last executing test programs: 6m17.785895833s ago: executing program 1 (id=255): syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101341) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0x80045515, &(0x7f00000000c0)=@usbdevfs_connect={0x7}) 6m16.3102803s ago: executing program 1 (id=260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020601040000000000000000070000000c000780ff0015000c000000050005000a000000050001000700000005000400000000000900020073797a310000000011000300686173683a6e65742c6e657400"], 0x58}}, 0x0) 6m15.757349104s ago: executing program 1 (id=261): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f00000001c0)) 6m13.944410147s ago: executing program 1 (id=269): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'], 0x1, 0x22d, &(0x7f0000000540)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrEwMDDIM4KFGD4yQeipUPomlGaDyl+B0r5Q8XaYvHlVRBQDA2Om0j0zpgPiKYqMAgw8Il9PPWBIZuCPZbCc573mUlDmlKtCb5fuB6n3Cq3cxMConsK/aM6GCU4zecHGMkZG/UUyh/mAzCwOkEEMDAyT/0Tce8AiySCCZJYoxz+xUy3LV5l13meY0TEtjYGRE+IYBt2Zdga83UxQM4srq7ITc3JSu1POMKCaP5lxP5MiI0jdmb9Xgx8w2jF0xzIwMsht8Fdb/O2PVOXGTfWR06siaqZ2N91cuj6OYZv+3ysmUu8nZoT9f3BIUMsiL//DPBml75sb5nyoqXti4tjZqDyXv/Xy33fvY2qLE9SYHot3FbLxJ7hp1XxydnKzfDw3vbp9S7Higqw0l4nHpl78m3B8LQPD5AtPbPVrzhyKV4zhlHKrnBtz1y1ekGuZ+vm6NwwMB6M+T2RgXM64n4mBYSYvwx5kf5U3QCODgZmBgUGFgYGBn4GFIS0zp+H///+MDMwQTqohC1QVTDUTAwdYQi85PyelnYGRgRGq0mA5AwsDE0zbYwZWBg6oFiMQByZjbNGAaiDEchDwYOAF08uh/MdQWh4t2bA0gKKqH8rTaGBgYGOoSCwpKTJkY2CAsuBiRnAxI4EGBrgnILbOZUJ1y3EmhlEwCkbBKBgFo2AUjIJRMApGwSgYyQAQAAD//2x5tvI=") epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) io_setup(0x9, &(0x7f0000000b80)) 6m13.602861875s ago: executing program 1 (id=270): syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101341) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0x80045515, &(0x7f00000000c0)=@usbdevfs_connect={0x7}) 6m11.852725993s ago: executing program 1 (id=275): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_open_dev$vivid(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000400)=@multiplanar_mmap={0x6, 0xe, 0x4, 0x4, 0x8, {0x77359400}, {0x9c072b365e5ab20a, 0x0, 0x0, 0xbf, 0xf2, 0x97, "08f933dd"}, 0x8, 0x1, {0x0}, 0x9}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x100000) 5m56.112307805s ago: executing program 32 (id=275): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_open_dev$vivid(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000400)=@multiplanar_mmap={0x6, 0xe, 0x4, 0x4, 0x8, {0x77359400}, {0x9c072b365e5ab20a, 0x0, 0x0, 0xbf, 0xf2, 0x97, "08f933dd"}, 0x8, 0x1, {0x0}, 0x9}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x100000) 4m42.804040188s ago: executing program 5 (id=594): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) wait4(0x0, 0x0, 0x40000000, 0x0) ptrace(0x10, 0x0) wait4(0x0, 0x0, 0xa0000009, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f00000003c0)={@any, 0x1}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000000) poll(&(0x7f0000000100)=[{r4, 0x1a0}], 0x1, 0x4) 4m41.554655688s ago: executing program 5 (id=596): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000007c0)="f1a9258800456ff0", 0x8) r1 = accept$alg(r0, 0x0, 0x0) r2 = eventfd(0x5) r3 = fcntl$dupfd(r1, 0x0, r2) write$cgroup_devices(r3, 0x0, 0xffa8) recvmmsg$unix(r3, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000440)=""/155, 0xffa8}], 0x1}}], 0x1, 0x1e5dd6c35af971ca, 0x0) 4m41.352472283s ago: executing program 5 (id=597): socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r2, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 4m41.213491565s ago: executing program 5 (id=599): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x60, 0x30, 0x829, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 4m36.744392539s ago: executing program 5 (id=616): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101341) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0), 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045515, &(0x7f00000000c0)=@usbdevfs_connect={0x7}) 4m36.60040395s ago: executing program 5 (id=618): r0 = socket$inet6(0xa, 0x80003, 0x6) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x6, 0x0, 0x4d, 0xdb6f, 0xfffffffffffffffc, 0x400}, {0x0, 0x4, 0x0, 0xa78d}, 0xe, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x2, 0x8, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 4m21.557943222s ago: executing program 33 (id=618): r0 = socket$inet6(0xa, 0x80003, 0x6) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x6, 0x0, 0x4d, 0xdb6f, 0xfffffffffffffffc, 0x400}, {0x0, 0x4, 0x0, 0xa78d}, 0xe, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x2, 0x8, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 20.555110511s ago: executing program 2 (id=1328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000300)) r3 = inotify_init() readv(r3, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 17.924202389s ago: executing program 2 (id=1341): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) socket$key(0xf, 0x3, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffffffffffc, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x3c}, 0xa, @in=@multicast2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x1001}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x6c}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000580)=""/174, 0xae) syz_usb_connect(0x3, 0xe8, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001b316c910ce1ab2e93d5c010203010902d60002002a10000904ec0600fe02000309048104000e0100a807240126020400b40deb90a94aef33e509c09a395d4f850474c3824fecfb7c2c8d"], 0x0) 14.708230864s ago: executing program 2 (id=1346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) 12.270547687s ago: executing program 0 (id=1353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) wait4(0x0, 0x0, 0x40000000, 0x0) wait4(0x0, 0x0, 0xa0000009, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f00000003c0)={@any, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x38, r4, 0x1, 0x70bd25, 0x21dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0d4}, 0x4000000) 11.188531273s ago: executing program 0 (id=1356): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./bus\x00', 0x804, &(0x7f0000000340)={[{@rodir}, {@fat=@nocase}, {@utf8no}, {@fat=@discard}, {@shortname_mixed}, {@utf8no}, {@shortname_winnt}, {@utf8no}, {@fat=@check_normal}, {@uni_xlateno}, {@fat=@check_strict}, {@utf8}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@utf8no}, {@rodir}]}, 0x1, 0x27b, &(0x7f0000000640)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 11.092246201s ago: executing program 2 (id=1357): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x1, 0x200000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x20010841}}], 0x1, 0x20040004) 10.148313295s ago: executing program 4 (id=1360): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x5, 0x0) r1 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0x4, '$\r'}, @global=@item_012={0x0, 0x1, 0x1}, @main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, 0x0, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 9.013405785s ago: executing program 0 (id=1362): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) execve(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x3c, r7, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 8.768245725s ago: executing program 4 (id=1364): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000400)={0xa}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 7.470725557s ago: executing program 0 (id=1365): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003000000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCFLSH(r3, 0x800455cc, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000800)=ANY=[@ANYBLOB='dots,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB=',dots,nodots,dots,nodots,dmask=00000000000000000000377,dots,nodots,nodots,nodots,dots,nodots,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f646f74732c73686f77657865632c666d61736b3d30303030303030303030303030372c756d6173033d303030303030303030303030372c6e6f646f74732c646f74732c6e6f646f74732c64656275672c757365667265652c00"/102], 0x0, 0x1f5, &(0x7f0000000600)="$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") syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./bus\x00', 0x480, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c757466383d302c73686f77657865632c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c757466383d302c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002d43c85feaa91b9c2c7e69443d6987a2f44801578200aa8d73d6b7d88bb2056dee1336c0e6a2b0376b8bd2"], 0xfd, 0x2a1, &(0x7f00000006c0)="$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") r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002180)='/proc/slabinfo\x00', 0x0, 0x0) pread64(r7, &(0x7f0000000100)=""/19, 0x13, 0x800) lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) fcntl$getflags(r6, 0x40a) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) 6.958934648s ago: executing program 6 (id=1366): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) wait4(0x0, 0x0, 0x40000000, 0x0) wait4(0x0, 0x0, 0xa0000009, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f00000003c0)={@any, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x38, r4, 0x1, 0x70bd25, 0x21dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0d4}, 0x4000000) 6.527388492s ago: executing program 3 (id=1367): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) 6.05347553s ago: executing program 0 (id=1368): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000140), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa0900"/439], 0x610) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000780)={0x3, {{0xa, 0x4e23, 0x9, @mcast1, 0x8}}}, 0x90) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000880)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x7c, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4, 0x20}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r8 = memfd_create(&(0x7f0000000040)='];\x00\x00\x00\x00\x96\t\xb27\x87Ge@{\xb7\xff]\ah\xd9\xb7\x13W\xb14\xfe\xe7FW\x96\x7f\xe8\xce(Ep\x93\xc9\xdd-\xfc\xf6\xdc\xec9H\x85\xa0\xf2p\x19\xa6\xd3z\x9c\xf0\x16Ax\x18<\x05\b\xa5\x19FN{U\x8b\xb0M5^\x7f+\xc9]E\x1a\x02x\xdc8\xa5|@<\x12\xcc@\xd6\x00\xb9\xf0', 0x0) mmap(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x1, 0x13, r8, 0x7000) r9 = userfaultfd(0x80801) r10 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x5eb80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_DMA(r10, 0xc0406429, &(0x7f0000000340)={r11, 0x3, &(0x7f0000000200)=[0x7, 0x2, 0xd], &(0x7f0000000280)=[0x1ff, 0x10001, 0x9, 0x271, 0x400, 0x5], 0x2, 0x2, 0x4, &(0x7f00000002c0)=[0xac36, 0x1], &(0x7f0000000300)=[0x6, 0x7fffffff]}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x3}) 5.277566391s ago: executing program 3 (id=1369): socket(0x10, 0x3, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x6c) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x5) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x3d6bf7b3fa2b4728, 0x0, {0x7, 0x29, 0x5, 0x8021008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x2000000) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x3, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000a40)={0x7, "8c66c24a69ea9f9e0bbdbf4e731ace2a9a622aa71bd5b91438fb614e830360e4abb8b96e565d454ff74bf947f7bb995414a494c68f72c9e05bd7ab11965704ba97939d18082dc4be0b6ed7766239f5792e0cbebfb0d104cd3c9be321eefecc9ca07c36864ea970382c7842ae7cf04a81707466e9eb2ca2998c65ee3c8f408275f57b104d74e8456e8d270e56d8aab407336d90e6f9f3650efa1330d044ed51e2beaac8482627b5f8b634c9f071f3b29a9976355410ac0f93c4f46095a6b005d4101838b9493191fb1b83c5899362ab5249ea81eee39b0049cfa2dd1513c9f09d26730d9a4718abbc8044555ecb14423c6a7491e684070ec9222ba99fc555067df8674b3ede2a82b6a6d5fdbc1a057b54a8efa4cc5c0e1720c1346a5e6d15a1c2fea0e7f22c782b4663188c7ef14b9c58ce50556ff0d0f660a7451803de2256cb2d91993ef19feace49e89f2e5be7fa815ecb20cec06b69a1a7845389c0f8398da8f2a2825886fa60612311ab641fd0825f780714437616b847fbcfd10dd6c9eab0f8d13f8c1abb8e03697b18b4ea73eecad6c6e1bc06082cf77488087b579e7571bd897b01e33374294d393438a30ee83a583bfc8e17f1e585aa4b66e65be575f44e03441114005d6a7a56462c1c99af1737f84687c05f1f68e6cdd47159b877c2b14c9a798f4d90ed81b5ab17dddb09a567fc97615db41186ee8cb95fa0cc44"}) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(0xffffffffffffffff, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffe) 5.268167952s ago: executing program 4 (id=1370): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000440)={[{@minixdf}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@grpjquota}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x46d, &(0x7f0000000540)="$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") chdir(&(0x7f0000000400)='./file0\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x6, 0x4002) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x20010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xa0800, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) 5.111467354s ago: executing program 4 (id=1371): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00'}, 0x10) futimesat(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r1, 0x4bfa, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap$binder(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x7fffffff) keyctl$set_reqkey_keyring(0xe, 0x1) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f0000000740)='logon\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 4.872354483s ago: executing program 3 (id=1372): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000002000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x18) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 4.809767818s ago: executing program 3 (id=1373): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 4.739332124s ago: executing program 2 (id=1374): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de01020301090212"], 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000400)={0x14, 0x0, 0x0}, &(0x7f0000000a80)={0x2c, &(0x7f0000000500)={0x60, 0xc}, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x5, 0x1, 'k'}}) 4.739094324s ago: executing program 3 (id=1375): prlimit64(0x0, 0xe, &(0x7f0000000700)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000200002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) epoll_create(0x6) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc4000, 0x0) 4.446839217s ago: executing program 6 (id=1376): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) wait4(0x0, 0x0, 0x40000000, 0x0) ptrace(0x10, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f00000003c0)={@any, 0x1}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000000) poll(&(0x7f0000000100)=[{r4, 0x1a0}], 0x1, 0x4) 3.52430171s ago: executing program 3 (id=1377): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) wait4(0x0, 0x0, 0x40000000, 