 [ 155.551690][ T6287] NILFS (loop1): error -4 creating segctord thread [ 165.837004][ T6366] loop1: detected capacity change from 0 to 8 [ 165.852016][ T6366] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 167.276696][ T6374] loop0: detected capacity change from 0 to 1024 [ 167.361741][ T6374] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 167.379022][ T6374] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.306265][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 169.817788][ T50] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 169.828596][ T50] Bluetooth: hci3: Injecting HCI hardware error event [ 169.837326][ T50] Bluetooth: hci3: hardware error 0x00 [ 170.232029][ T6410] loop1: detected capacity change from 0 to 1024 [ 172.554861][ T50] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 172.570025][ T6435] loop3: detected capacity change from 0 to 512 [ 172.582924][ T6435] ext2: Bad value for 'commit' [ 175.136590][ T6441] tty tty2: ldisc open failed (-12), clearing slot 1 [ 175.179055][ T5785] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 175.531010][ T6451] loop2: detected capacity change from 0 to 512 [ 175.544718][ T6451] EXT4-fs: Ignoring removed orlov option [ 175.615912][ T6451] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 178.120248][ T6463] loop0: detected capacity change from 0 to 40427 [ 178.296781][ T6460] syz.0.138 (6460): drop_caches: 2 [ 178.665786][ T6463] F2FS-fs (loop0): Unrecognized mount option "18446744073709551615" or missing value [ 178.908917][ T6451] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 178.985831][ T6451] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.136: corrupted in-inode xattr: e_value size too large [ 179.050601][ T6451] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.136: couldn't read orphan inode 15 (err -117) [ 179.082988][ T6451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.787209][ T6473] loop1: detected capacity change from 0 to 128 [ 179.819160][ T6473] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 179.847516][ T6473] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 180.210678][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.772661][ T1121] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.224550][ T6476] kvm: kvm [6475]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 181.236316][ T6476] kvm: kvm [6475]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 182.081413][ T6486] tipc: Enabling of bearer rejected, failed to enable media [ 187.462603][ T6539] loop0: detected capacity change from 0 to 2048 [ 187.530797][ T6539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.627376][ T6539] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.771810][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.696027][ T6574] loop3: detected capacity change from 0 to 512 [ 192.281135][ T6574] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #2: block 3: comm syz.3.160: lblock 0 mapped to illegal pblock 3 (length 1) [ 192.314403][ T6574] EXT4-fs (loop3): Remounting filesystem read-only [ 192.320949][ T6574] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.160: error -117 reading directory block [ 192.333964][ T6574] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 192.343099][ T6574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.716694][ T6560] lo speed is unknown, defaulting to 1000 [ 192.831989][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.485097][ T6585] netlink: 24 bytes leftover after parsing attributes in process `syz.2.163'. [ 193.735307][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.163'. [ 194.462574][ T6592] netlink: 'syz.1.164': attribute type 1 has an invalid length. [ 194.596833][ T6592] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.707910][ T6594] bond2: (slave veth3): Enslaving as an active interface with a down link [ 194.777577][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.784303][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.813622][ T6591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.985716][ T6592] vlan2: entered allmulticast mode [ 196.083558][ T6592] macvtap0: entered allmulticast mode [ 196.116602][ T6592] veth0_macvtap: entered allmulticast mode [ 196.729740][ T6592] bond2: (slave vlan2): making interface the new active one [ 197.202839][ T6592] vlan2: entered promiscuous mode [ 197.213037][ T6592] macvtap0: entered promiscuous mode [ 197.220820][ T6592] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 197.395670][ T6610] loop3: detected capacity change from 0 to 512 [ 197.405519][ T6610] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 197.464379][ T6610] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 197.472490][ T6610] System zones: 1-12 [ 197.478883][ T6610] EXT4-fs (loop3): 1 truncate cleaned up [ 197.486022][ T6610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.009439][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.920985][ T6628] loop3: detected capacity change from 0 to 256 [ 200.981947][ T6628] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 201.384672][ T6633] xt_TCPMSS: Only works on TCP SYN packets [ 201.669150][ T6635] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 203.946500][ T6640] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 203.953503][ T6640] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 204.119750][ T6640] vhci_hcd vhci_hcd.0: Device attached [ 204.124713][ T6643] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 204.157583][ T6645] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 204.164192][ T6645] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 204.173946][ T6645] vhci_hcd vhci_hcd.0: Device attached [ 204.224349][ T6640] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(10) [ 204.231036][ T6640] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 204.271596][ T6640] vhci_hcd vhci_hcd.0: Device attached [ 204.385193][ T9] vhci_hcd: vhci_device speed not set [ 204.456470][ T6640] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 204.733393][ T6643] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(14) [ 204.740074][ T6643] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 205.027657][ T6643] vhci_hcd vhci_hcd.0: Device attached [ 205.342383][ T6649] vhci_hcd: connection closed [ 205.377237][ T6646] vhci_hcd: connection closed [ 205.385193][ T6642] vhci_hcd: connection closed [ 205.392478][ T9] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 205.432107][ T6644] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 205.445233][ T42] vhci_hcd: stop threads [ 205.450232][ T42] vhci_hcd: release socket [ 205.575492][ T42] vhci_hcd: disconnect device [ 205.587079][ T42] vhci_hcd: stop threads [ 205.642203][ T42] vhci_hcd: release socket [ 205.787507][ T42] vhci_hcd: disconnect device [ 205.904615][ T42] vhci_hcd: stop threads [ 206.093364][ T6654] vhci_hcd: connection closed [ 206.101477][ T42] vhci_hcd: release socket [ 206.137656][ T42] vhci_hcd: disconnect device [ 206.171040][ T42] vhci_hcd: stop threads [ 206.273682][ T42] vhci_hcd: release socket [ 206.293826][ T42] vhci_hcd: disconnect device [ 207.481881][ T6675] loop2: detected capacity change from 0 to 1024 [ 207.517529][ T6665] dummy0: entered promiscuous mode [ 207.523186][ T6665] vlan0: entered promiscuous mode [ 207.606156][ T6677] loop1: detected capacity change from 0 to 512 [ 207.627050][ T6677] EXT4-fs: Ignoring removed orlov option [ 207.666289][ T6677] ext4: Unknown parameter 'fsmagic' [ 207.994513][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.006332][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.015292][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.156082][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.169669][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 208.179101][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.513320][ T2931] hfsplus: b-tree write err: -5, ino 4 [ 208.740186][ T6690] loop2: detected capacity change from 0 to 512 [ 208.749172][ T6690] EXT4-fs: Ignoring removed mblk_io_submit option [ 208.783608][ T6690] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 208.791855][ T6690] EXT4-fs (loop2): DAX unsupported by block device. [ 208.839036][ T1142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.893661][ T6679] lo speed is unknown, defaulting to 1000 [ 208.996434][ T1142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.305302][ T6693] Driver unsupported XDP return value 0 on prog (id 57) dev N/A, expect packet loss! [ 210.699087][ T6706] netlink: 20 bytes leftover after parsing attributes in process `syz.3.190'. [ 210.743093][ T50] Bluetooth: hci2: command tx timeout [ 210.796843][ T1142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.647726][ T9] vhci_hcd: vhci_device speed not set [ 212.776298][ T5799] Bluetooth: hci0: command 0x0406 tx timeout [ 212.782413][ T5799] Bluetooth: hci1: command 0x0406 tx timeout [ 212.789024][ T5799] Bluetooth: hci2: command tx timeout [ 212.991506][ T6722] loop1: detected capacity change from 0 to 16 [ 212.998867][ T6722] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 214.708688][ T1142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.755957][ T6725] netlink: 80 bytes leftover after parsing attributes in process `syz.3.192'. [ 214.767023][ T6725] netlink: 80 bytes leftover after parsing attributes in process `syz.3.192'. [ 214.863695][ T5796] Bluetooth: hci2: command tx timeout [ 215.980495][ T6679] chnl_net:caif_netlink_parms(): no params data found [ 216.127345][ T55] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 216.261172][ T6750] loop2: detected capacity change from 0 to 16 [ 216.282500][ T6750] erofs: (device loop2): erofs_read_inode: unsupported i_format 32 of nid 36 [ 216.364369][ T55] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 216.383768][ T55] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 216.410831][ T55] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 216.421770][ T55] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 216.439237][ T55] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 216.464360][ T55] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 216.526359][ T55] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 216.535313][ T55] usb 2-1: Product: syz [ 216.541352][ T6535] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 216.553974][ T55] usb 2-1: Manufacturer: syz [ 216.655351][ T6754] loop3: detected capacity change from 0 to 256 [ 216.716236][ T6754] FAT-fs (loop3): count of clusters too big (178174) [ 216.723093][ T6754] FAT-fs (loop3): Can't find a valid FAT filesystem [ 216.999359][ T50] Bluetooth: hci2: command tx timeout [ 217.462830][ T55] cdc_wdm 2-1:1.0: skipping garbage [ 217.720904][ T55] cdc_wdm 2-1:1.0: skipping garbage [ 218.227265][ T55] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 218.243317][ T55] cdc_wdm 2-1:1.0: Unknown control protocol [ 218.263907][ T55] usb 2-1: USB disconnect, device number 3 [ 218.420792][ T6679] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.572928][ T6679] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.135643][ T6764] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 219.156332][ T6679] bridge_slave_0: entered allmulticast mode [ 219.210552][ T6679] bridge_slave_0: entered promiscuous mode [ 219.265768][ T1142] tipc: Left network mode [ 219.285501][ T6679] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.292797][ T6679] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.346534][ T6679] bridge_slave_1: entered allmulticast mode [ 219.370437][ T6679] bridge_slave_1: entered promiscuous mode [ 219.671994][ T6679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.700451][ T6679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.913405][ T6679] team0: Port device team_slave_0 added [ 220.931667][ T6679] team0: Port device team_slave_1 added [ 222.225754][ T6679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.232817][ T6679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.452559][ T6679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.443036][ T6679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.087299][ T6679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.218048][ T6679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.305615][ T48] vlan2: left promiscuous mode [ 224.325517][ T48] macvtap0: left promiscuous mode [ 224.395091][ T6679] hsr_slave_0: entered promiscuous mode [ 224.414914][ T6679] hsr_slave_1: entered promiscuous mode [ 224.431591][ T6679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.451789][ T6679] Cannot create hsr debugfs directory [ 229.596734][ T6840] loop3: detected capacity change from 0 to 65 [ 229.673691][ T6840] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 [ 231.135191][ T6679] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 231.205170][ T6679] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 231.366675][ T1142] hsr_slave_0: left promiscuous mode [ 231.396206][ T1142] hsr_slave_1: left promiscuous mode [ 231.454718][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.490535][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.571576][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.588808][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.597499][ T1142] bridge_slave_1: left allmulticast mode [ 231.603719][ T1142] bridge_slave_1: left promiscuous mode [ 231.610876][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.658358][ T1142] bridge_slave_0: left allmulticast mode [ 231.664243][ T1142] bridge_slave_0: left promiscuous mode [ 231.692225][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.943268][ T6852] loop1: detected capacity change from 0 to 1024 [ 232.036982][ T1142] veth1_vlan: left promiscuous mode [ 232.117121][ T1142] veth0_vlan: left promiscuous mode [ 232.652143][ T6856] loop2: detected capacity change from 0 to 512 [ 232.858430][ T6856] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 233.243309][ T6856] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.215: invalid indirect mapped block 4294967295 (level 0) [ 233.264024][ T6856] EXT4-fs (loop2): Remounting filesystem read-only [ 233.271550][ T6856] EXT4-fs (loop2): 1 orphan inode deleted [ 233.277344][ T6856] EXT4-fs (loop2): 1 truncate cleaned up [ 233.284025][ T6856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.525942][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.688913][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 234.794229][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 234.900780][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.125575][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.406914][ T6881] loop1: detected capacity change from 0 to 512 [ 237.414639][ T6881] EXT4-fs: Ignoring removed mblk_io_submit option [ 237.431161][ T6881] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 237.465077][ T6881] EXT4-fs (loop1): DAX unsupported by block device. [ 238.636871][ T6888] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 238.643543][ T6888] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 238.666043][ T6888] vhci_hcd vhci_hcd.0: Device attached [ 238.687168][ T6888] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 239.262110][ T5848] vhci_hcd: vhci_device speed not set [ 239.821823][ T6888] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(9) [ 239.828430][ T6888] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 239.865441][ T5848] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 239.920714][ T6902] loop3: detected capacity change from 0 to 1024 [ 240.057083][ T6888] vhci_hcd vhci_hcd.0: Device attached [ 240.118176][ T6899] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(12) [ 240.124873][ T6899] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 240.329437][ T6899] vhci_hcd vhci_hcd.0: Device attached [ 240.385551][ T6909] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 240.404330][ T6904] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(15) [ 240.411019][ T6904] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 240.471388][ T6904] vhci_hcd vhci_hcd.0: Device attached [ 240.489067][ T6910] loop1: detected capacity change from 0 to 2048 [ 240.517335][ T6907] vhci_hcd: connection closed [ 240.518136][ T6901] vhci_hcd: connection closed [ 240.520065][ T6889] vhci_hcd: connection reset by peer [ 240.523894][ T6895] vhci_hcd: connection closed [ 240.534425][ T1081] vhci_hcd: stop threads [ 240.547546][ T6910] UDF-fs: bad mount option "uid=00000000000000000000Dy" or missing value [ 240.564910][ T1081] vhci_hcd: release socket [ 240.588676][ T1081] vhci_hcd: disconnect device [ 240.606605][ T1081] vhci_hcd: stop threads [ 240.611025][ T1081] vhci_hcd: release socket [ 240.632885][ T1081] vhci_hcd: disconnect device [ 240.667893][ T1081] vhci_hcd: stop threads [ 240.672892][ T1081] vhci_hcd: release socket [ 240.757398][ T1081] vhci_hcd: disconnect device [ 240.803711][ T1081] vhci_hcd: stop threads [ 240.810591][ T1081] vhci_hcd: release socket [ 240.839815][ T1081] vhci_hcd: disconnect device [ 240.961454][ T1142] bond0 (unregistering): Released all slaves [ 241.625742][ T6679] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 241.704683][ T6679] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 242.090232][ T6930] syz.2.229: attempt to access beyond end of device [ 242.090232][ T6930] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 242.103623][ T6930] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 244.358595][ T6679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.390463][ T6679] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.450541][ T6465] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.457771][ T6465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.556929][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.564205][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.663824][ T6947] tipc: Enabling of bearer rejected, failed to enable media [ 244.981409][ T1142] IPVS: stop unused estimator thread 0... [ 245.024069][ T5848] vhci_hcd: vhci_device speed not set [ 245.200214][ T28] audit: type=1326 audit(1756433186.555:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6966 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530c78ebe9 code=0x7ffc0000 [ 245.224239][ T6970] netlink: 28 bytes leftover after parsing attributes in process `syz.3.241'. [ 245.252236][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.241'. [ 245.283746][ T28] audit: type=1326 audit(1756433186.565:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6966 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f530c78ebe9 code=0x7ffc0000 [ 245.305214][ T6970] netlink: 'syz.3.241': attribute type 10 has an invalid length. [ 245.335187][ T6970] bridge0: port 3(team0) entered blocking state [ 245.341617][ T6970] bridge0: port 3(team0) entered disabled state [ 245.345842][ T28] audit: type=1326 audit(1756433186.565:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6966 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530c78ebe9 code=0x7ffc0000 [ 245.370928][ T6970] team0: entered allmulticast mode [ 245.383711][ T6970] team_slave_0: entered allmulticast mode [ 245.403194][ T28] audit: type=1326 audit(1756433186.565:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6966 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f530c78ebe9 code=0x7ffc0000 [ 245.403637][ T6970] team_slave_1: entered allmulticast mode [ 245.458902][ T28] audit: type=1326 audit(1756433186.565:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6966 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530c78ebe9 code=0x7ffc0000 [ 245.482046][ T6970] team0: entered promiscuous mode [ 245.503143][ T6970] team_slave_0: entered promiscuous mode [ 245.516063][ T6970] team_slave_1: entered promiscuous mode [ 245.524810][ T28] audit: type=1326 audit(1756433186.565:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6966 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f530c78ebe9 code=0x7ffc0000 [ 245.544876][ T6970] bridge0: port 3(team0) entered blocking state [ 245.553587][ T6970] bridge0: port 3(team0) entered forwarding state [ 245.595869][ T28] audit: type=1326 audit(1756433186.565:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6966 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530c78ebe9 code=0x7ffc0000 [ 245.671094][ T28] audit: type=1326 audit(1756433186.585:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6966 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f530c78ebe9 code=0x7ffc0000 [ 245.736362][ T28] audit: type=1326 audit(1756433186.595:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6966 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530c78ebe9 code=0x7ffc0000 [ 245.815145][ T28] audit: type=1326 audit(1756433186.595:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6966 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f530c78ebe9 code=0x7ffc0000 [ 246.006835][ T6679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.686120][ T6679] veth0_vlan: entered promiscuous mode [ 246.701511][ T6679] veth1_vlan: entered promiscuous mode [ 246.764616][ T6679] veth0_macvtap: entered promiscuous mode [ 246.784223][ T6679] veth1_macvtap: entered promiscuous mode [ 246.823381][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.839051][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.852020][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.877086][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.889734][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.903129][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.927343][ T6679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.964701][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.998258][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.024108][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.036527][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.046979][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.058418][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.070194][ T6679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.122055][ T6679] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.134808][ T6679] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.143923][ T6679] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.153525][ T6679] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.296338][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.319080][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.369263][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.377973][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.906474][ T7009] loop2: detected capacity change from 0 to 32768 [ 248.802215][ T7007] loop3: detected capacity change from 0 to 4096 [ 248.832180][ T7009] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 251.467477][ T7030] syz.2.245 (7030) used greatest stack depth: 17800 bytes left [ 251.846142][ T5786] (syz-executor,5786,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 251.878739][ T7038] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 251.885340][ T7038] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 251.903958][ T7042] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 252.040579][ T7038] vhci_hcd vhci_hcd.0: Device attached [ 252.191098][ T7042] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(10) [ 252.197780][ T7042] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 252.314154][ T55] vhci_hcd: vhci_device speed not set [ 252.386411][ T5786] ocfs2: Unmounting device (7,2) on (node local) [ 252.495369][ T55] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 252.547411][ T7042] vhci_hcd vhci_hcd.0: Device attached [ 252.722650][ T7038] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(7) [ 252.729270][ T7038] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 252.742363][ T7042] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12) [ 252.745231][ T7054] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 252.749014][ T7042] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 252.807910][ T7038] vhci_hcd vhci_hcd.0: Device attached [ 252.809826][ T7042] vhci_hcd vhci_hcd.0: Device attached [ 252.872540][ T7058] tipc: Enabling of bearer