0x0) ptrace(0x10, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x1a0}], 0x1, 0x4) r4 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000040)=0x10000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x42}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 2.64048715s ago: executing program 6 (id=1378): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x1d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500ad0000000000001184050085100000020000008500fa00050000009500e8ffffffffff9400a5"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x64000400) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.664222097s ago: executing program 6 (id=1379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) 740.351721ms ago: executing program 2 (id=1380): sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x24008840) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x51, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fe, &(0x7f0000000ac0)="$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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_usb_control_io$hid(r0, &(0x7f0000000a80)={0x24, &(0x7f00000010c0)={0x40, 0x21, 0xfe, {0xfe, 0x10, "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"}}, &(0x7f00000009c0)={0x0, 0x3, 0x6, @string={0x6, 0x3, "187d3dcb"}}, &(0x7f0000000a00)={0x0, 0x22, 0x12, {[@main=@item_4={0x3, 0x0, 0xc, "d6d08bcd"}, @main=@item_012={0x2, 0x0, 0xa, "bbb9"}, @local=@item_012={0x2, 0x2, 0x8, "9285"}, @global=@item_4={0x3, 0x1, 0x2, "0b35429e"}, @main=@item_012={0x1, 0x0, 0x8, "9d"}]}}, &(0x7f0000000a40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0xe, 0x1, {0x22, 0x14e}}}}, &(0x7f0000001400)={0x2c, &(0x7f0000001200)={0x0, 0x0, 0xca, "4b169b55d0f24bab82959f65340e2141a6fd77b66f431ce85f86f2824e5403a91e72223318b47fd7f03ed43a966ce548d7936a6a9a2f03a2b81a05cc2759685d36a5252b96f56e60608e065b372c0ddf2415043962d05f19041b0703a28463cccb6eee3ba211b55b56bed0745848dc5e1c53f70126ec252a6da76ce9c4296be4c21765061b1e03eaf78c0991cfe1bcc0f64dfc6c234e58437731223497e790343bc9d6f31f95ff0ea4c521273eafb9df9001a3b56ff410328477f4407cd34f05f255e73ba4aeab313b28"}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001380)={0x20, 0x1, 0x21, "22a485de2daa40890aaab5f95e7585edb05d365997a75cdf312577636b925f59fd"}, &(0x7f00000013c0)={0x20, 0x3, 0x1, 0x5}}) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3f, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x606f, 0x0, 0xd, {[@timestamp={0x8, 0xa, 0xffffffff, 0x5}]}}}}}}}, 0x0) 647.611558ms ago: executing program 6 (id=1381): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x25e, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x8) timer_create(0xfeffffff, 0x0, &(0x7f0000bbdffc)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) write$cgroup_pressure(r2, &(0x7f00000000c0)={'some', 0x20, 0xf, 0x20, 0x8}, 0x2f) sendmmsg$unix(r4, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000080)="18", 0xfe37}], 0x1}}], 0x1, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes128, 0x14, '\x00', @a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 477.664521ms ago: executing program 4 (id=1382): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000001a00)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@errors_continue}, {@umask={'umask', 0x3d, 0x5}}, {@errors_remount}, {@namecase}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x8}}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x4}}, {}]}, 0x1, 0x1519, &(0x7f0000007640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 267.113888ms ago: executing program 0 (id=1383): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 326.27µs ago: executing program 4 (id=1384): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) 0s ago: executing program 6 (id=1385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): m_slave_0: link becomes ready [ 63.492118][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.500350][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.509158][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.519292][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.526341][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.546241][ T4181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.556979][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.579958][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.606977][ T2303] Bluetooth: hci0: command 0x041b tx timeout [ 63.613496][ T2303] Bluetooth: hci2: command 0x041b tx timeout [ 63.620546][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.630864][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.647126][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.670037][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.702202][ T4264] Bluetooth: hci4: command 0x041b tx timeout [ 63.707360][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.708736][ T4264] Bluetooth: hci1: command 0x041b tx timeout [ 63.717316][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.722886][ T4264] Bluetooth: hci3: command 0x041b tx timeout [ 63.736716][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.745274][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.753792][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.760926][ T1181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.769385][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.779662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.787970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.812694][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.846772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.856099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.877147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.894780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.903978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.913020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.924078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.957043][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.971076][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.980795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.989985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.999525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.008971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.016528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.037862][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.046884][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.055109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.063662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.072916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.081298][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.095763][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.103486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.111615][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.134726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.143861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.154597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.163233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.173029][ T4182] device veth0_vlan entered promiscuous mode [ 64.195380][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.212218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.221735][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.253730][ T4182] device veth1_vlan entered promiscuous mode [ 64.266073][ T4191] device veth0_vlan entered promiscuous mode [ 64.279184][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.290141][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.302393][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.312688][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.321273][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.330446][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.339688][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.348991][ T4184] device veth0_vlan entered promiscuous mode [ 64.357724][ T4181] device veth0_vlan entered promiscuous mode [ 64.379574][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.387833][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.395668][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.404439][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.422048][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.434064][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.444415][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.460251][ T4181] device veth1_vlan entered promiscuous mode [ 64.485797][ T4182] device veth0_macvtap entered promiscuous mode [ 64.495922][ T4182] device veth1_macvtap entered promiscuous mode [ 64.511066][ T4184] device veth1_vlan entered promiscuous mode [ 64.518161][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.526178][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.535234][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.543520][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.551241][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.560278][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.569620][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.578651][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.586615][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.597820][ T4191] device veth1_vlan entered promiscuous mode [ 64.614178][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.636112][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.655133][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.663891][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.674707][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.682921][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.691820][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.700784][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.709935][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.722215][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.731947][ T4181] device veth0_macvtap entered promiscuous mode [ 64.749932][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.758820][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.772150][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.783814][ T4182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.793090][ T4182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.801841][ T4182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.811566][ T4182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.827249][ T4181] device veth1_macvtap entered promiscuous mode [ 64.853346][ T4191] device veth0_macvtap entered promiscuous mode [ 64.861732][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.870700][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.881786][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.890867][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.899904][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.909386][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.931071][ T4191] device veth1_macvtap entered promiscuous mode [ 64.939332][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.950959][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.959670][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.985698][ T4184] device veth0_macvtap entered promiscuous mode [ 65.003776][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.015135][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.026274][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.035199][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.043795][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.054510][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.063488][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.072263][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.081094][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.089562][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.100275][ T4183] device veth0_vlan entered promiscuous mode [ 65.110671][ T4184] device veth1_macvtap entered promiscuous mode [ 65.121078][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.132306][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.143238][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.153744][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.165056][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.174604][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.185707][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.197713][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.224319][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.233140][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.269623][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.279106][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.292022][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.302758][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.313066][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.324098][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.335616][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.345392][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.356774][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.369556][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.381220][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.391176][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.401679][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.412772][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.424299][ T4183] device veth1_vlan entered promiscuous mode [ 65.431238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.440096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.450158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.459312][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.468748][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.479823][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.488812][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.497984][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.506908][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.518405][ T4181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.528932][ T4181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.537995][ T4181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.546808][ T4181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.567667][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.579042][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.589198][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.599892][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.611738][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.622562][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.633773][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.646097][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.655563][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.664428][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.673358][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.693021][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 65.700993][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 65.724576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.732939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.741909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.779921][ T4295] Bluetooth: hci3: command 0x040f tx timeout [ 65.793213][ T4295] Bluetooth: hci1: command 0x040f tx timeout [ 65.807229][ T4295] Bluetooth: hci4: command 0x040f tx timeout [ 65.829017][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.839783][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.849844][ T4183] device veth0_macvtap entered promiscuous mode [ 65.893326][ T4183] device veth1_macvtap entered promiscuous mode [ 65.921967][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.932766][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.949450][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.957908][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.972037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.986146][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.994668][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.008710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.018135][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.029147][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.040104][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.051517][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.061565][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.072539][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.082841][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.094577][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.105803][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.124696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.133591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.157892][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.158423][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.165829][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.180060][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.194829][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.209402][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.219305][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.229838][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.240128][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.252522][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.264639][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.281669][ T4183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.291293][ T4183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.300738][ T4183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.309895][ T4183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.320808][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.330559][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.339519][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.357775][ T1181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.366444][ T1181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.402511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.414982][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.425480][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.450426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.497370][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.505297][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.522364][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.550207][ T1181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.555985][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.571091][ T1181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.594610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.617131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.645249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.684403][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.709832][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.716524][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.726191][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.734421][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.751470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.136408][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 67.145408][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 67.154414][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 67.163421][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 67.172394][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 67.182203][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 67.191188][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 67.200156][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 67.209125][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 67.218087][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 68.610238][ T4264] Bluetooth: hci0: command 0x0419 tx timeout [ 69.519486][ T4264] Bluetooth: hci2: command 0x0419 tx timeout [ 69.612178][ T4333] Sensor B: ================= START STATUS ================= [ 69.626408][ T4333] Sensor B: Test Pattern: 75% Colorbar [ 69.639461][ T4333] Sensor B: Show Information: All [ 69.652866][ T4333] Sensor B: Vertical Flip: false [ 69.686529][ T4333] Sensor B: Horizontal Flip: false [ 69.692428][ T4333] Sensor B: Brightness: 128 [ 69.701428][ T4333] Sensor B: Contrast: 128 [ 69.715428][ T4333] Sensor B: Hue: 0 [ 70.828378][ T4333] Sensor B: Saturation: 128 [ 70.833610][ T4333] Sensor B: ================== END STATUS ================== [ 71.177852][ T4264] Bluetooth: hci4: command 0x0419 tx timeout [ 71.223615][ T4342] loop3: detected capacity change from 0 to 2048 [ 71.250110][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.256811][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.267806][ T4264] Bluetooth: hci1: command 0x0419 tx timeout [ 71.296521][ T4264] Bluetooth: hci3: command 0x0419 tx timeout [ 71.402126][ T4347] loop1: detected capacity change from 0 to 512 [ 71.514832][ T4342] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8802c128, mo2=0002] [ 71.617968][ T4342] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,lazytime,barrier=0x0000000000000007,noblock_validity,norecovery,min_batch_time=0x000000000000c619,errors=remount-ro,. Quota mode: none. [ 71.627719][ T4347] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,user_xattr,,errors=continue. Quota mode: writeback. [ 71.648456][ T4342] EXT4-fs error (device loop3): ext4_ext_precache:626: inode #2: comm syz.3.11: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 71.657081][ T4349] loop2: detected capacity change from 0 to 4096 [ 71.679323][ T4342] EXT4-fs (loop3): Remounting filesystem read-only [ 71.730935][ T4342] EXT4-fs error (device loop3): ext4_find_extent:929: inode #2: comm syz.3.11: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 71.827576][ T4342] EXT4-fs (loop3): Remounting filesystem read-only [ 71.924472][ T4347] EXT4-fs error (device loop1): ext4_quota_enable:6413: comm syz.1.15: Bad quota inum: 2, type: 1 [ 72.305012][ T4347] EXT4-fs warning (device loop1): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 73.469766][ T26] audit: type=1800 audit(1765519524.563:2): pid=4376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.14" name="bus" dev="loop2" ino=33 res=0 errno=0 [ 75.982237][ T4185] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 77.176536][ T4185] usb 2-1: device descriptor read/all, error -71 [ 77.462308][ T4418] loop1: detected capacity change from 0 to 64 [ 77.628488][ T26] audit: type=1800 audit(1765519528.723:3): pid=4418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.34" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 77.648644][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.727201][ T4397] loop3: detected capacity change from 0 to 32768 [ 77.800661][ T4397] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.26 (4397) [ 77.962226][ T4397] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 78.016948][ T4397] BTRFS info (device loop3): allowing degraded mounts [ 78.056519][ T4397] BTRFS info (device loop3): enabling ssd optimizations [ 78.086556][ T4397] BTRFS info (device loop3): allowing degraded mounts [ 78.093382][ T4397] BTRFS info (device loop3): using free space tree [ 78.120390][ T4397] BTRFS info (device loop3): has skinny extents [ 78.348479][ T4397] BTRFS error (device loop3): open_ctree failed: -12 [ 78.447107][ T4421] loop1: detected capacity change from 0 to 32768 [ 78.612058][ T4421] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.35 (4421) [ 78.818098][ T4421] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 78.856480][ T4185] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.878224][ T4421] BTRFS info (device loop1): use zlib compression, level 3 [ 78.925599][ T4452] loop0: detected capacity change from 0 to 4096 [ 78.976478][ T4421] BTRFS info (device loop1): using free space tree [ 79.051953][ T4421] BTRFS info (device loop1): has skinny extents [ 79.301803][ T4463] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.846729][ T4185] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.916545][ T4185] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 80.927300][ T4185] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.969139][ T4185] usb 5-1: Product: syz [ 80.973473][ T4185] usb 5-1: Manufacturer: syz [ 81.022486][ T4185] usb 5-1: SerialNumber: syz [ 81.152517][ T4185] usb 5-1: config 0 descriptor?? [ 81.484475][ T21] cfg80211: failed to load regulatory.db [ 81.684862][ T4421] BTRFS error (device loop1): open_ctree failed: -12 [ 81.693007][ T4485] loop2: detected capacity change from 0 to 1024 [ 81.696244][ T4440] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 81.757647][ T4185] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 81.789293][ T4185] usb 5-1: USB disconnect, device number 2 [ 81.801304][ T4294] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by udevd (4294) [ 81.828986][ T4485] hfsplus: unable to parse mount options [ 81.917469][ T4440] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 83.239183][ T4508] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 83.239183][ T4508] The task syz.1.45 (4508) triggered the difference, watch for misbehavior. [ 83.327740][ T4510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.43'. [ 83.736056][ T4362] udevd[4362]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 84.091739][ T4515] fido_id[4515]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 84.136485][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.181808][ T4524] loop4: detected capacity change from 0 to 512 [ 84.242091][ T4522] loop0: detected capacity change from 0 to 4096 [ 84.376596][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 84.493190][ T4524] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,user_xattr,,errors=continue. Quota mode: writeback. [ 84.506467][ T23] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 84.515516][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.598927][ T4524] EXT4-fs error (device loop4): ext4_quota_enable:6413: comm syz.4.51: Bad quota inum: 2, type: 1 [ 84.618975][ T23] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 84.633013][ T4524] EXT4-fs warning (device loop4): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 85.004417][ T4540] netlink: 'syz.3.54': attribute type 10 has an invalid length. [ 85.117282][ T4540] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.126838][ T4540] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.210628][ T26] audit: type=1800 audit(1765519536.293:4): pid=4544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.50" name="bus" dev="loop0" ino=33 res=0 errno=0 [ 85.230588][ C0] vkms_vblank_simulate: vblank timer overrun [ 85.316732][ T4540] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.323814][ T4540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.331656][ T4540] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.338772][ T4540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.596821][ T4440] usb 3-1: USB disconnect, device number 2 [ 86.244063][ T4540] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 86.326282][ T4540] syz.3.54 (4540) used greatest stack depth: 21120 bytes left [ 86.560855][ T4236] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 87.277672][ T4567] device vxcan3 entered promiscuous mode [ 87.396504][ T4236] usb 2-1: Using ep0 maxpacket: 8 [ 87.841998][ T4572] loop0: detected capacity change from 0 to 2048 [ 88.026784][ T4236] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 88.055491][ T4236] usb 2-1: can't read configurations, error -71 [ 88.168822][ T4573] netlink: 36 bytes leftover after parsing attributes in process `syz.3.64'. [ 88.295672][ T4581] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 88.362770][ T4572] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.502422][ T4600] loop2: detected capacity change from 0 to 512 [ 88.927961][ T4597] loop3: detected capacity change from 0 to 1024 [ 88.938804][ T4600] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,user_xattr,,errors=continue. Quota mode: writeback. [ 89.045530][ T4600] EXT4-fs error (device loop2): ext4_quota_enable:6413: comm syz.2.66: Bad quota inum: 2, type: 1 [ 89.106868][ T4600] EXT4-fs warning (device loop2): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 89.205348][ T4613] syz.4.71 uses obsolete (PF_INET,SOCK_PACKET) [ 89.496457][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.917019][ T23] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 90.134552][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.205101][ T4629] loop2: detected capacity change from 0 to 1024 [ 90.216314][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 90.459666][ T4632] loop1: detected capacity change from 0 to 32768 [ 91.846512][ T23] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 91.866157][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.875713][ T23] usb 4-1: Product: syz [ 91.880351][ T23] usb 4-1: Manufacturer: syz [ 91.885598][ T23] usb 4-1: SerialNumber: syz [ 91.904382][ T23] usb 4-1: config 0 descriptor?? [ 91.947571][ T23] usb-storage 4-1:0.0: USB Mass Storage device detected [ 92.005383][ T23] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 