rejected, failed to enable media [ 253.033224][ T7048] vhci_hcd: connection closed [ 253.033894][ T7051] vhci_hcd: connection closed [ 253.034769][ T7044] vhci_hcd: connection closed [ 253.045037][ T7039] vhci_hcd: connection reset by peer [ 253.049878][ T48] vhci_hcd: stop threads [ 253.064367][ T48] vhci_hcd: release socket [ 253.079386][ T48] vhci_hcd: disconnect device [ 253.098396][ T48] vhci_hcd: stop threads [ 253.108444][ T48] vhci_hcd: release socket [ 253.133645][ T48] vhci_hcd: disconnect device [ 253.183392][ T48] vhci_hcd: stop threads [ 253.197503][ T48] vhci_hcd: release socket [ 253.209952][ T48] vhci_hcd: disconnect device [ 253.236206][ T48] vhci_hcd: stop threads [ 253.255941][ T48] vhci_hcd: release socket [ 253.279014][ T48] vhci_hcd: disconnect device [ 254.779549][ T7081] loop1: detected capacity change from 0 to 512 [ 255.089269][ T7081] EXT4-fs: Ignoring removed bh option [ 255.106842][ T7084] loop4: detected capacity change from 0 to 128 [ 255.170535][ T7081] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 255.251598][ T7081] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 255.316905][ T7084] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 255.437554][ T7081] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 255.460966][ T7084] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.546776][ T7081] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 256.149752][ T7081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.300305][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.307093][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.077633][ T6679] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 257.753276][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.813850][ T55] vhci_hcd: vhci_device speed not set [ 259.116388][ T7130] tipc: Enabling of bearer rejected, failed to enable media [ 260.268132][ T7144] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 260.274743][ T7144] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 260.316559][ T7144] vhci_hcd vhci_hcd.0: Device attached [ 260.332138][ T7151] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 260.530872][ T7151] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(10) [ 260.537564][ T7151] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 260.562337][ T7151] vhci_hcd vhci_hcd.0: Device attached [ 260.575330][ T27] vhci_hcd: vhci_device speed not set [ 260.655822][ T7144] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(7) [ 260.662426][ T7144] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 260.673802][ T27] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 260.696422][ T7144] vhci_hcd vhci_hcd.0: Device attached [ 260.838722][ T7144] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 260.864944][ T7167] trusted_key: encrypted_key: insufficient parameters specified [ 260.979019][ T7151] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(12) [ 260.985708][ T7151] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 261.003360][ T7151] vhci_hcd vhci_hcd.0: Device attached [ 261.456823][ T7164] vhci_hcd: connection closed [ 261.457530][ T7157] vhci_hcd: connection closed [ 261.462703][ T1121] vhci_hcd: stop threads [ 261.465047][ T7153] vhci_hcd: connection closed [ 261.475803][ T7147] vhci_hcd: connection reset by peer [ 261.503583][ T1121] vhci_hcd: release socket [ 261.511501][ T1121] vhci_hcd: disconnect device [ 261.573965][ T1121] vhci_hcd: stop threads [ 261.578282][ T1121] vhci_hcd: release socket [ 261.599450][ T1121] vhci_hcd: disconnect device [ 261.667743][ T1121] vhci_hcd: stop threads [ 261.672569][ T1121] vhci_hcd: release socket [ 261.718967][ T1121] vhci_hcd: disconnect device [ 261.750288][ T1121] vhci_hcd: stop threads [ 261.762335][ T1121] vhci_hcd: release socket [ 261.775315][ T1121] vhci_hcd: disconnect device [ 262.452406][ T7166] loop3: detected capacity change from 0 to 32768 [ 262.573643][ T7166] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 263.196333][ T7166] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 263.365048][ T7162] tipc: Started in network mode [ 263.388903][ T7162] tipc: Node identity 72df2c476379, cluster identity 4711 [ 263.409845][ T7162] tipc: Enabled bearer , priority 0 [ 263.444296][ T7166] syzkaller0: entered promiscuous mode [ 263.450590][ T7166] syzkaller0: entered allmulticast mode [ 263.574495][ T7166] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 263.654093][ T7162] tipc: Resetting bearer [ 263.712225][ T7158] tipc: Resetting bearer [ 263.850205][ T7158] tipc: Disabling bearer [ 265.933650][ T27] vhci_hcd: vhci_device speed not set [ 266.108538][ T5783] ocfs2: Unmounting device (7,3) on (node local) [ 267.244830][ T7225] netlink: 28 bytes leftover after parsing attributes in process `syz.3.269'. [ 267.683607][ T55] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 268.361266][ T7248] loop3: detected capacity change from 0 to 512 [ 268.411202][ T7248] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 268.442215][ T7248] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.274: invalid indirect mapped block 4294967295 (level 0) [ 268.502310][ T7248] EXT4-fs (loop3): Remounting filesystem read-only [ 268.502704][ T7248] EXT4-fs (loop3): 1 orphan inode deleted [ 268.502723][ T7248] EXT4-fs (loop3): 1 truncate cleaned up [ 268.505405][ T7248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.557470][ T55] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 268.713736][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.713763][ T55] usb 5-1: Product: syz [ 268.713780][ T55] usb 5-1: Manufacturer: syz [ 268.713794][ T55] usb 5-1: SerialNumber: syz [ 268.721452][ T55] usb 5-1: config 0 descriptor?? [ 268.754480][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.925342][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.284'. [ 269.153953][ T55] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 269.231590][ T7266] syz.2.276 uses obsolete (PF_INET,SOCK_PACKET) [ 270.068614][ T7274] loop1: detected capacity change from 0 to 512 [ 270.081504][ T7274] EXT4-fs: Ignoring removed nobh option [ 270.115478][ T5172] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 270.150688][ T7274] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.277: iget: bad i_size value: 38620345925642 [ 270.175114][ T7274] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.277: couldn't read orphan inode 15 (err -117) [ 270.195123][ T7274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.504134][ T5172] usb 3-1: unable to get BOS descriptor or descriptor too short [ 270.512793][ T5172] usb 3-1: not running at top speed; connect to a high speed hub [ 270.537651][ T5172] usb 3-1: config 8 has an invalid interface number: 11 but max is 0 [ 270.555632][ T5172] usb 3-1: config 8 has an invalid descriptor of length 4, skipping remainder of the config [ 270.570338][ T5172] usb 3-1: config 8 has no interface number 0 [ 270.814480][ T7283] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.277: bg 0: block 5: invalid block bitmap [ 271.027083][ T55] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 271.033668][ T5172] usb 3-1: config 8 interface 11 has no altsetting 0 [ 271.049503][ T7283] overlayfs: failed to verify origin (/, ino=2, err=-28) [ 271.053650][ T5172] usb 3-1: Dual-Role OTG device on HNP port [ 271.057179][ T7283] overlayfs: failed to verify upper root origin [ 271.074858][ T5172] usb 3-1: New USB device found, idVendor=08e9, idProduct=bdb3, bcdDevice=7c.ff [ 271.084438][ T55] usb 5-1: USB disconnect, device number 2 [ 271.106570][ T5172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.131475][ T5172] usb 3-1: Product: syz [ 271.168902][ T5172] usb 3-1: Manufacturer: syz [ 271.187986][ T5172] usb 3-1: SerialNumber: syz [ 271.214169][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.597188][ T5172] cdc_wdm 3-1:8.11: skipping garbage [ 271.620656][ T5172] cdc_wdm 3-1:8.11: skipping garbage [ 271.633882][ T5172] cdc_wdm: probe of 3-1:8.11 failed with error -22 [ 271.665203][ T5172] usb 3-1: USB disconnect, device number 2 [ 271.691747][ T7293] netlink: 'syz.3.279': attribute type 12 has an invalid length. [ 272.552855][ T7289] loop1: detected capacity change from 0 to 32768 [ 273.658368][ T7289] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 273.837673][ T7289] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 273.985713][ T7289] tipc: Started in network mode [ 274.005618][ T7289] tipc: Node identity 265c3080daed, cluster identity 4711 [ 274.032263][ T7289] tipc: Enabled bearer , priority 0 [ 274.050895][ T7316] syzkaller0: entered promiscuous mode [ 274.060422][ T7316] syzkaller0: entered allmulticast mode [ 274.154250][ T7289] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 274.186816][ T7289] tipc: Resetting bearer [ 274.224205][ T7288] tipc: Resetting bearer [ 274.289455][ T7288] tipc: Disabling bearer [ 274.556599][ T5784] ocfs2: Unmounting device (7,1) on (node local) [ 275.868535][ T7329] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 275.875129][ T7329] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 275.914380][ T7336] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 276.102606][ T7329] vhci_hcd vhci_hcd.0: Device attached [ 276.294067][ T6762] vhci_hcd: vhci_device speed not set [ 277.274481][ T6762] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 277.424440][ T7336] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(10) [ 277.431217][ T7336] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 277.439355][ T7336] vhci_hcd vhci_hcd.0: Device attached [ 277.463630][ T7329] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(7) [ 277.470243][ T7329] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 277.525681][ T7329] vhci_hcd vhci_hcd.0: Device attached [ 277.563740][ T7336] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12) [ 277.570509][ T7336] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 277.631228][ T7329] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 278.847247][ T7336] vhci_hcd vhci_hcd.0: Device attached [ 280.009284][ T7343] vhci_hcd: connection closed [ 280.010178][ T7332] vhci_hcd: connection reset by peer [ 280.021823][ T7346] vhci_hcd: connection closed [ 280.022049][ T7342] vhci_hcd: connection closed [ 280.054318][ T1081] vhci_hcd: stop threads [ 280.963511][ T1081] vhci_hcd: release socket [ 280.996484][ T1081] vhci_hcd: disconnect device [ 281.043702][ T1081] vhci_hcd: stop threads [ 281.078613][ T1081] vhci_hcd: release socket [ 281.106578][ T1081] vhci_hcd: disconnect device [ 281.154357][ T1081] vhci_hcd: stop threads [ 281.158713][ T1081] vhci_hcd: release socket [ 281.165065][ T1081] vhci_hcd: disconnect device [ 281.322418][ T1081] vhci_hcd: stop threads [ 281.339798][ T1081] vhci_hcd: release socket [ 282.098601][ T1081] vhci_hcd: disconnect device [ 282.420425][ T7398] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 282.484408][ T7398] loop2: detected capacity change from 0 to 128 [ 282.752395][ T7398] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 282.798642][ T7398] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 283.053638][ T6762] vhci_hcd: vhci_device speed not set [ 283.116407][ T7397] Device name cannot be null; rc = [-22] [ 283.462377][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.299'. [ 285.026665][ T7431] loop2: detected capacity change from 0 to 128 [ 285.191966][ T7431] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 285.266982][ T7431] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 288.429950][ T5786] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 290.686795][ T7457] loop4: detected capacity change from 0 to 40427 [ 290.724662][ T7457] F2FS-fs (loop4): Unrecognized mount option "18446744073709551615" or missing value [ 291.272754][ T6529] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 292.068647][ T7479] loop3: detected capacity change from 0 to 1024 [ 292.109398][ T7479] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 292.203294][ T7479] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.246851][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.980265][ T7544] loop3: detected capacity change from 0 to 40427 [ 302.030895][ T7544] F2FS-fs (loop3): Unrecognized mount option "18446744073709551615" or missing value [ 303.215153][ T7551] netlink: 'syz.1.328': attribute type 1 has an invalid length. [ 304.990175][ T7558] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 305.363253][ T1142] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 305.482576][ T7551] 8021q: adding VLAN 0 to HW filter on device bond3 [ 305.720931][ T7585] loop3: detected capacity change from 0 to 512 [ 305.765390][ T1142] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 305.811685][ T7585] EXT4-fs: Ignoring removed bh option [ 306.028210][ T7585] EXT4-fs error (device loop3): __ext4_iget:5053: inode #15: block 1803188595: comm syz.3.333: invalid block [ 306.113542][ T7585] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.333: couldn't read orphan inode 15 (err -117) [ 306.327272][ T7585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.986813][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.424327][ T7551] bond3 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 307.451953][ T7551] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 308.058186][ T7551] bond3 (unregistering): Released all slaves [ 311.645810][ T7629] loop1: detected capacity change from 0 to 40427 [ 311.689207][ T7629] F2FS-fs (loop1): Unrecognized mount option "18446744073709551615" or missing value [ 317.724202][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.750027][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.829822][ T7674] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 317.836423][ T7674] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 317.849847][ T7674] vhci_hcd vhci_hcd.0: Device attached [ 318.367542][ T7676] vhci_hcd: connection closed [ 318.383716][ T5832] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 318.469768][ T1081] vhci_hcd: stop threads [ 318.475027][ T1081] vhci_hcd: release socket [ 318.541389][ T1081] vhci_hcd: disconnect device [ 318.801687][ T7681] loop1: detected capacity change from 0 to 2048 [ 318.819884][ T7681] NILFS (loop1): unrecognized mount option "cp=0x0000000000000003p" [ 320.451592][ T7694] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 320.458180][ T7694] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 321.108076][ T7694] vhci_hcd vhci_hcd.0: Device attached [ 322.498830][ T7706] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 322.538398][ T7709] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(10) [ 322.545074][ T7709] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 322.616537][ T7709] vhci_hcd vhci_hcd.0: Device attached [ 322.622415][ T5848] vhci_hcd: vhci_device speed not set [ 323.673523][ T5832] vhci_hcd: vhci_device speed not set [ 323.737426][ T7709] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 323.841891][ T5848] usb 35-1: new full-speed USB device number 4 using vhci_hcd [ 323.887701][ T7694] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(14) [ 323.894368][ T7694] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 323.904250][ T7706] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 323.910819][ T7706] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 323.918849][ T7694] vhci_hcd vhci_hcd.0: Device attached [ 323.924849][ T7706] vhci_hcd vhci_hcd.0: Device attached [ 323.935020][ T7721] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 324.905107][ T7710] vhci_hcd: connection closed [ 324.905471][ T7697] vhci_hcd: connection reset by peer [ 324.905992][ T7715] vhci_hcd: connection closed [ 324.917131][ T42] vhci_hcd: stop threads [ 324.927607][ T7716] vhci_hcd: connection closed [ 324.947748][ T42] vhci_hcd: release socket [ 324.978444][ T42] vhci_hcd: disconnect device [ 324.984957][ T42] vhci_hcd: stop threads [ 324.989259][ T42] vhci_hcd: release socket [ 325.042210][ T42] vhci_hcd: disconnect device [ 325.064170][ T42] vhci_hcd: stop threads [ 325.193631][ T42] vhci_hcd: release socket [ 325.264310][ T42] vhci_hcd: disconnect device [ 325.319905][ T42] vhci_hcd: stop threads [ 325.392599][ T42] vhci_hcd: release socket [ 325.852862][ T7733] netlink: 16 bytes leftover after parsing attributes in process `syz.4.362'. [ 325.884179][ T42] vhci_hcd: disconnect device [ 326.708866][ T7745] loop2: detected capacity change from 0 to 64 [ 329.048223][ T5848] vhci_hcd: vhci_device speed not set [ 330.294394][ T7785] xt_connbytes: Forcing CT accounting to be enabled [ 330.301200][ T7785] set match dimension is over the limit! [ 335.034232][ T7822] loop1: detected capacity change from 0 to 4096 [ 335.138487][ T7822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.670649][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.767197][ T7811] delete_channel: no stack [ 337.904770][ T1081] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.787328][ T7875] loop4: detected capacity change from 0 to 1024 [ 340.953766][ T7875] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 341.499165][ T7875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.390469][ T6679] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.405474][ T7900] netlink: 'syz.3.389': attribute type 1 has an invalid length. [ 345.698893][ T7900] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.090866][ T7906] bond1: (slave veth3): Enslaving as an active interface with a down link [ 350.452464][ T7940] loop1: detected capacity change from 0 to 512 [ 351.074086][ T7940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.086828][ T7940] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 351.114977][ T7940] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #2: comm syz.1.397: corrupted inode contents [ 351.158277][ T7940] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #2: comm syz.1.397: mark_inode_dirty error [ 351.174151][ T7940] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #2: comm syz.1.397: corrupted inode contents [ 351.186437][ T7940] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.397: mark_inode_dirty error [ 351.345292][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.566129][ T7966] netlink: 6336 bytes leftover after parsing attributes in process `syz.4.401'. [ 359.507241][ T7988] tipc: Enabled bearer , priority 0 [ 359.535463][ T7988] syzkaller0: entered promiscuous mode [ 359.559191][ T7988] syzkaller0: entered allmulticast mode [ 360.507063][ T5934] tipc: Node number set to 4239470720 [ 360.534530][ T7987] tipc: Resetting bearer [ 361.135107][ T7987] tipc: Disabling bearer [ 361.631502][ T8004] xt_connbytes: Forcing CT accounting to be enabled [ 361.638687][ T8004] Cannot find set identified by id 0 to match [ 365.514715][ T8047] tipc: Enabled bearer , priority 0 [ 365.522460][ T8047] syzkaller0: entered promiscuous mode [ 365.626399][ T8047] syzkaller0: entered allmulticast mode [ 365.697101][ T8046] tipc: Resetting bearer [ 366.358360][ T8053] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 366.584016][ T787] tipc: Node number set to 296102983 [ 366.686281][ T8046] tipc: Disabling bearer [ 367.871800][ T8067] set match dimension is over the limit! [ 378.801056][ T8123] loop4: detected capacity change from 0 to 1024 [ 379.285469][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.292144][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.816732][ T8148] loop3: detected capacity change from 0 to 2048 [ 382.981071][ T2931] hfsplus: b-tree write err: -5, ino 4 [ 383.131507][ T8148] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 384.453544][ T787] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 384.763618][ T787] usb 5-1: Using ep0 maxpacket: 8 [ 384.773644][ T787] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 384.786995][ T787] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 384.799620][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.809654][ T787] usb 5-1: Product: syz [ 384.814177][ T787] usb 5-1: Manufacturer: syz [ 384.819034][ T787] usb 5-1: SerialNumber: syz [ 385.134082][ T787] usb 5-1: config 0 descriptor?? [ 385.239712][ T787] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 385.310163][ T787] usb 5-1: setting power ON [ 385.568138][ T787] dvb-usb: bulk message failed: -22 (2/0) [ 385.585558][ T787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 385.597371][ T787] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 385.607007][ T787] usb 5-1: media controller created [ 385.687930][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 385.757302][ T8173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.916695][ T8173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.018088][ T787] usb 5-1: selecting invalid altsetting 6 [ 386.077106][ T787] usb 5-1: digital interface selection failed (-22) [ 386.131255][ T787] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 386.272382][ T787] usb 5-1: setting power OFF [ 386.284182][ T787] dvb-usb: bulk message failed: -22 (2/0) [ 386.290211][ T787] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 387.039525][ T787] (NULL device *): no alternate interface [ 387.484741][ T787] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 387.825304][ T787] usb 5-1: USB disconnect, device number 3 [ 389.638553][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'. [ 389.654272][ T8193] IPVS: Error joining to the multicast group [ 389.846667][ T8200] netlink: 'syz.1.453': attribute type 1 has an invalid length. [ 389.904416][ T8196] loop3: detected capacity change from 0 to 4096 [ 391.083975][ T8200] 8021q: adding VLAN 0 to HW filter on device bond3 [ 394.569455][ T8196] ntfs3: loop3: Failed to read $UpCase (-4). [ 394.723177][ T8204] bond3: (slave veth5): Enslaving as an active interface with a down link [ 396.270235][ T8221] netlink: 6336 bytes leftover after parsing attributes in process `syz.2.455'. [ 401.506585][ T8264] loop1: detected capacity change from 0 to 4096 [ 401.555115][ T8264] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 401.580732][ T8264] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 403.232639][ T7917] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 403.250137][ T5784] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 403.257838][ T8281] netlink: 6336 bytes leftover after parsing attributes in process `syz.3.469'. [ 403.274160][ T5784] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 403.281806][ T5784] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 404.040626][ T7915] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 405.974429][ T8313] loop4: detected capacity change from 0 to 2048 [ 406.192807][ T8313] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 406.549446][ T8301] netlink: 'syz.3.476': attribute type 4 has an invalid length. [ 410.662018][ T8346] loop1: detected capacity change from 0 to 1024 [ 410.795201][ T8346] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 411.058948][ T8346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.651697][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.552050][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 415.725372][ T8381] loop2: detected capacity change from 0 to 16 [ 416.532405][ T8381] erofs: (device loop2): mounted with root inode @ nid 36. [ 416.568312][ T8377] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 416.577356][ T8377] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 418.934499][ T8396] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 418.941092][ T8396] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 418.990374][ T8396] vhci_hcd vhci_hcd.0: Device attached [ 419.782657][ T5934] vhci_hcd: vhci_device speed not set [ 419.883490][ T8403] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 419.890168][ T8403] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 419.943564][ T8396] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(14) [ 419.950230][ T8396] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 419.978697][ T8403] vhci_hcd vhci_hcd.0: Device attached [ 420.003095][ T5934] usb 41-1: new full-speed USB device number 4 using vhci_hcd [ 420.048942][ T8396] vhci_hcd vhci_hcd.0: Device attached [ 420.061237][ T8412] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(17) [ 420.067902][ T8412] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 420.092221][ T8412] vhci_hcd vhci_hcd.0: Device attached [ 423.736859][ T8413] vhci_hcd: connection closed [ 423.737716][ T7915] vhci_hcd: stop threads [ 423.747364][ T8410] vhci_hcd: connection closed [ 423.748091][ T8398] vhci_hcd: connection reset by peer [ 423.758553][ T8406] vhci_hcd: connection closed [ 423.781125][ T7915] vhci_hcd: release socket [ 423.819035][ T7915] vhci_hcd: disconnect device [ 423.835236][ T7915] vhci_hcd: stop threads [ 423.839589][ T7915] vhci_hcd: release socket [ 423.855269][ T7915] vhci_hcd: disconnect device [ 423.860432][ T7915] vhci_hcd: stop threads [ 423.878746][ T7915] vhci_hcd: release socket [ 424.002990][ T7915] vhci_hcd: disconnect device [ 424.022521][ T7915] vhci_hcd: stop threads [ 424.053080][ T7915] vhci_hcd: release socket [ 424.758678][ T8432] netlink: 84 bytes leftover after parsing attributes in process `syz.2.503'. [ 425.302836][ T7915] vhci_hcd: disconnect device [ 425.373651][ T5934] vhci_hcd: vhci_device speed not set [ 425.608621][ T8443] loop3: detected capacity change from 0 to 4096 [ 425.640122][ T8443] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 426.503989][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.508'. [ 426.519662][ T8443] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 426.688232][ T8450] loop2: detected capacity change from 0 to 128 [ 426.860432][ T8450] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 426.908717][ T8450] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 428.663706][ T8464] mmap: syz.2.509 (8464) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 429.398360][ T8471] loop3: detected capacity change from 0 to 256 [ 429.405875][ T8471] exfat: Deprecated parameter 'namecase' [ 429.411656][ T8471] exfat: Deprecated parameter 'utf8' [ 429.478893][ T8471] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 430.832463][ T5786] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 432.089008][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.520'. [ 432.134097][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.520'. [ 432.160482][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.520'. [ 432.203049][ T8500] netlink: 'syz.4.518': attribute type 1 has an invalid length. [ 432.243777][ T8500] netlink: 'syz.4.518': attribute type 2 has an invalid length. [ 435.718840][ T8521] loop1: detected capacity change from 0 to 32768 [ 435.930254][ T8521] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.526 (8521) [ 435.978679][ T8521] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 435.989404][ T8521] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 435.998215][ T8521] BTRFS info (device loop1): enabling disk space caching [ 436.006270][ T8521] BTRFS info (device loop1): setting nodatasum [ 436.012865][ T8521] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 436.022722][ T8521] BTRFS info (device loop1): force lzo compression, level 0 [ 436.030138][ T8521] BTRFS info (device loop1): unrecognized rescue option 'ignoremetacsums' [ 436.039045][ T8521] BTRFS error (device loop1): unrecognized rescue value ignoremetacsums [ 436.047434][ T8521] BTRFS error (device loop1): cannot disable free space tree [ 436.059204][ T8521] BTRFS error (device loop1): open_ctree failed: -22 [ 437.054564][ T8424] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (8424) [ 437.821500][ T8533] loop3: detected capacity change from 0 to 128 [ 437.842843][ T8533] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 438.058428][ T8533] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 439.841308][ T7915] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 440.555898][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.562288][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.389264][ T8563] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer. [ 442.576638][ T8565] loop1: detected capacity change from 0 to 1024 [ 443.039977][ T8565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.147358][ T8574] netlink: 'syz.2.538': attribute type 1 has an invalid length. [ 443.155264][ T8574] netlink: 'syz.2.538': attribute type 2 has an invalid length. [ 443.211726][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.420279][ T8590] loop3: detected capacity change from 0 to 32768 [ 447.162580][ T8590] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 447.174192][ T8590] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 447.182940][ T8590] BTRFS info (device loop3): enabling disk space caching [ 447.190574][ T8590] BTRFS info (device loop3): setting nodatasum [ 447.196845][ T8590] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 447.206101][ T8590] BTRFS info (device loop3): force lzo compression, level 0 [ 447.213499][ T8590] BTRFS info (device loop3): unrecognized rescue option 'ignoremetacsums' [ 447.222038][ T8590] BTRFS error (device loop3): unrecognized rescue value ignoremetacsums [ 447.230430][ T8590] BTRFS error (device loop3): cannot disable free space tree [ 447.245979][ T8590] BTRFS error (device loop3): open_ctree failed: -22 [ 447.338173][ T8424] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (8424) [ 452.900841][ T8626] loop2: detected capacity change from 0 to 128 [ 452.938416][ T8626] FAT-fs (loop2): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 460.429342][ T8659] netlink: 'syz.1.556': attribute type 1 has an invalid length. [ 460.437474][ T8659] netlink: 'syz.1.556': attribute type 2 has an invalid length. [ 460.935732][ T8658] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 462.494120][ T8668] Bluetooth: MGMT ver 1.22 [ 464.388997][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.565'. [ 464.545291][ T8679] trusted_key: encrypted_key: insufficient parameters specified [ 468.449654][ T8696] lo speed is unknown, defaulting to 1000 [ 471.670164][ T8727] loop4: detected capacity change from 0 to 64 [ 472.001758][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 472.014171][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 472.024419][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 472.034411][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 473.285671][ T8735] befs: (nbd3): No write support. Marking filesystem read-only [ 473.296295][ T8735] syz.3.578: attempt to access beyond end of device [ 473.296295][ T8735] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 473.309200][ T8735] befs: (nbd3): unable to read superblock [ 477.443062][ T8765] loop1: detected capacity change from 0 to 128 [ 478.618581][ T8765] FAT-fs (loop1): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 480.042008][ T8777] loop4: detected capacity change from 0 to 32768 [ 480.125118][ T8777] JBD2: Ignoring recovery information on journal [ 480.360723][ T8777] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 483.517853][ T6679] ocfs2: Unmounting device (7,4) on (node local) [ 483.855516][ T8803] loop1: detected capacity change from 0 to 128 [ 483.891960][ T8803] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 483.914181][ T8803] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 485.397732][ T1081] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 486.495065][ T8824] loop3: detected capacity change from 0 to 16 [ 486.628525][ T8824] erofs: (device loop3): mounted with root inode @ nid 36. [ 486.673941][ T8820] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 486.684469][ T8820] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 486.934142][ T50] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 487.307690][ T8833] loop3: detected capacity change from 0 to 512 [ 489.363497][ T8833] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.601: bad orphan inode 11862016 [ 489.441032][ T8833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 489.613633][ T8833] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.265815][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 490.265830][ T28] audit: type=1804 audit(1756433687.635:28): pid=8833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.601" name="/newroot/141/file1/file1" dev="loop3" ino=18 res=1 errno=0 [ 490.577119][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 490.908317][ T8854] loop3: detected capacity change from 0 to 128 [ 490.918304][ T8854] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 490.936061][ T8854] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 491.139221][ T8859] loop2: detected capacity change from 0 to 8 [ 492.080993][ T8865] SQUASHFS error: lzo decompression failed, data probably corrupt [ 492.090983][ T8865] SQUASHFS error: Failed to read block 0x0: -5 [ 492.097389][ T8865] SQUASHFS error: lzo decompression failed, data probably corrupt [ 492.105276][ T8865] SQUASHFS error: Failed to read block 0x0: -5 [ 492.112000][ T8871] hugetlbfs: syz.3.610 (8871): Using mlock ulimits for SHM_HUGETLB is obsolete [ 492.575688][ T28] audit: type=1800 audit(1756433689.475:29): pid=8865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.609" name="file2" dev="loop2" ino=3 res=0 errno=0 [ 493.861319][ T8860] befs: (nbd4): No write support. Marking filesystem read-only [ 493.871874][ T8860] syz.4.607: attempt to access beyond end of device [ 493.871874][ T8860] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 493.885268][ T8860] befs: (nbd4): unable to read superblock [ 498.145628][ T8894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.617'. [ 498.342871][ T8898] loop1: detected capacity change from 0 to 512 [ 498.410471][ T8898] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.616: bad orphan inode 11862016 [ 498.440229][ T8898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 498.469762][ T8898] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.537543][ T8904] loop3: detected capacity change from 0 to 128 [ 498.551951][ T8904] FAT-fs (loop3): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 498.573817][ T5840] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 498.614402][ T8895] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 498.658345][ T28] audit: type=1804 audit(1756433696.025:30): pid=8898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.616" name="/newroot/160/file1/file1" dev="loop1" ino=18 res=1 errno=0 [ 498.759553][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 500.781457][ T5840] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 500.790993][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.799178][ T5840] usb 3-1: Product: syz [ 500.803428][ T5840] usb 3-1: Manufacturer: syz [ 500.808087][ T5840] usb 3-1: SerialNumber: syz [ 500.823442][ T8915] loop3: detected capacity change from 0 to 8 [ 502.400862][ T8927] SQUASHFS error: lzo decompression failed, data probably corrupt [ 502.408858][ T8927] SQUASHFS error: Failed to read block 0x0: -5 [ 502.415339][ T8927] SQUASHFS error: lzo decompression failed, data probably corrupt [ 502.423196][ T8927] SQUASHFS error: Failed to read block 0x0: -5 [ 502.796462][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.802846][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.843501][ T28] audit: type=1800 audit(1756433699.795:31): pid=8927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.622" name="file2" dev="loop3" ino=3 res=0 errno=0 [ 502.937333][ T5840] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 502.989117][ T5840] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 503.061069][ T5840] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 504.784229][ T5840] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 504.900808][ T5840] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 504.963636][ T5840] lan78xx: probe of 3-1:1.0 failed with error -71 [ 505.034741][ T5840] usb 3-1: USB disconnect, device number 3 [ 507.238476][ T8949] loop2: detected capacity change from 0 to 32768 [ 507.245729][ T8949] XFS: ikeep mount option is deprecated. [ 507.344693][ T8949] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 507.464333][ T8949] XFS (loop2): Ending clean mount [ 507.502348][ T8949] XFS (loop2): Quotacheck needed: Please wait. [ 507.555572][ T8971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.632'. [ 508.316970][ T8949] XFS (loop2): Quotacheck: Done. [ 508.615610][ T5786] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 509.474191][ T8986] syz.4.636 (8986) used greatest stack depth: 17448 bytes left [ 511.545852][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 511.833405][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 511.841398][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 511.863543][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 511.883433][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 511.903679][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 511.933418][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 511.942565][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.343435][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 512.349004][ T9] usbtmc 3-1:16.0: can't read capabilities [ 514.138289][ T9013] loop3: detected capacity change from 0 to 64 [ 516.583105][ T5934] usb 3-1: USB disconnect, device number 4 [ 516.926892][ T9022] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 516.927027][ T9020] loop4: detected capacity change from 0 to 2048 [ 516.984931][ T9020] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=66359, location=66359 [ 517.075421][ T9020] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 519.959417][ T9045] lo speed is unknown, defaulting to 1000 [ 521.876078][ T9052] loop1: detected capacity change from 0 to 2048 [ 521.956039][ T9052] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 523.429248][ T9060] loop1: detected capacity change from 0 to 8 [ 524.766556][ T9060] SQUASHFS error: zlib decompression failed, data probably corrupt [ 524.776850][ T9060] SQUASHFS error: Failed to read block 0x4e8: -5 [ 525.050109][ T9060] SQUASHFS error: Failed to read block 0x6e6: -5 [ 525.056926][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.064285][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.071148][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.077447][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.084868][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.092532][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.099100][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.108524][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.115607][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.122173][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.129730][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.136790][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.143467][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.150845][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.157942][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.164450][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.171948][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.179192][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.185841][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.201119][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.208201][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.214736][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.222216][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.229300][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.239311][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.246854][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.254052][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.261368][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.268838][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.275950][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.282441][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.289893][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.299739][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.357870][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.365274][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.372222][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.378486][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.385819][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.392645][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.393599][ T28] audit: type=1800 audit(1756433722.155:32): pid=9060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.654" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 525.399784][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.425815][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.432627][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.438879][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.446188][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.452993][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.459226][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.466532][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.473400][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.479642][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.486982][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.493811][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.500552][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.507882][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.514723][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.520934][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.528264][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.535107][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.541312][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.548629][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.555475][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.561681][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.568983][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.575846][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.582052][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.589358][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.596179][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.602932][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.610266][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.617092][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.623337][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.630640][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.637470][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.643702][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.650990][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.657880][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.664140][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.671420][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.678237][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.684468][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.691746][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.698564][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.705323][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.712621][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.719479][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.725736][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.733023][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.739860][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.746085][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.753418][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.760229][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.766456][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.773760][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.780584][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.786817][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.794133][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.800935][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.807835][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.815171][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.821991][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 525.828675][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.836022][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 525.843058][ T9060] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 525.850394][ T9060] SQUASHFS error: read_indexes: reading block [6e4:0] [ 527.156517][ T28] audit: type=1326 audit(1756433724.525:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a218ebe9 code=0x7ffc0000 [ 527.822606][ T28] audit: type=1326 audit(1756433724.525:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fb7a218ebe9 code=0x7ffc0000 [ 527.878288][ T28] audit: type=1326 audit(1756433724.525:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a218ebe9 code=0x7ffc0000 [ 528.912451][ T28] audit: type=1326 audit(1756433724.525:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7a218ebe9 code=0x7ffc0000 [ 529.003612][ T28] audit: type=1326 audit(1756433724.525:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a218ebe9 code=0x7ffc0000 [ 529.120970][ T28] audit: type=1326 audit(1756433724.555:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7a218ebe9 code=0x7ffc0000 [ 529.182794][ T28] audit: type=1326 audit(1756433724.555:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a218ebe9 code=0x7ffc0000 [ 529.205216][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.217646][ T28] audit: type=1326 audit(1756433724.555:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a218ebe9 code=0x7ffc0000 [ 529.239826][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.896498][ T28] audit: type=1326 audit(1756433724.565:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb7a218ebe9 code=0x7ffc0000 [ 529.918623][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.932096][ T9092] netlink: 'syz.2.662': attribute type 1 has an invalid length. [ 530.532761][ T9092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 536.822164][ T9094] veth3: entered promiscuous mode [ 536.891790][ T9094] bond1: (slave veth3): Enslaving as an active interface with a down link [ 538.388472][ T9124] tipc: Enabling of bearer rejected, failed to enable media [ 538.680552][ T9126] syz.2.669[9126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 538.680667][ T9126] syz.2.669[9126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 538.694783][ T9126] syz.2.669[9126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 538.706696][ T9126] syz.2.669[9126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 539.314804][ T9138] loop2: detected capacity change from 0 to 2048 [ 539.391361][ T9144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 539.404286][ T9144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 539.412716][ T9144] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 539.421214][ T9144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 539.442069][ T9144] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 539.445454][ T9138] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 539.450107][ T9144] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 539.513756][ T5796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 539.522629][ T5796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 539.532497][ T5796] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 539.544674][ T5796] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 539.553711][ T5796] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 539.561109][ T5796] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 539.816820][ T9150] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 540.092925][ T9142] lo speed is unknown, defaulting to 1000 [ 540.737594][ T9158] loop4: detected capacity change from 0 to 512 [ 542.225068][ T9144] Bluetooth: hci4: command tx timeout [ 542.738901][ T9158] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.673: corrupted inode contents [ 542.756901][ T9158] EXT4-fs error (device loop4): ext4_dirty_inode:6106: inode #16: comm syz.4.673: mark_inode_dirty error [ 542.770481][ T9158] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.673: corrupted inode contents [ 542.787511][ T9158] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.673: mark_inode_dirty error [ 543.578789][ T9158] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.673: corrupted inode contents [ 543.594316][ T9158] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 543.736355][ T9158] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.673: corrupted inode contents [ 543.752613][ T9158] EXT4-fs error (device loop4): ext4_truncate:4288: inode #16: comm syz.4.673: mark_inode_dirty error [ 543.790529][ T9158] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 543.804255][ T9158] EXT4-fs (loop4): 1 truncate cleaned up [ 543.811289][ T9158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.824339][ T9158] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 543.834829][ T6464] __quota_error: 10 callbacks suppressed [ 543.834845][ T6464] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 543.835068][ T6464] EXT4-fs error (device loop4): ext4_release_dquot:6976: comm kworker/u4:10: Failed to release dquot type 1 [ 544.576102][ T9144] Bluetooth: hci4: command tx timeout [ 544.695964][ T6679] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.666780][ T9144] Bluetooth: hci4: command tx timeout [ 547.086643][ T9181] tipc: Enabling of bearer rejected, failed to enable media [ 547.569580][ T9142] chnl_net:caif_netlink_parms(): no params data found [ 548.696648][ T9144] Bluetooth: hci4: command tx timeout [ 549.385035][ T9142] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.563427][ T9142] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.602361][ T9142] bridge_slave_0: entered allmulticast mode [ 549.708403][ T9142] bridge_slave_0: entered promiscuous mode [ 550.264085][ T9142] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.287824][ T9142] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.301820][ T9142] bridge_slave_1: entered allmulticast mode [ 551.437882][ T9142] bridge_slave_1: entered promiscuous mode [ 551.450682][ T9216] loop1: detected capacity change from 0 to 1024 [ 551.516742][ T9216] EXT4-fs: Ignoring removed orlov option [ 551.602702][ T9216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.808894][ T7915] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.908137][ T28] audit: type=1800 audit(1756433749.275:52): pid=9225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.686" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 551.964381][ T9142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.976861][ T9142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.010521][ T28] audit: type=1804 audit(1756433749.375:53): pid=9216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="GPL" name="/newroot/184/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 552.647484][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.712243][ T9142] team0: Port device team_slave_0 added [ 552.793214][ T7915] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.812509][ T9142] team0: Port device team_slave_1 added [ 552.818921][ T9236] tipc: Enabling of bearer rejected, failed to enable media [ 552.828540][ T9235] infiniband syz2: set active [ 552.843442][ T9235] bridge_slave_0: left allmulticast mode [ 552.849272][ T9235] bridge_slave_0: left promiscuous mode [ 552.855975][ T9235] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.886645][ T9235] bridge_slave_1: left allmulticast mode [ 552.892368][ T9235] bridge_slave_1: left promiscuous mode [ 552.946489][ T9235] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.070213][ T9235] bond0: (slave bond_slave_0): Releasing backup interface [ 553.102619][ T9235] bond0: (slave bond_slave_1): Releasing backup interface [ 553.912181][ T9235] team0: Failed to send options change via netlink (err -105) [ 553.931127][ T9235] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 553.974494][ T9235] team0: Port device team_slave_0 removed [ 554.051994][ T9235] team0: Port device team_slave_1 removed [ 554.071025][ T9235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.079219][ T9235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.090371][ T9235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.100775][ T9235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.121885][ T9235] bond1: (slave veth3): Releasing active interface [ 554.157312][ T5934] lo speed is unknown, defaulting to 1000 [ 554.197969][ T7915] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.242962][ T9242] team0: Mode changed to "loadbalance" [ 554.609403][ T7915] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.566463][ T9142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.015688][ T9142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.042940][ T9142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.501266][ T9142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.543598][ T9142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.662054][ T9142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.819621][ T9264] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 558.819621][ T9264] The task syz.2.695 (9264) triggered the difference, watch for misbehavior. [ 558.864273][ T9142] hsr_slave_0: entered promiscuous mode [ 558.874056][ T9142] hsr_slave_1: entered promiscuous mode [ 559.310262][ T7915] tipc: Left network mode [ 559.644361][ T28] audit: type=1326 audit(1756433756.965:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530c78ebe9 code=0x7fc00000 [ 561.073139][ T9284] No such timeout policy "syz1" [ 561.138144][ T9289] loop4: detected capacity change from 0 to 128 [ 561.167675][ T9289] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 561.188021][ T9289] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 561.541959][ T9292] loop1: detected capacity change from 0 to 764 [ 561.624077][ T9292] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 562.235329][ T9299] Symlink component flag not implemented [ 562.241826][ T9299] Symlink component flag not implemented (7) [ 562.325679][ T6464] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 562.684212][ T9301] tipc: Enabling of bearer rejected, failed to enable media [ 563.428804][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.719043][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.257139][ T9142] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 564.543715][ T9142] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 564.571627][ T9142] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 564.745053][ T9142] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 564.878187][ T9324] netlink: 16 bytes leftover after parsing attributes in process `syz.2.706'. [ 564.967745][ T9324] ksmbd: Unknown IPC event: 6, ignore. [ 567.479252][ T9361] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 567.799297][ T9142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.833035][ T9366] netlink: 'syz.4.712': attribute type 1 has an invalid length. [ 568.092142][ T9366] 8021q: adding VLAN 0 to HW filter on device bond1 [ 570.600955][ T9367] veth3: entered promiscuous mode [ 570.666399][ T9367] bond1: (slave veth3): Enslaving as an active interface with a down link [ 570.856675][ T7915] hsr_slave_0: left promiscuous mode [ 570.870666][ T9396] loop4: detected capacity change from 0 to 512 [ 570.884693][ T7915] hsr_slave_1: left promiscuous mode [ 570.891245][ T7915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.908502][ T7915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.946568][ T9396] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 570.968988][ T7915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.001479][ T7915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.015694][ T9396] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 571.036461][ T7915] team0: left allmulticast mode [ 571.050336][ T9396] System zones: 1-12 [ 571.061192][ T7915] team_slave_0: left allmulticast mode [ 571.077654][ T9396] EXT4-fs (loop4): orphan cleanup on readonly fs [ 571.098151][ T7915] team_slave_1: left allmulticast mode [ 571.106166][ T9396] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.717: Inode bitmap for bg 0 marked uninitialized [ 571.119162][ T7915] team0: left promiscuous mode [ 571.125019][ T7915] team_slave_0: left promiscuous mode [ 571.131098][ T7915] team_slave_1: left promiscuous mode [ 571.138005][ T7915] bridge0: port 3(team0) entered disabled state [ 571.149072][ T7915] bridge_slave_1: left allmulticast mode [ 571.153183][ T9396] EXT4-fs (loop4): Remounting filesystem read-only [ 571.155623][ T7915] bridge_slave_1: left promiscuous mode [ 571.172319][ T9396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 571.174470][ T7915] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.805563][ T7915] bridge_slave_0: left allmulticast mode [ 571.811348][ T7915] bridge_slave_0: left promiscuous mode [ 571.910714][ T7915] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.452755][ T7915] veth1_macvtap: left promiscuous mode [ 572.458815][ T7915] veth0_macvtap: left promiscuous mode [ 572.508401][ T7915] veth1_vlan: left promiscuous mode [ 572.525873][ T7915] veth0_vlan: left promiscuous mode [ 573.340786][ T9410] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 573.731793][ T9417] loop2: detected capacity change from 0 to 2048 [ 573.744502][ T9417] UDF-fs: bad mount option "0xffffffffffffffff" or missing value [ 573.798278][ T9145] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 573.869899][ T6679] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.997683][ T7915] bond1 (unregistering): (slave veth3): Releasing active interface [ 576.211627][ T7915] bond1 (unregistering): Released all slaves [ 576.896934][ T9438] loop4: detected capacity change from 0 to 128 [ 576.988934][ T9438] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 577.085469][ T9438] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 578.288322][ T8155] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 579.697070][ T7915] team0 (unregistering): Port device team_slave_1 removed [ 579.782062][ T7915] team0 (unregistering): Port device team_slave_0 removed [ 579.851215][ T7915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.916301][ T7915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.540109][ T7915] bond0 (unregistering): Released all slaves [ 580.669344][ T9432] netlink: 'syz.1.725': attribute type 1 has an invalid length. [ 580.682803][ T9432] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 580.745913][ T9434] veth7: entered promiscuous mode [ 580.777011][ T9436] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 580.811180][ T9142] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.868886][ T9142] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 580.891576][ T9142] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 580.930647][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.937935][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.995862][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.003147][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.146711][ T9453] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 584.702838][ T7915] IPVS: stop unused estimator thread 0... [ 586.035799][ T9463] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 586.177622][ T9142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.389674][ T9514] o2cb: This node has not been configured. [ 588.396118][ T9514] o2cb: Cluster check failed. Fix errors before retrying. [ 588.404130][ T9514] (syz.1.738,9514,0):user_dlm_register:674 ERROR: status = -22 [ 588.411982][ T9514] (syz.1.738,9514,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 589.231268][ T9142] veth0_vlan: entered promiscuous mode [ 589.266458][ T9142] veth1_vlan: entered promiscuous mode [ 589.572015][ T9525] loop4: detected capacity change from 0 to 128 [ 589.906415][ T9525] EXT4-fs: Ignoring removed nobh option [ 590.176341][ T9525] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 590.194091][ T9525] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 590.311623][ T9142] veth0_macvtap: entered promiscuous mode [ 590.455646][ T6679] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 590.466911][ T9142] veth1_macvtap: entered promiscuous mode [ 590.966605][ T9142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.078283][ T9142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.215295][ T9142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.366865][ T9142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.508364][ T9142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.798525][ T9536] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 591.811877][ T9142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.871351][ T9142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.070448][ T9142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.085464][ T9142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.097227][ T9142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.111817][ T9142] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.120814][ T9142] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.129743][ T9142] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.526327][ T9142] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.433931][ T9558] nvme_fabrics: missing parameter 'transport=%s' [ 595.440958][ T9558] nvme_fabrics: missing parameter 'nqn=%s' [ 595.570041][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.683655][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.374122][ T8155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.933204][ T8155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.969875][ T9592] loop2: detected capacity change from 0 to 2048 [ 599.110673][ T9595] ================================================================== [ 599.118805][ T9595] BUG: KASAN: use-after-free in xfrm_alloc_spi+0x598/0x11f0 [ 599.126142][ T9595] Read of size 4 at addr ffff8880304cc0a0 by task syz.1.752/9595 [ 599.133911][ T9595] [ 599.136271][ T9595] CPU: 0 PID: 9595 Comm: syz.1.752 Not tainted syzkaller #0 [ 599.143585][ T9595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 599.153674][ T9595] Call Trace: [ 599.156982][ T9595] [ 599.159956][ T9595] dump_stack_lvl+0x16c/0x230 [ 599.164679][ T9595] ? __lock_acquire+0x7c80/0x7c80 [ 599.169737][ T9595] ? show_regs_print_info+0x20/0x20 [ 599.174976][ T9595] ? load_image+0x3b0/0x3b0 [ 599.179510][ T9595] ? __virt_addr_valid+0x469/0x540 [ 599.184661][ T9595] print_report+0xac/0x220 [ 599.189108][ T9595] ? xfrm_alloc_spi+0x598/0x11f0 [ 599.194087][ T9595] kasan_report+0x117/0x150 [ 599.198632][ T9595] ? xfrm_alloc_spi+0x598/0x11f0 [ 599.203607][ T9595] xfrm_alloc_spi+0x598/0x11f0 [ 599.208406][ T9595] ? preempt_schedule_thunk+0x1a/0x30 [ 599.213845][ T9595] ? xfrm_alloc_spi+0x2a1/0x11f0 [ 599.218841][ T9595] ? verify_spi_info+0x120/0x120 [ 599.223814][ T9595] ? xfrm_find_acq+0x79/0x90 [ 599.228499][ T9595] xfrm_alloc_userspi+0x5d1/0xa90 [ 599.233717][ T9595] ? end_current_label_crit_section+0x170/0x170 [ 599.240081][ T9595] ? apparmor_capable+0x137/0x1a0 [ 599.245134][ T9595] ? xfrm_dump_policy_done+0x90/0x90 [ 599.250454][ T9595] ? __nla_parse+0x40/0x50 [ 599.254913][ T9595] xfrm_user_rcv_msg+0x596/0x870 [ 599.259892][ T9595] ? xfrm_netlink_rcv+0x90/0x90 [ 599.264782][ T9595] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 599.270819][ T9595] ? __mutex_trylock_common+0x153/0x250 [ 599.276414][ T9595] netlink_rcv_skb+0x216/0x480 [ 599.281222][ T9595] ? xfrm_netlink_rcv+0x90/0x90 [ 599.286121][ T9595] ? netlink_ack+0x1110/0x1110 [ 599.290936][ T9595] ? netlink_deliver_tap+0x2e/0x1b0 [ 599.296173][ T9595] ? __lock_acquire+0x7c80/0x7c80 [ 599.301233][ T9595] ? __rcu_read_unlock+0x7c/0xd0 [ 599.306213][ T9595] xfrm_netlink_rcv+0x79/0x90 [ 599.310934][ T9595] netlink_unicast+0x751/0x8d0 [ 599.315743][ T9595] netlink_sendmsg+0x8c1/0xbe0 [ 599.320545][ T9595] ? netlink_getsockopt+0x580/0x580 [ 599.325776][ T9595] ? aa_sock_msg_perm+0x94/0x150 [ 599.330748][ T9595] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 599.336072][ T9595] ? security_socket_sendmsg+0x80/0xa0 [ 599.341566][ T9595] ? netlink_getsockopt+0x580/0x580 [ 599.346805][ T9595] ____sys_sendmsg+0x5bf/0x950 [ 599.351610][ T9595] ? __asan_memset+0x22/0x40 [ 599.356234][ T9595] ? __sys_sendmsg_sock+0x30/0x30 [ 599.361294][ T9595] ? __import_iovec+0x5f2/0x860 [ 599.366192][ T9595] ? import_iovec+0x73/0xa0 [ 599.370739][ T9595] ___sys_sendmsg+0x220/0x290 [ 599.375541][ T9595] ? __sys_sendmsg+0x270/0x270 [ 599.380370][ T9595] __se_sys_sendmsg+0x1a5/0x270 [ 599.385255][ T9595] ? __x64_sys_sendmsg+0x80/0x80 [ 599.390238][ T9595] ? lockdep_hardirqs_on+0x98/0x150 [ 599.395485][ T9595] do_syscall_64+0x55/0xb0 [ 599.399935][ T9595] ? clear_bhb_loop+0x40/0x90 [ 599.404640][ T9595] ? clear_bhb_loop+0x40/0x90 [ 599.409344][ T9595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 599.415277][ T9595] RIP: 0033:0x7f170f38ebe9 [ 599.419736][ T9595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.439466][ T9595] RSP: 002b:00007f171020b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 599.447985][ T9595] RAX: ffffffffffffffda RBX: 00007f170f5b6180 RCX: 00007f170f38ebe9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 599.456032][ T9595] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 599.464297][ T9595] RBP: 00007f170f411e19 R08: 0000000000000000 R09: 0000000000000000 [ 599.472293][ T9595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.480286][ T9595] R13: 00007f170f5b6218 R14: 00007f170f5b6180 R15: 00007ffd327ef928 [ 599.488301][ T9595] [ 599.491349][ T9595] [ 599.493698][ T9595] The buggy address belongs to the physical page: [ 599.500155][ T9595] page:ffffea0000c13300 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x304cc [ 599.510324][ T9595] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 599.517462][ T9595] page_type: 0xffffffff() [ 599.521810][ T9595] raw: 00fff00000000000 ffffea0001d9b708 ffff8880b8f423b0 0000000000000000 [ 599.530421][ T9595] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 599.539021][ T9595] page dumped because: kasan: bad access detected [ 599.545456][ T9595] page_owner tracks the page as freed [ 599.550828][ T9595] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152dc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_ZERO), pid 9586, tgid 9577 (syz.2.750), ts 598112461715, free_ts 598117122314 [ 599.570907][ T9595] post_alloc_hook+0x1cd/0x210 [ 599.575705][ T9595] get_page_from_freelist+0x195c/0x19f0 [ 599.581277][ T9595] __alloc_pages+0x1e3/0x460 [ 599.585888][ T9595] __kmalloc_large_node+0x8c/0x1e0 [ 599.591021][ T9595] __kmalloc_node+0x10f/0x230 [ 599.595716][ T9595] kvmalloc_node+0x70/0x180 [ 599.600230][ T9595] bpf_check+0x186/0xe970 [ 599.604571][ T9595] bpf_prog_load+0x11cb/0x16d0 [ 599.609352][ T9595] __sys_bpf+0x55a/0x800 [ 599.613692][ T9595] __x64_sys_bpf+0x7c/0x90 [ 599.618176][ T9595] do_syscall_64+0x55/0xb0 [ 599.622615][ T9595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 599.628547][ T9595] page last free stack trace: [ 599.633221][ T9595] free_unref_page_prepare+0x7ce/0x8e0 [ 599.638708][ T9595] free_unref_page+0x32/0x2e0 [ 599.643401][ T9595] free_large_kmalloc+0x101/0x1a0 [ 599.648446][ T9595] bpf_check+0x62c6/0xe970 [ 599.652874][ T9595] bpf_prog_load+0x11cb/0x16d0 [ 599.657739][ T9595] __sys_bpf+0x55a/0x800 [ 599.661991][ T9595] __x64_sys_bpf+0x7c/0x90 [ 599.666422][ T9595] do_syscall_64+0x55/0xb0 [ 599.670861][ T9595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 599.676773][ T9595] [ 599.679108][ T9595] Memory state around the buggy address: [ 599.684754][ T9595] ffff8880304cbf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 599.692820][ T9595] ffff8880304cc000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 599.700890][ T9595] >ffff8880304cc080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 599.708974][ T9595] ^ [ 599.714095][ T9595] ffff8880304cc100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 599.722163][ T9595] ffff8880304cc180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 599.730237][ T9595] ================================================================== [ 599.738427][ C0] vkms_vblank_simulate: vblank timer overrun [ 599.744689][ T9595] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 599.752083][ T9595] CPU: 0 PID: 9595 Comm: syz.1.752 Not tainted syzkaller #0 [ 599.759408][ T9595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 599.769494][ T9595] Call Trace: [ 599.772802][ T9595] [ 599.775762][ T9595] dump_stack_lvl+0x16c/0x230 [ 599.780478][ T9595] ? show_regs_print_info+0x20/0x20 [ 599.785790][ T9595] ? load_image+0x3b0/0x3b0 [ 599.790382][ T9595] panic+0x2c0/0x710 [ 599.794336][ T9595] ? bpf_jit_dump+0xd0/0xd0 [ 599.798882][ T9595] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 599.804820][ T9595] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 599.810753][ T9595] ? _raw_spin_unlock+0x40/0x40 [ 599.815641][ T9595] ? print_memory_metadata+0x314/0x400 [ 599.821141][ T9595] ? xfrm_alloc_spi+0x598/0x11f0 [ 599.826114][ T9595] check_panic_on_warn+0x84/0xa0 [ 599.831102][ T9595] ? xfrm_alloc_spi+0x598/0x11f0 [ 599.836084][ T9595] end_report+0x6f/0x140 [ 599.840362][ T9595] kasan_report+0x128/0x150 [ 599.844928][ T9595] ? xfrm_alloc_spi+0x598/0x11f0 [ 599.849902][ T9595] xfrm_alloc_spi+0x598/0x11f0 [ 599.854692][ T9595] ? preempt_schedule_thunk+0x1a/0x30 [ 599.861075][ T9595] ? xfrm_alloc_spi+0x2a1/0x11f0 [ 599.866057][ T9595] ? verify_spi_info+0x120/0x120 [ 599.871038][ T9595] ? xfrm_find_acq+0x79/0x90 [ 599.875672][ T9595] xfrm_alloc_userspi+0x5d1/0xa90 [ 599.880741][ T9595] ? end_current_label_crit_section+0x170/0x170 [ 599.887030][ T9595] ? apparmor_capable+0x137/0x1a0 [ 599.892084][ T9595] ? xfrm_dump_policy_done+0x90/0x90 [ 599.897412][ T9595] ? __nla_parse+0x40/0x50 [ 599.901869][ T9595] xfrm_user_rcv_msg+0x596/0x870 [ 599.906843][ T9595] ? xfrm_netlink_rcv+0x90/0x90 [ 599.911728][ T9595] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 599.917771][ T9595] ? __mutex_trylock_common+0x153/0x250 [ 599.923372][ T9595] netlink_rcv_skb+0x216/0x480 [ 599.928180][ T9595] ? xfrm_netlink_rcv+0x90/0x90 [ 599.933091][ T9595] ? netlink_ack+0x1110/0x1110 [ 599.937902][ T9595] ? netlink_deliver_tap+0x2e/0x1b0 [ 599.943163][ T9595] ? __lock_acquire+0x7c80/0x7c80 [ 599.948233][ T9595] ? __rcu_read_unlock+0x7c/0xd0 [ 599.953224][ T9595] xfrm_netlink_rcv+0x79/0x90 [ 599.957944][ T9595] netlink_unicast+0x751/0x8d0 [ 599.962750][ T9595] netlink_sendmsg+0x8c1/0xbe0 [ 599.967562][ T9595] ? netlink_getsockopt+0x580/0x580 [ 599.972806][ T9595] ? aa_sock_msg_perm+0x94/0x150 [ 599.977866][ T9595] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 599.983193][ T9595] ? security_socket_sendmsg+0x80/0xa0 [ 599.988693][ T9595] ? netlink_getsockopt+0x580/0x580 [ 599.993934][ T9595] ____sys_sendmsg+0x5bf/0x950 [ 599.998744][ T9595] ? __asan_memset+0x22/0x40 [ 600.003364][ T9595] ? __sys_sendmsg_sock+0x30/0x30 [ 600.008427][ T9595] ? __import_iovec+0x5f2/0x860 [ 600.013326][ T9595] ? import_iovec+0x73/0xa0 [ 600.017870][ T9595] ___sys_sendmsg+0x220/0x290 [ 600.022593][ T9595] ? __sys_sendmsg+0x270/0x270 [ 600.027429][ T9595] __se_sys_sendmsg+0x1a5/0x270 [ 600.032327][ T9595] ? __x64_sys_sendmsg+0x80/0x80 [ 600.037313][ T9595] ? lockdep_hardirqs_on+0x98/0x150 [ 600.042559][ T9595] do_syscall_64+0x55/0xb0 [ 600.047022][ T9595] ? clear_bhb_loop+0x40/0x90 [ 600.051728][ T9595] ? clear_bhb_loop+0x40/0x90 [ 600.056438][ T9595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 600.062424][ T9595] RIP: 0033:0x7f170f38ebe9 [ 600.066875][ T9595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.086519][ T9595] RSP: 002b:00007f171020b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 600.094971][ T9595] RAX: ffffffffffffffda RBX: 00007f170f5b6180 RCX: 00007f170f38ebe9 [ 600.103016][ T9595] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 600.111129][ T9595] RBP: 00007f170f411e19 R08: 0000000000000000 R09: 0000000000000000 [ 600.119136][ T9595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.127138][ T9595] R13: 00007f170f5b6218 R14: 00007f170f5b6180 R15: 00007ffd327ef928 [ 600.135152][ T9595] [ 600.138524][ T9595] Kernel Offset: disabled [ 600.142889][ T9595] Rebooting in 86400 seconds..