92.221461][ T23] usb 4-1: USB disconnect, device number 2 [ 96.582774][ T4689] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.590420][ T4689] IPv6: NLM_F_CREATE should be set when creating new route [ 97.006427][ T4697] Sensor B: ================= START STATUS ================= [ 97.014679][ T4697] Sensor B: Test Pattern: 75% Colorbar [ 97.020485][ T4697] Sensor B: Show Information: All [ 97.025595][ T4697] Sensor B: Vertical Flip: false [ 97.030934][ T4697] Sensor B: Horizontal Flip: false [ 97.038950][ T4697] Sensor B: Brightness: 128 [ 97.051196][ T4697] Sensor B: Contrast: 128 [ 97.060928][ T4697] Sensor B: Hue: 0 [ 97.067195][ T4697] Sensor B: Saturation: 128 [ 97.074484][ T4697] Sensor B: ================== END STATUS ================== [ 97.768234][ T4700] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.555979][ T4693] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.563362][ T4693] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.362470][ T4724] loop4: detected capacity change from 0 to 64 [ 101.632881][ T4693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.667546][ T4693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.786549][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 102.125209][ T4693] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.134707][ T4693] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.143655][ T4693] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.152558][ T4693] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.355477][ T4693] syz.3.96 (4693) used greatest stack depth: 20384 bytes left [ 102.437142][ T21] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 102.493238][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.520832][ T21] usb 5-1: Product: syz [ 102.525053][ T21] usb 5-1: Manufacturer: syz [ 102.540353][ T21] usb 5-1: SerialNumber: syz [ 102.555125][ T4747] netlink: 80 bytes leftover after parsing attributes in process `syz.0.115'. [ 102.637291][ T4747] netlink: 80 bytes leftover after parsing attributes in process `syz.0.115'. [ 102.658283][ T4747] netlink: 80 bytes leftover after parsing attributes in process `syz.0.115'. [ 102.917186][ T21] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 103.485975][ T4756] netlink: 204 bytes leftover after parsing attributes in process `syz.3.117'. [ 103.551643][ T21] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 107.446575][ T21] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 107.475031][ T21] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 107.504153][ T21] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 107.537733][ T21] lan78xx: probe of 5-1:1.0 failed with error -71 [ 107.574987][ T21] usb 5-1: USB disconnect, device number 3 [ 108.101837][ T4489] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.236819][ T23] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 108.507127][ T4489] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.593824][ T4489] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 35, changing to 7 [ 108.903609][ T23] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 109.075067][ T23] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 109.117545][ T4489] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 10006, setting to 1024 [ 109.343985][ T4489] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.371029][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 109.659199][ T23] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 109.668982][ T4489] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 109.696437][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.704740][ T4489] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.738490][ T23] usb 3-1: config 0 descriptor?? [ 109.755185][ T4489] usb 1-1: config 0 descriptor?? [ 110.149038][ T4489] usb 1-1: USB disconnect, device number 2 [ 110.686681][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 110.692727][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 110.714090][ T23] usb 3-1: USB disconnect, device number 3 [ 110.836544][ T4440] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 112.346463][ T4440] usb 4-1: Using ep0 maxpacket: 32 [ 112.476897][ T4440] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 112.754672][ T4440] usb 4-1: config 0 has no interface number 0 [ 112.914519][ T4440] usb 4-1: config 0 interface 12 has no altsetting 0 [ 113.127531][ T4440] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 113.149664][ T4440] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.199821][ T4440] usb 4-1: Product: syz [ 113.222273][ T4440] usb 4-1: Manufacturer: syz [ 113.256525][ T4440] usb 4-1: SerialNumber: syz [ 113.691683][ T4440] usb 4-1: config 0 descriptor?? [ 113.757742][ T4440] usb 4-1: can't set config #0, error -71 [ 113.941635][ T4852] loop3: detected capacity change from 0 to 40427 [ 114.116397][ T4440] usb 4-1: USB disconnect, device number 3 [ 114.127822][ T4852] F2FS-fs (loop3): invalid crc value [ 114.912303][ T4852] F2FS-fs (loop3): Found nat_bits in checkpoint [ 114.945828][ T4852] F2FS-fs (loop3): Start checkpoint disabled! [ 115.007490][ T4852] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 115.142815][ T26] audit: type=1800 audit(1765519566.233:5): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.147" name="bus" dev="loop3" ino=14 res=0 errno=0 [ 116.666553][ T4295] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.906524][ T4295] usb 4-1: device descriptor read/64, error -71 [ 117.186472][ T4295] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 117.406608][ T4295] usb 4-1: device descriptor read/64, error -71 [ 117.486485][ T4345] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 117.536995][ T4295] usb usb4-port1: attempt power cycle [ 117.931379][ T4345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.931777][ T4345] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 117.931903][ T4345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.946781][ T4295] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 117.960983][ T4345] usb 2-1: config 0 descriptor?? [ 118.398538][ T4295] usb 4-1: device descriptor read/8, error -71 [ 118.721488][ T4583] attempt to access beyond end of device [ 118.721488][ T4583] loop3: rw=2049, want=40984, limit=40427 [ 120.557865][ T4345] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 120.590927][ T4886] capability: warning: `syz.0.157' uses deprecated v2 capabilities in a way that may be insecure [ 120.679212][ T4345] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0002/input/input5 [ 120.819512][ T4345] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 120.893300][ T4345] usb 2-1: USB disconnect, device number 6 [ 120.970719][ T4899] fido_id[4899]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 122.393984][ T4917] loop3: detected capacity change from 0 to 2048 [ 122.979633][ T23] Bluetooth: hci5: command 0x1003 tx timeout [ 122.987364][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 123.519127][ T4917] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 125.182978][ T4489] Bluetooth: hci5: command 0x1001 tx timeout [ 125.866356][ C0] sched: RT throttling activated [ 125.903200][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 127.773332][ T4946] Zero length message leads to an empty skb [ 128.169896][ T21] Bluetooth: hci5: command 0x1009 tx timeout [ 129.625781][ T4981] netlink: 48 bytes leftover after parsing attributes in process `syz.4.187'. [ 129.640470][ T4981] netlink: 40 bytes leftover after parsing attributes in process `syz.4.187'. [ 131.188168][ T4988] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 133.909573][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.915987][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.991022][ T5013] loop3: detected capacity change from 0 to 256 [ 135.626576][ T26] audit: type=1800 audit(1765519586.713:6): pid=5013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.207" name="file1" dev="loop3" ino=1048590 res=0 errno=0 [ 135.789019][ T5029] netlink: 48 bytes leftover after parsing attributes in process `syz.1.201'. [ 135.832176][ T5029] netlink: 40 bytes leftover after parsing attributes in process `syz.1.201'. [ 136.076593][ T5036] trusted_key: encrypted_key: insufficient parameters specified [ 136.325088][ T5038] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 136.386893][ T26] audit: type=1800 audit(1765519587.183:7): pid=5023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.207" name="file1" dev="loop3" ino=1048590 res=0 errno=0 [ 136.884672][ T26] audit: type=1804 audit(1765519587.203:8): pid=5013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.207" name="/newroot/36/file1/file1" dev="loop3" ino=1048590 res=1 errno=0 [ 137.011200][ T5040] netlink: 44 bytes leftover after parsing attributes in process `syz.1.205'. [ 137.037052][ T26] audit: type=1800 audit(1765519588.123:9): pid=5013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.207" name="file1" dev="loop3" ino=1048590 res=0 errno=0 [ 139.783881][ T5078] netlink: 48 bytes leftover after parsing attributes in process `syz.3.217'. [ 139.799947][ T5078] netlink: 40 bytes leftover after parsing attributes in process `syz.3.217'. [ 141.452205][ T5105] loop3: detected capacity change from 0 to 256 [ 142.366674][ T5107] binder: 5102:5107 ioctl c0306201 200000000080 returned -14 [ 143.717306][ T5105] FAT-fs (loop3): Directory bread(block 64) failed [ 143.724203][ T5105] FAT-fs (loop3): Directory bread(block 65) failed [ 143.730961][ T5105] FAT-fs (loop3): Directory bread(block 66) failed [ 143.737546][ T5105] FAT-fs (loop3): Directory bread(block 67) failed [ 143.744220][ T5105] FAT-fs (loop3): Directory bread(block 68) failed [ 143.750822][ T5105] FAT-fs (loop3): Directory bread(block 69) failed [ 143.757453][ T5105] FAT-fs (loop3): Directory bread(block 70) failed [ 143.763991][ T5105] FAT-fs (loop3): Directory bread(block 71) failed [ 143.770704][ T5105] FAT-fs (loop3): Directory bread(block 72) failed [ 143.777459][ T5105] FAT-fs (loop3): Directory bread(block 73) failed [ 144.029968][ T5115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.230'. [ 147.790415][ T5136] loop3: detected capacity change from 0 to 32768 [ 147.799484][ T5152] loop4: detected capacity change from 0 to 64 [ 150.315963][ T5194] loop3: detected capacity change from 0 to 1024 [ 150.665916][ T5194] ======================================================= [ 150.665916][ T5194] WARNING: The mand mount option has been deprecated and [ 150.665916][ T5194] and is ignored by this kernel. Remove the mand [ 150.665916][ T5194] option from the mount to silence this warning. [ 150.665916][ T5194] ======================================================= [ 151.028750][ T5200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.260'. [ 151.217460][ T5194] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 151.289950][ T5194] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.311669][ T5194] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.258: bg 0: block 112: padding at end of block bitmap is not set [ 151.330220][ T5194] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 62 with error 117 [ 151.342975][ T5194] EXT4-fs (loop3): This should not happen!! Data will be lost [ 151.342975][ T5194] [ 153.305757][ T5207] loop4: detected capacity change from 0 to 40427 [ 153.525415][ T5207] F2FS-fs (loop4): invalid crc value [ 154.972434][ T5207] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 160.029013][ T5265] loop4: detected capacity change from 0 to 128 [ 160.644724][ T5265] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 160.654353][ T5269] loop3: detected capacity change from 0 to 1024 [ 160.657226][ T5265] hpfs: filesystem error: improperly stopped [ 160.669271][ T5265] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 160.677064][ T5265] hpfs: You really don't want any checks? You are crazy... [ 160.684741][ T5265] hpfs: hpfs_map_sector(): read error [ 160.690209][ T5265] hpfs: code page support is disabled [ 160.696579][ T5265] hpfs: hpfs_map_4sectors(): unaligned read [ 160.703087][ T5265] hpfs: hpfs_map_4sectors(): unaligned read [ 160.709098][ T5265] hpfs: filesystem error: unable to find root dir [ 160.727630][ T5269] hfsplus: unable to parse mount options [ 161.046625][ T5272] hpfs: hpfs_map_4sectors(): unaligned read [ 162.009930][ T5281] loop3: detected capacity change from 0 to 2048 [ 162.560337][ T5281] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8802c128, mo2=0002] [ 162.700320][ T5281] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,lazytime,barrier=0x0000000000000007,noblock_validity,norecovery,min_batch_time=0x000000000000c619,errors=remount-ro,. Quota mode: none. [ 163.123518][ T5281] EXT4-fs error (device loop3): ext4_ext_precache:626: inode #2: comm syz.3.286: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 163.214253][ T5281] EXT4-fs (loop3): Remounting filesystem read-only [ 163.945349][ T5293] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 163.973994][ T5293] EXT4-fs (loop3): Remounting filesystem read-only [ 166.186193][ T5323] capability: warning: `syz.2.298' uses 32-bit capabilities (legacy support in use) [ 167.902396][ T5347] loop4: detected capacity change from 0 to 64 [ 167.931169][ T5347] hfs: unable to parse mount options [ 170.813134][ T5372] Cannot find add_set index 0 as target [ 173.870114][ T4332] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.895753][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 174.980954][ T4332] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.072532][ T4332] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.173920][ T4332] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.320696][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 175.547017][ T5387] chnl_net:caif_netlink_parms(): no params data found [ 175.726444][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 175.745355][ T5431] Cannot find add_set index 0 as target [ 175.846786][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.879400][ T23] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 175.890721][ T5387] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.901535][ T5387] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.911378][ T5387] device bridge_slave_0 entered promiscuous mode [ 175.920545][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.929475][ T5387] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.937483][ T5387] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.947640][ T5387] device bridge_slave_1 entered promiscuous mode [ 175.993415][ T23] usb 5-1: config 0 descriptor?? [ 176.027752][ T5387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.075021][ T5387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.274650][ T5387] team0: Port device team_slave_0 added [ 176.337652][ T5387] team0: Port device team_slave_1 added [ 176.550834][ T23] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 177.010723][ T4296] Bluetooth: hci1: command 0x041b tx timeout [ 177.255004][ T23] usb 5-1: USB disconnect, device number 4 [ 177.436941][ T5387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.464430][ T5387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.556588][ T5387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.670224][ T26] audit: type=1326 audit(1765519629.763:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5486 comm="syz.3.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0340c75749 code=0x7ffc0000 [ 178.695965][ T5387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.728252][ T5387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.786716][ T26] audit: type=1326 audit(1765519629.763:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5486 comm="syz.3.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0340c75749 code=0x7ffc0000 [ 178.850231][ T5387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.850896][ T26] audit: type=1326 audit(1765519629.803:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5486 comm="syz.3.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f0340c75749 code=0x7ffc0000 [ 178.884405][ T26] audit: type=1326 audit(1765519629.803:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5486 comm="syz.3.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0340c75749 code=0x7ffc0000 [ 178.918388][ T26] audit: type=1326 audit(1765519629.803:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5486 comm="syz.3.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0340c75749 code=0x7ffc0000 [ 179.056699][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 179.815723][ T5387] device hsr_slave_0 entered promiscuous mode [ 179.825511][ T5387] device hsr_slave_1 entered promiscuous mode [ 179.832642][ T5387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.841523][ T5387] Cannot create hsr debugfs directory [ 181.683925][ T5513] loop3: detected capacity change from 0 to 2048 [ 181.741274][ T4489] Bluetooth: hci1: command 0x0419 tx timeout [ 182.672493][ T5525] loop3: detected capacity change from 0 to 64 [ 183.374658][ T5387] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 183.473513][ T5525] hfs: unable to parse mount options [ 183.510474][ T5387] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 183.551014][ T5387] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 183.625392][ T5387] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 185.233924][ T5387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.416475][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.437142][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.488986][ T5387] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.586910][ T4332] device hsr_slave_0 left promiscuous mode [ 185.615515][ T4332] device hsr_slave_1 left promiscuous mode [ 185.669319][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.676899][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.685553][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.693433][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.714902][ T4332] device bridge_slave_1 left promiscuous mode [ 185.738460][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.804596][ T4332] device bridge_slave_0 left promiscuous mode [ 185.827457][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.292362][ T4332] device veth1_macvtap left promiscuous mode [ 186.410926][ T4332] device veth0_macvtap left promiscuous mode [ 186.583526][ T4332] device veth1_vlan left promiscuous mode [ 186.606862][ T4332] device veth0_vlan left promiscuous mode [ 186.653647][ T4439] Bluetooth: hci4: command 0x0406 tx timeout [ 186.660392][ T4439] Bluetooth: hci2: command 0x0406 tx timeout [ 186.670141][ T4439] Bluetooth: hci3: command 0x0406 tx timeout [ 187.985500][ T4332] team0 (unregistering): Port device team_slave_1 removed [ 188.031941][ T4332] team0 (unregistering): Port device team_slave_0 removed [ 188.116591][ T4332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.353623][ T4332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.912922][ T4332] bond0 (unregistering): Released all slaves [ 189.082385][ T5608] loop4: detected capacity change from 0 to 2048 [ 189.896216][ T5608] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8802c128, mo2=0002] [ 189.997409][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.046706][ T5608] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,lazytime,barrier=0x0000000000000007,noblock_validity,norecovery,min_batch_time=0x000000000000c619,errors=remount-ro,. Quota mode: none. [ 190.046720][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.053543][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.081592][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.106733][ T5608] EXT4-fs error (device loop4): ext4_ext_precache:626: inode #2: comm syz.4.373: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 190.134650][ T5608] EXT4-fs (loop4): Remounting filesystem read-only [ 190.145500][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.200317][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.218195][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.225320][ T1181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.258477][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.272073][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.368998][ T5387] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.413988][ T5387] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.466206][ T1319] block nbd4: Attempted send on invalid socket [ 190.473441][ T1319] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 190.508893][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.537495][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.550360][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.835074][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.267934][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.396972][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.417211][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.433855][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.528171][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.552317][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.582726][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.486467][ T4295] Bluetooth: hci4: command 0x201b tx timeout [ 192.845584][ T5654] loop4: detected capacity change from 0 to 2048 [ 193.052556][ T5654] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8802c128, mo2=0002] [ 193.073922][ T5654] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,lazytime,barrier=0x0000000000000007,noblock_validity,norecovery,min_batch_time=0x000000000000c619,errors=remount-ro,. Quota mode: none. [ 193.135595][ T5654] EXT4-fs error (device loop4): ext4_ext_precache:626: inode #2: comm syz.4.387: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 193.238171][ T5654] EXT4-fs (loop4): Remounting filesystem read-only [ 193.246080][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.255176][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.281080][ T5387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.099767][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.106087][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.212038][ T5722] loop4: detected capacity change from 0 to 2048 [ 196.250149][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.263124][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.296801][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 196.322801][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 196.354058][ T5387] device veth0_vlan entered promiscuous mode [ 196.372850][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 196.397250][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 196.405760][ T5722] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8802c128, mo2=0002] [ 196.441013][ T5387] device veth1_vlan entered promiscuous mode [ 196.504301][ T5722] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,lazytime,barrier=0x0000000000000007,noblock_validity,norecovery,min_batch_time=0x000000000000c619,errors=remount-ro,. Quota mode: none. [ 196.620126][ T5722] EXT4-fs error (device loop4): ext4_ext_precache:626: inode #2: comm syz.4.404: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 196.633122][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 196.667242][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 196.691364][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 196.692210][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 196.714672][ T5722] EXT4-fs (loop4): Remounting filesystem read-only [ 196.810987][ T5387] device veth0_macvtap entered promiscuous mode [ 196.948238][ T5387] device veth1_macvtap entered promiscuous mode [ 197.307596][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 197.432016][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 197.765849][ T5387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.838437][ T5387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.941090][ T5387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.988041][ T5387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.058541][ T5387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.108986][ T5387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.153759][ T5387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.203206][ T5387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.270106][ T5387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.311656][ T5387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.322193][ T5387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.492594][ T5387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.561578][ T5387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.636917][ T5387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.755866][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 198.787272][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 198.837164][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.036966][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.723492][ T5387] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.746414][ T5387] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.775560][ T5387] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.817557][ T5387] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.907653][ T4243] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 199.935679][ T4243] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 200.374768][ T5788] loop4: detected capacity change from 0 to 40427 [ 200.426438][ T5788] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 200.434491][ T5788] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 200.454072][ T5788] F2FS-fs (loop4): invalid crc value [ 200.454650][ T1181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.510953][ T5788] F2FS-fs (loop4): Found nat_bits in checkpoint [ 200.518377][ T1181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.576121][ T5788] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 200.583497][ T5788] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 200.772607][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 200.793093][ T1181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.836455][ T1181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.847167][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 200.879041][ T5799] mmap: syz.4.420 (5799) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 202.056425][ T4440] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 202.108279][ T4439] libceph: connect (1)[c::]:6789 error -101 [ 202.118213][ T4439] libceph: mon0 (1)[c::]:6789 connect error [ 202.128804][ T4439] libceph: connect (1)[c::]:6789 error -101 [ 202.134815][ T4439] libceph: mon0 (1)[c::]:6789 connect error [ 202.168614][ T5839] ceph: No mds server is up or the cluster is laggy [ 202.291809][ T4489] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 202.430527][ T4439] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 202.440213][ T4295] libceph: connect (1)[c::]:6789 error -101 [ 202.446229][ T4295] libceph: mon0 (1)[c::]:6789 connect error [ 202.456603][ T4440] usb 1-1: Using ep0 maxpacket: 16 [ 202.577046][ T4440] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 202.626634][ T4439] usb 5-1: device descriptor read/64, error -71 [ 202.843791][ T4440] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 202.886437][ T4440] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.886660][ T4489] usb 3-1: config 0 has no interfaces? [ 202.895136][ T4440] usb 1-1: Product: syz [ 202.960185][ T4440] usb 1-1: Manufacturer: syz [ 202.964815][ T4489] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 203.017555][ T4440] usb 1-1: SerialNumber: syz [ 203.083395][ T4439] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 203.131076][ T4489] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.556012][ T4440] usb 1-1: config 0 descriptor?? [ 203.556114][ T4489] usb 3-1: config 0 descriptor?? [ 203.874181][ T4439] usb 5-1: device descriptor read/64, error -71 [ 204.000232][ T4439] usb usb5-port1: attempt power cycle [ 206.047212][ T4440] usb 1-1: USB disconnect, device number 3 [ 207.003105][ T4345] usb 3-1: USB disconnect, device number 4 [ 207.443003][ T4185] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 207.847546][ T4185] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 207.925053][ T4185] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.237876][ T4185] usb 1-1: config 0 descriptor?? [ 208.298577][ T4185] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 208.434384][ T5950] loop5: detected capacity change from 0 to 2048 [ 208.538075][ T5950] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8802c128, mo2=0002] [ 208.592171][ T5950] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,lazytime,barrier=0x0000000000000007,noblock_validity,norecovery,min_batch_time=0x000000000000c619,errors=remount-ro,. Quota mode: none. [ 208.625261][ T5950] EXT4-fs error (device loop5): ext4_ext_precache:626: inode #2: comm syz.5.452: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 209.012874][ T5956] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 209.045799][ T5950] EXT4-fs (loop5): Remounting filesystem read-only [ 209.106367][ T5956] EXT4-fs (loop5): Remounting filesystem read-only [ 209.826502][ T4185] gspca_cpia1: usb_control_msg 03, error -71 [ 209.846706][ T4185] gspca_cpia1: usb_control_msg 04, error -71 [ 209.858269][ T4185] cpia1: probe of 1-1:0.0 failed with error -71 [ 209.879730][ T4185] usb 1-1: USB disconnect, device number 4 [ 210.066482][ T4243] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 210.336399][ T4243] usb 6-1: Using ep0 maxpacket: 8 [ 211.326543][ T4243] usb 6-1: config 0 has no interfaces? [ 211.605621][ T4243] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 211.657014][ T4243] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.674462][ T4243] usb 6-1: Product: syz [ 211.680553][ T4243] usb 6-1: Manufacturer: syz [ 211.811989][ T4243] usb 6-1: SerialNumber: syz [ 211.875368][ T4243] usb 6-1: config 0 descriptor?? [ 211.916496][ T6013] ieee802154 phy0 wpan0: encryption failed: -22 [ 212.237550][ T6019] process 'syz.4.470' launched './file2' with NULL argv: empty string added [ 212.258887][ T4295] usb 6-1: USB disconnect, device number 2 [ 214.552564][ T6047] loop4: detected capacity change from 0 to 2048 [ 214.976147][ T6047] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8802c128, mo2=0002] [ 215.073368][ T6047] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,lazytime,barrier=0x0000000000000007,noblock_validity,norecovery,min_batch_time=0x000000000000c619,errors=remount-ro,. Quota mode: none. [ 215.171060][ T6047] EXT4-fs error (device loop4): ext4_ext_precache:626: inode #2: comm syz.4.478: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 215.385306][ T6047] EXT4-fs (loop4): Remounting filesystem read-only [ 217.901922][ T6111] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 217.911388][ T6111] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 217.920904][ T6111] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 218.140909][ T26] audit: type=1800 audit(1765519668.993:15): pid=6111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.492" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 220.205623][ T4243] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 220.617432][ T4243] usb 5-1: Using ep0 maxpacket: 16 [ 221.076525][ T4243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.091816][ T4243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.132330][ T4243] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 221.165504][ T4243] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 221.197934][ T4243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.231964][ T4243] usb 5-1: config 0 descriptor?? [ 223.259993][ T4243] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.0005/input/input6 [ 223.426606][ T4243] appleir 0003:05AC:8241.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 223.718963][ T4243] usb 5-1: USB disconnect, device number 8 [ 224.990538][ T6197] loop5: detected capacity change from 0 to 2048 [ 225.026067][ T6196] fido_id[6196]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 225.139962][ T6197] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8802c128, mo2=0002] [ 225.236050][ T6197] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,lazytime,barrier=0x0000000000000007,noblock_validity,norecovery,min_batch_time=0x000000000000c619,errors=remount-ro,. Quota mode: none. [ 227.063614][ T6245] loop5: detected capacity change from 0 to 256 [ 227.208074][ T6245] exfat: Deprecated parameter 'utf8' [ 227.214369][ T6245] exfat: Deprecated parameter 'utf8' [ 228.499287][ T6245] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 235.623460][ T6368] loop4: detected capacity change from 0 to 512 [ 235.715470][ T6368] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 235.834208][ T6368] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 235.886142][ T6368] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 235.921066][ T6368] EXT4-fs (loop4): 1 truncate cleaned up [ 235.930703][ T6368] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000200,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,data=journal,quota,,errors=continue. Quota mode: writeback. [ 242.060064][ T6491] netlink: 'syz.3.582': attribute type 4 has an invalid length. [ 243.050815][ T6491] netlink: 17 bytes leftover after parsing attributes in process `syz.3.582'. [ 243.246448][ T4185] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 243.667250][ T4185] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.901821][ T4185] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 243.993949][ T4185] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.064285][ T4185] usb 1-1: config 0 descriptor?? [ 245.317594][ T4185] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 245.533623][ T4185] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0006/input/input7 [ 245.556356][ C1] usb 1-1: input irq status -75 received [ 245.634451][ T4185] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 245.777457][ T4185] usb 1-1: USB disconnect, device number 5 [ 246.362190][ T6563] fido_id[6563]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 248.061127][ T6583] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 248.379779][ T4345] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 249.846192][ T6606] netlink: 'syz.0.612': attribute type 24 has an invalid length. [ 249.899883][ T6606] netlink: 'syz.0.612': attribute type 24 has an invalid length. [ 250.226489][ T4345] usb 1-1: device not accepting address 6, error -71 [ 251.866934][ T4243] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 252.456737][ T4243] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.498461][ T4243] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 252.680259][ T4243] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.698499][ T4243] usb 4-1: config 0 descriptor?? [ 255.080373][ T6663] overlayfs: './file0' not a directory [ 255.097445][ T6663] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 255.108880][ T6663] FAT-fs (loop5): unable to read boot sector [ 255.577383][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.583771][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.756447][ T4243] usbhid 4-1:0.0: can't add hid device: -71 [ 255.762467][ T4243] usbhid: probe of 4-1:0.0 failed with error -71 [ 255.786528][ T4243] usb 4-1: USB disconnect, device number 8 [ 256.953102][ T6687] loop4: detected capacity change from 0 to 128 [ 262.864030][ T6741] loop4: detected capacity change from 0 to 1024 [ 262.947666][ T6741] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 263.107485][ T6741] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 263.704033][ T6747] overlayfs: missing 'workdir' [ 266.920504][ T6817] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 267.926386][ T4345] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 268.023893][ T6802] chnl_net:caif_netlink_parms(): no params data found [ 268.166363][ T4345] usb 1-1: Using ep0 maxpacket: 16 [ 268.258452][ T6832] loop9: detected capacity change from 0 to 7 [ 268.286615][ T4345] usb 1-1: config 0 has an invalid interface number: 236 but max is 1 [ 268.294818][ T4345] usb 1-1: config 0 has an invalid interface number: 129 but max is 1 [ 268.321561][ T6802] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.351047][ T6832] Dev loop9: unable to read RDB block 7 [ 268.364759][ T6802] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.372062][ T4345] usb 1-1: config 0 has no interface number 0 [ 268.396447][ T6832] loop9: unable to read partition table [ 268.401265][ T6802] device bridge_slave_0 entered promiscuous mode [ 268.408759][ T4345] usb 1-1: config 0 has no interface number 1 [ 268.409251][ T6832] loop9: partition table beyond EOD, [ 268.414868][ T4345] usb 1-1: config 0 interface 236 has no altsetting 0 [ 268.414891][ T4345] usb 1-1: config 0 interface 129 has no altsetting 0 [ 268.440611][ T6832] truncated [ 268.453316][ T6802] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.460463][ T6832] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 268.460463][ T6832] ) failed (rc=-5) [ 268.511184][ T4295] Bluetooth: hci1: command 0x0409 tx timeout [ 268.566669][ T6802] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.617993][ T6802] device bridge_slave_1 entered promiscuous mode [ 268.652141][ T4345] usb 1-1: New USB device found, idVendor=1ace, idProduct=e9b2, bcdDevice=5c.3d [ 268.671808][ T4345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.696378][ T4345] usb 1-1: Product: syz [ 268.700640][ T4345] usb 1-1: Manufacturer: syz [ 268.705247][ T4345] usb 1-1: SerialNumber: syz [ 268.731724][ T4345] usb 1-1: config 0 descriptor?? [ 268.909982][ T6802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.965894][ T6802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.054434][ T6802] team0: Port device team_slave_0 added [ 269.071652][ T6802] team0: Port device team_slave_1 added [ 269.124220][ T6802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.139013][ T6802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.166257][ T6802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.186691][ T6802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.202264][ T6802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.267283][ T6802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.403778][ T6802] device hsr_slave_0 entered promiscuous mode [ 269.420299][ T6802] device hsr_slave_1 entered promiscuous mode [ 269.432366][ T6802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.444922][ T6802] Cannot create hsr debugfs directory [ 269.808254][ T4277] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.919742][ T4277] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.145554][ T4277] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.161355][ T4345] ir_usb 1-1:0.236: required endpoints missing [ 270.267896][ T4345] usb 1-1: selecting invalid altsetting 0 [ 270.269323][ T4277] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.285824][ T4345] usb 1-1: Found UVC 2.26 device syz (1ace:e9b2) [ 270.309069][ T4345] usb 1-1: No valid video chain found. [ 270.351187][ T4345] usb 1-1: USB disconnect, device number 8 [ 270.566533][ T4243] Bluetooth: hci1: command 0x041b tx timeout [ 271.768917][ T6802] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 271.810405][ T6802] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 271.898681][ T6802] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 271.959233][ T6802] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 272.515937][ T6802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.571794][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 272.583985][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 272.638881][ T6802] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.656624][ T4185] Bluetooth: hci1: command 0x040f tx timeout [ 272.717958][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 272.738563][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.783408][ T4640] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.790571][ T4640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.853227][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.877219][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.903827][ T4640] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.910998][ T4640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.951288][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.104498][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.136152][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.155238][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.171733][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.183144][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 273.281487][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 273.524074][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.896849][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 273.930497][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.949461][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.019273][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.193908][ T6802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 274.351724][ T6924] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 274.374054][ T6924] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 274.798393][ T4243] Bluetooth: hci1: command 0x0419 tx timeout [ 276.495731][ T4277] device hsr_slave_0 left promiscuous mode [ 276.537674][ T4277] device hsr_slave_1 left promiscuous mode [ 276.582427][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.596431][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.647307][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.676730][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.710246][ T4277] device bridge_slave_1 left promiscuous mode [ 276.727261][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.775433][ T4277] device bridge_slave_0 left promiscuous mode [ 276.786555][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.825527][ T4277] device veth1_macvtap left promiscuous mode [ 276.844794][ T4277] device veth0_macvtap left promiscuous mode [ 276.854964][ T4277] device veth1_vlan left promiscuous mode [ 276.885754][ T4277] device veth0_vlan left promiscuous mode [ 279.265417][ T4277] team0 (unregistering): Port device team_slave_1 removed [ 279.281859][ T4277] team0 (unregistering): Port device team_slave_0 removed [ 279.297655][ T4277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.313329][ T4277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.905571][ T4277] bond0 (unregistering): Released all slaves [ 280.232497][ T6965] netlink: 'syz.0.709': attribute type 4 has an invalid length. [ 280.246702][ T6965] netlink: 17 bytes leftover after parsing attributes in process `syz.0.709'. [ 280.416585][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 280.424079][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 280.606552][ T6802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.213537][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 282.228809][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 283.146662][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 283.198525][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 283.262784][ T6802] device veth0_vlan entered promiscuous mode [ 283.281613][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 283.566062][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 283.633901][ T6802] device veth1_vlan entered promiscuous mode [ 283.814111][ T6802] device veth0_macvtap entered promiscuous mode [ 283.867548][ T6802] device veth1_macvtap entered promiscuous mode [ 284.142689][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.244561][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.300195][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.376439][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.421414][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.457432][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.474237][ T6802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.483851][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 284.493171][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 284.502537][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 284.512099][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 284.521626][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 284.531665][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 284.580642][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.611146][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.643867][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.681527][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.709871][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.722747][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.742759][ T6802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.801547][ T6802] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.836018][ T6802] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.851525][ T6802] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.872651][ T6802] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.906984][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 284.926023][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 286.281855][ T4393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.309442][ T4393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.352181][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 286.607435][ T4584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.617571][ T4584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.690593][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 287.281263][ T7101] loop6: detected capacity change from 0 to 128 [ 287.487383][ T7101] attempt to access beyond end of device [ 287.487383][ T7101] loop6: rw=2049, want=234, limit=128 [ 287.623028][ T7101] attempt to access beyond end of device [ 287.623028][ T7101] loop6: rw=2049, want=361, limit=128 [ 287.705753][ T7101] attempt to access beyond end of device [ 287.705753][ T7101] loop6: rw=524288, want=361, limit=128 [ 287.755527][ T7100] attempt to access beyond end of device [ 287.755527][ T7100] loop6: rw=0, want=257, limit=128 [ 287.812505][ T7101] attempt to access beyond end of device [ 287.812505][ T7101] loop6: rw=0, want=257, limit=128 [ 287.854044][ T7100] attempt to access beyond end of device [ 287.854044][ T7100] loop6: rw=0, want=257, limit=128 [ 287.939727][ T7100] attempt to access beyond end of device [ 287.939727][ T7100] loop6: rw=0, want=257, limit=128 [ 288.036640][ T7100] attempt to access beyond end of device [ 288.036640][ T7100] loop6: rw=0, want=257, limit=128 [ 288.151265][ T7101] attempt to access beyond end of device [ 288.151265][ T7101] loop6: rw=0, want=257, limit=128 [ 288.229167][ T7100] attempt to access beyond end of device [ 288.229167][ T7100] loop6: rw=0, want=257, limit=128 [ 289.737675][ T4584] Buffer I/O error on dev loop6, logical block 241, lost async page write [ 291.858781][ T7172] syz.3.756[7172] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.858922][ T7172] syz.3.756[7172] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.266593][ T21] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 294.935846][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.995788][ T21] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 295.066421][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.132734][ T21] usb 5-1: config 0 descriptor?? [ 296.535504][ T7213] overlayfs: failed to resolve './file0': -2 [ 298.957751][ T21] usbhid 5-1:0.0: can't add hid device: -71 [ 298.964171][ T21] usbhid: probe of 5-1:0.0 failed with error -71 [ 299.011577][ T21] usb 5-1: USB disconnect, device number 9 [ 299.412462][ T7265] loop4: detected capacity change from 0 to 512 [ 300.450887][ T7265] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 300.462179][ T7265] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.696935][ T7282] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #2: block 18: comm syz.4.780: lblock 23 mapped to illegal pblock 18 (length 1) [ 303.497482][ T7312] overlayfs: './file0' not a directory [ 305.237871][ T7350] loop6: detected capacity change from 0 to 512 [ 305.560703][ T7350] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 305.740303][ T7350] EXT4-fs (loop6): 1 truncate cleaned up [ 305.746224][ T7350] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 310.224355][ T26] audit: type=1326 audit(2000000039.121:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b3a73749 code=0x7ffc0000 [ 311.014378][ T26] audit: type=1326 audit(2000000039.151:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa9b3a73749 code=0x7ffc0000 [ 311.134915][ T26] audit: type=1326 audit(2000000039.151:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa9b3a73783 code=0x7ffc0000 [ 311.363056][ T26] audit: type=1326 audit(2000000039.171:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa9b3a721ff code=0x7ffc0000 [ 311.584169][ T26] audit: type=1326 audit(2000000039.941:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa9b3a737d7 code=0x7ffc0000 [ 312.191752][ T26] audit: type=1326 audit(2000000039.941:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9b3a71f90 code=0x7ffc0000 [ 312.258238][ T26] audit: type=1326 audit(2000000039.941:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa9b3a723aa code=0x7ffc0000 [ 312.363420][ T26] audit: type=1326 audit(2000000039.941:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b3a73749 code=0x7ffc0000 [ 312.413248][ T26] audit: type=1326 audit(2000000039.941:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b3a73749 code=0x7ffc0000 [ 313.115227][ T7442] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 313.641888][ T7463] device veth0 entered promiscuous mode [ 313.662873][ T7463] device batadv_slave_1 entered promiscuous mode [ 313.744626][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.826'. [ 313.983462][ T7463] device veth0 left promiscuous mode [ 315.166369][ T4439] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 316.207120][ T4439] usb 4-1: Using ep0 maxpacket: 16 [ 317.007989][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.018244][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.289834][ T4439] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 317.301644][ T4439] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.309994][ T4439] usb 4-1: Product: syz [ 317.314464][ T4439] usb 4-1: Manufacturer: syz [ 317.319386][ T4439] usb 4-1: SerialNumber: syz [ 317.385590][ T4439] r8152-cfgselector 4-1: config 0 descriptor?? [ 317.476873][ T4439] r8152-cfgselector 4-1: can't set config #0, error -71 [ 317.476943][ T7463] device batadv_slave_1 left promiscuous mode [ 317.506181][ T4439] r8152-cfgselector 4-1: Unknown version 0x0000 [ 317.547192][ T4439] r8152-cfgselector 4-1: USB disconnect, device number 9 [ 323.447547][ T7571] device vlan2 entered promiscuous mode [ 323.453390][ T7571] device team0 entered promiscuous mode [ 323.467271][ T7571] device team_slave_0 entered promiscuous mode [ 323.474004][ T7571] device team_slave_1 entered promiscuous mode [ 325.060047][ T7601] syz.0.861[7601] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.060145][ T7601] syz.0.861[7601] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 326.520183][ T1181] Bluetooth: hci5: Frame reassembly failed (-84) [ 327.407412][ T7630] fuse: Unknown parameter 'group_i00000000000000000000' [ 328.364680][ T7651] loop6: detected capacity change from 0 to 40427 [ 328.480251][ T7651] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x4 [ 328.488630][ T5553] Bluetooth: hci5: command 0x1003 tx timeout [ 328.495230][ T4186] Bluetooth: hci5: sending frame failed (-49) [ 328.520697][ T7651] F2FS-fs (loop6): invalid crc value [ 328.574078][ T7651] F2FS-fs (loop6): Found nat_bits in checkpoint [ 328.765438][ T7651] F2FS-fs (loop6): Start checkpoint disabled! [ 328.792957][ T7651] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 329.001921][ T4332] handle_bad_sector: 132 callbacks suppressed [ 329.001940][ T4332] attempt to access beyond end of device [ 329.001940][ T4332] loop6: rw=2049, want=40976, limit=40427 [ 330.566971][ T4296] Bluetooth: hci5: command 0x1001 tx timeout [ 330.576921][ T4186] Bluetooth: hci5: sending frame failed (-49) [ 332.611847][ T7731] loop6: detected capacity change from 0 to 128 [ 332.646489][ T5553] Bluetooth: hci5: command 0x1009 tx timeout [ 336.766367][ T4185] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 337.136399][ T4185] usb 3-1: Using ep0 maxpacket: 16 [ 337.457800][ T4185] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.476294][ T4185] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.486141][ T4185] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 337.506466][ T4185] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 337.526052][ T4185] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.546769][ T4185] usb 3-1: config 0 descriptor?? [ 337.748441][ T7849] netlink: 'syz.0.909': attribute type 27 has an invalid length. [ 337.893007][ T7851] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 338.198383][ T4185] appleir 0003:05AC:8241.0007: item fetching failed at offset 2/5 [ 338.228684][ T4185] appleir 0003:05AC:8241.0007: parse failed [ 338.264519][ T4185] appleir: probe of 0003:05AC:8241.0007 failed with error -22 [ 338.994862][ T4185] usb 3-1: USB disconnect, device number 5 [ 339.251563][ T7872] loop6: detected capacity change from 0 to 512 [ 339.300583][ T7872] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 339.355645][ T7872] EXT4-fs (loop6): 1 truncate cleaned up [ 339.371032][ T7872] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000200,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,data=journal,quota,,errors=continue. Quota mode: writeback. [ 339.420755][ T7849] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.428109][ T7849] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.106564][ T7849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.124545][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.916'. [ 340.174728][ T7849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.587418][ T7849] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.606351][ T7849] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.616978][ T7849] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.636872][ T7849] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.489348][ T4185] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 344.126393][ T4185] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.180199][ T4185] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 344.209874][ T4185] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.241387][ T4185] usb 1-1: config 0 descriptor?? [ 344.307518][ T4185] usb-storage 1-1:0.0: USB Mass Storage device detected [ 344.425986][ T4185] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 344.534447][ T4185] usb 1-1: USB disconnect, device number 9 [ 345.007313][ T7938] loop6: detected capacity change from 0 to 8192 [ 346.051047][ T7954] hub 6-0:1.0: USB hub found [ 346.059275][ T7954] hub 6-0:1.0: 1 port detected [ 346.193673][ T7955] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 351.082365][ T7997] loop6: detected capacity change from 0 to 512 [ 351.384750][ T7997] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 351.455300][ T7997] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 351.520079][ T7997] EXT4-fs error (device loop6): ext4_do_update_inode:5218: inode #2: comm syz.6.949: corrupted inode contents [ 351.556105][ T7997] EXT4-fs error (device loop6): ext4_dirty_inode:6054: inode #2: comm syz.6.949: mark_inode_dirty error [ 351.586893][ T7997] EXT4-fs error (device loop6): ext4_do_update_inode:5218: inode #2: comm syz.6.949: corrupted inode contents [ 351.605697][ T7997] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #2: comm syz.6.949: mark_inode_dirty error [ 353.122784][ T8033] syz.3.957 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 353.302030][ T8037] loop4: detected capacity change from 0 to 512 [ 354.925920][ T8037] EXT4-fs (loop4): Test dummy encryption mode enabled [ 355.896208][ T8037] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 356.279949][ T8037] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e01c, mo2=0102] [ 356.289182][ T8037] EXT4-fs (loop4): orphan cleanup on readonly fs [ 356.298157][ T8037] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.958: bg 0: block 361: padding at end of block bitmap is not set [ 356.332596][ T8037] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 356.348853][ T8037] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.958: attempt to clear invalid blocks 33619980 len 1 [ 356.364613][ T8037] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.958: invalid indirect mapped block 1811939328 (level 0) [ 356.380038][ T8037] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.958: invalid indirect mapped block 2185560079 (level 1) [ 356.394998][ T8037] EXT4-fs (loop4): 1 truncate cleaned up [ 356.400758][ T8037] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,noblock_validity,dioread_lock,test_dummy_encryption=v1,jqfmt=vfsv0,errors=continue. Quota mode: none. [ 357.217862][ T8047] device syzkaller0 entered promiscuous mode [ 359.966622][ T8080] netlink: 'syz.0.972': attribute type 8 has an invalid length. [ 362.667818][ T8101] loop4: detected capacity change from 0 to 16 [ 362.802965][ T8125] syz.2.986[8125] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 362.803068][ T8125] syz.2.986[8125] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 362.861349][ T8101] erofs: (device loop4): mounted with root inode @ nid 36. [ 363.609847][ T4277] Bluetooth: hci5: Frame reassembly failed (-84) [ 365.616580][ T5553] Bluetooth: hci5: command 0x1003 tx timeout [ 365.622879][ T4186] Bluetooth: hci5: sending frame failed (-49) [ 366.509526][ T4296] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 366.876419][ T4296] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.892434][ T4296] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 367.056573][ T4296] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 367.073302][ T4296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.088998][ T4296] usb 4-1: Product: syz [ 367.103473][ T4296] usb 4-1: Manufacturer: syz [ 367.108566][ T4296] usb 4-1: SerialNumber: syz [ 367.446498][ T4296] usb 4-1: 0:2 : does not exist [ 367.527929][ T4296] usb 4-1: USB disconnect, device number 10 [ 367.763840][ T5553] Bluetooth: hci5: command 0x1001 tx timeout [ 367.770381][ T4186] Bluetooth: hci5: sending frame failed (-49) [ 367.937329][ T7044] udevd[7044]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 368.395187][ T8177] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 368.746507][ T5553] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 369.046391][ T5553] usb 4-1: Using ep0 maxpacket: 16 [ 369.201970][ T5553] usb 4-1: config 0 has an invalid interface number: 236 but max is 1 [ 369.233670][ T5553] usb 4-1: config 0 has an invalid interface number: 129 but max is 1 [ 369.261457][ T5553] usb 4-1: config 0 has no interface number 0 [ 369.276319][ T5553] usb 4-1: config 0 has no interface number 1 [ 369.282610][ T5553] usb 4-1: config 0 interface 236 has no altsetting 0 [ 369.306129][ T5553] usb 4-1: config 0 interface 129 has no altsetting 0 [ 369.516428][ T5553] usb 4-1: New USB device found, idVendor=1ace, idProduct=e9b2, bcdDevice=5c.3d [ 369.530581][ T5553] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.547396][ T5553] usb 4-1: Product: syz [ 369.561797][ T5553] usb 4-1: Manufacturer: syz [ 369.576270][ T5553] usb 4-1: SerialNumber: syz [ 369.599470][ T5553] usb 4-1: config 0 descriptor?? [ 370.004750][ T4296] Bluetooth: hci5: command 0x1009 tx timeout [ 373.493255][ T5553] ir_usb 4-1:0.236: required endpoints missing [ 374.200026][ T5553] usb 4-1: selecting invalid altsetting 0 [ 374.235444][ T5553] usb 4-1: Found UVC 2.26 device syz (1ace:e9b2) [ 374.300651][ T5553] usb 4-1: No valid video chain found. [ 374.358252][ T5553] usb 4-1: USB disconnect, device number 11 [ 377.919601][ T4277] Bluetooth: hci5: Frame reassembly failed (-84) [ 378.536809][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.543221][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.526132][ T5553] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 379.926464][ T4248] Bluetooth: hci5: command 0x1003 tx timeout [ 379.937374][ T4186] Bluetooth: hci5: sending frame failed (-49) [ 380.197014][ T5553] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.306330][ T5553] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 380.315418][ T5553] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.338765][ T5553] usb 5-1: config 0 descriptor?? [ 382.179860][ T4248] Bluetooth: hci5: command 0x1001 tx timeout [ 382.196494][ T8302] Bluetooth: hci5: sending frame failed (-49) [ 382.246470][ T4295] Bluetooth: hci6: command 0x1003 tx timeout [ 382.253856][ T8302] Bluetooth: hci6: sending frame failed (-49) [ 382.850228][ T5553] usbhid 5-1:0.0: can't add hid device: -71 [ 382.857446][ T5553] usbhid: probe of 5-1:0.0 failed with error -71 [ 382.893174][ T5553] usb 5-1: USB disconnect, device number 10 [ 384.246357][ T4295] Bluetooth: hci5: command 0x1009 tx timeout [ 384.294838][ T8336] loop4: detected capacity change from 0 to 512 [ 384.326334][ T4295] Bluetooth: hci6: command 0x1001 tx timeout [ 384.332416][ T8302] Bluetooth: hci6: sending frame failed (-49) [ 384.398436][ T8336] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 384.436336][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 384.511112][ T26] audit: type=1804 audit(384.471:25): pid=8336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1046" name="/newroot/237/file2/bus" dev="loop4" ino=18 res=1 errno=0 [ 384.686338][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 385.026524][ T23] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 385.043456][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.059431][ T23] usb 3-1: Product: syz [ 385.069472][ T23] usb 3-1: Manufacturer: syz [ 385.084069][ T23] usb 3-1: SerialNumber: syz [ 385.100065][ T23] r8152-cfgselector 3-1: config 0 descriptor?? [ 385.368837][ T8349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1047'. [ 385.416518][ T23] r8152-cfgselector 3-1: Unknown version 0x0000 [ 385.707128][ T23] r8152-cfgselector 3-1: Unknown version 0x0000 [ 385.729596][ T23] r8152-cfgselector 3-1: USB disconnect, device number 6 [ 386.406548][ T4345] Bluetooth: hci6: command 0x1009 tx timeout [ 386.832501][ T8365] loop4: detected capacity change from 0 to 16 [ 386.996757][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1051'. [ 387.005736][ T8361] device bridge_slave_1 left promiscuous mode [ 387.012927][ T8361] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.030121][ T8365] erofs: (device loop4): mounted with root inode @ nid 36. [ 387.042333][ T8361] device bridge_slave_0 left promiscuous mode [ 387.048640][ T8361] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.781041][ T8388] loop6: detected capacity change from 0 to 512 [ 389.861455][ T8388] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 389.892883][ T8229] udevd[8229]: incorrect ext4 checksum on /dev/loop6 [ 391.254088][ T8390] netlink: 'syz.4.1060': attribute type 12 has an invalid length. [ 392.477016][ T8410] netlink: 'syz.3.1067': attribute type 12 has an invalid length. [ 392.637068][ T8412] loop4: detected capacity change from 0 to 1024 [ 392.844041][ T8412] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,noquota,delalloc,journal_dev=0x0000000000000009,nodioread_nolock,,errors=continue. Quota mode: none. [ 394.500124][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1071'. [ 394.509554][ T8435] device bridge_slave_1 left promiscuous mode [ 394.516173][ T8435] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.418533][ T8435] device bridge_slave_0 left promiscuous mode [ 395.424893][ T8435] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.604003][ T8476] hub 6-0:1.0: USB hub found [ 398.616662][ T8476] hub 6-0:1.0: 1 port detected [ 399.037273][ T8484] loop6: detected capacity change from 0 to 512 [ 399.262083][ T8484] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 401.502368][ T8500] loop6: detected capacity change from 0 to 512 [ 401.574819][ T8500] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 402.200092][ T8500] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.1091: inode has both inline data and extents flags [ 402.507072][ T8500] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1091: couldn't read orphan inode 15 (err -117) [ 402.569817][ T8500] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 403.113660][ T8513] EXT4-fs error (device loop6): ext4_lookup:1858: inode #15: comm syz.6.1091: inode has both inline data and extents flags [ 404.815599][ T8531] 9pnet: Insufficient options for proto=fd [ 409.163577][ T8560] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1106'. [ 409.262335][ T8562] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1106'. [ 409.448640][ T8564] overlayfs: failed to resolve './file1': -2 [ 409.504643][ T8571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1108'. [ 412.682726][ T8598] Illegal XDP return value 4291033368, expect packet loss! [ 415.537448][ T1106] Bluetooth: hci5: command 0x1003 tx timeout [ 415.543627][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 417.662713][ T4296] Bluetooth: hci5: command 0x1001 tx timeout [ 417.670544][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 420.237897][ T4296] Bluetooth: hci5: command 0x1009 tx timeout [ 420.712569][ T8658] loop6: detected capacity change from 0 to 512 [ 421.327982][ T8658] EXT4-fs (loop6): Ignoring removed nobh option [ 421.334673][ T8658] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 421.597775][ T8658] EXT4-fs (loop6): 1 truncate cleaned up [ 421.603546][ T8658] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 422.506294][ T4296] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 423.156999][ T8672] syz.4.1138[8672] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 423.157105][ T8672] syz.4.1138[8672] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 423.174810][ T8672] loop4: detected capacity change from 0 to 256 [ 423.236869][ T8672] exfat: Deprecated parameter 'utf8' [ 423.280610][ T8672] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 423.362396][ T4296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.374163][ T4296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.537038][ T4296] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 423.560024][ T4296] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 423.602947][ T4296] usb 4-1: Manufacturer: syz [ 423.740621][ T4296] usb 4-1: config 0 descriptor?? [ 425.766518][ T4296] uclogic 0003:256C:006D.0008: failed retrieving Huion firmware version: -71 [ 425.819888][ T4296] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 426.013294][ T8694] loop6: detected capacity change from 0 to 128 [ 426.065805][ T4296] uclogic: probe of 0003:256C:006D.0008 failed with error -71 [ 426.510257][ T4296] usb 4-1: USB disconnect, device number 12 [ 426.629048][ T26] audit: type=1800 audit(426.591:26): pid=8685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1141" name="file1" dev="loop6" ino=1048597 res=0 errno=0 [ 427.960632][ T4296] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 428.231472][ T4583] Bluetooth: hci5: Frame reassembly failed (-84) [ 428.296524][ T4296] usb 5-1: Using ep0 maxpacket: 32 [ 428.304188][ T4583] Bluetooth: hci5: Frame reassembly failed (-84) [ 428.437310][ T4296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.796277][ T4296] usb 5-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 428.940242][ T4296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.973731][ T4296] usb 5-1: config 0 descriptor?? [ 429.419641][ T4264] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 429.481492][ T4296] wacom 0003:056A:4004.0009: unknown main item tag 0x0 [ 429.499748][ T4296] wacom 0003:056A:4004.0009: unknown main item tag 0x0 [ 429.534013][ T4296] wacom 0003:056A:4004.0009: hidraw0: USB HID vb.27 Device [HID 056a:4004] on usb-dummy_hcd.4-1/input0 [ 429.683162][ T4264] usb 7-1: Using ep0 maxpacket: 32 [ 429.702234][ T4443] usb 5-1: USB disconnect, device number 11 [ 429.816532][ T4264] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.836284][ T4264] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.856369][ T4264] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 429.865425][ T4264] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.906498][ T4264] usb 7-1: config 0 descriptor?? [ 429.947505][ T4264] hub 7-1:0.0: USB hub found [ 430.166436][ T4264] hub 7-1:0.0: 1 port detected [ 430.256412][ T4296] Bluetooth: hci5: command 0x1003 tx timeout [ 430.262586][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 430.426403][ T4264] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 430.443608][ T4264] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 430.546361][ T4264] usbhid 7-1:0.0: can't add hid device: -71 [ 430.552455][ T4264] usbhid: probe of 7-1:0.0 failed with error -71 [ 430.610837][ T4264] usb 7-1: USB disconnect, device number 2 [ 431.500535][ T8757] loop6: detected capacity change from 0 to 16 [ 431.626864][ T8757] erofs: (device loop6): mounted with root inode @ nid 36. [ 431.678439][ T8757] input: syz0 as /devices/virtual/input/input12 [ 432.182771][ T8757] syz.6.1160 (8757) used greatest stack depth: 17864 bytes left [ 432.379998][ T4489] Bluetooth: hci5: command 0x1001 tx timeout [ 432.386116][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 435.258230][ T1106] Bluetooth: hci5: command 0x1009 tx timeout [ 436.366749][ T4264] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 436.798335][ T4264] usb 7-1: Using ep0 maxpacket: 32 [ 437.916373][ T1106] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 438.186348][ T1106] usb 4-1: Using ep0 maxpacket: 16 [ 438.255759][ T4264] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.266401][ T4264] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.282018][ T4264] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 438.295403][ T4264] usb 7-1: config 0 interface 0 has no altsetting 0 [ 438.302643][ T4264] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 438.312273][ T4264] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.339136][ T4264] usb 7-1: config 0 descriptor?? [ 438.346733][ T1106] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 438.360520][ T1106] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 438.370119][ T1106] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.398596][ T4264] usb 7-1: can't set config #0, error -71 [ 438.426058][ T4264] usb 7-1: USB disconnect, device number 3 [ 438.692084][ T1106] usb 4-1: config 0 descriptor?? [ 438.953780][ T1106] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 439.897254][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.906476][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.519312][ T4264] usb 4-1: USB disconnect, device number 13 [ 444.086465][ T4296] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 444.876503][ T8868] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1188'. [ 446.086590][ T4296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.132491][ T4296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.193634][ T4296] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 446.247079][ T4296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.293980][ T4296] usb 1-1: config 0 descriptor?? [ 447.046380][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 449.326649][ T4296] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #200: -71 [ 449.368006][ T4296] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 449.573875][ T4296] uclogic 0003:256C:006D.000A: failed probing pen v2 parameters: -71 [ 449.653758][ T4296] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 449.791444][ T4296] uclogic: probe of 0003:256C:006D.000A failed with error -71 [ 449.805374][ T4296] usb 1-1: USB disconnect, device number 10 [ 449.838454][ T8902] fuse: Bad value for 'fd' [ 451.477694][ T4296] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 452.033437][ T8925] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1203'. [ 452.396406][ T4296] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 452.441189][ T4296] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.496453][ T4296] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 452.555624][ T4296] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 452.616055][ T4296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.677758][ T4296] usb 1-1: config 0 descriptor?? [ 455.416605][ T4296] usb 1-1: can't set config #0, error -71 [ 455.446846][ T4296] usb 1-1: USB disconnect, device number 11 [ 456.366808][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1213'. [ 456.892455][ T4440] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 457.339371][ T4440] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.350626][ T4440] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.363098][ T4440] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 457.373321][ T4440] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.765281][ T4440] usb 7-1: config 0 descriptor?? [ 461.446451][ T4440] usbhid 7-1:0.0: can't add hid device: -71 [ 461.452875][ T4440] usbhid: probe of 7-1:0.0 failed with error -71 [ 461.490520][ T4440] usb 7-1: USB disconnect, device number 4 [ 467.195839][ T9035] binder: 9031:9035 ioctl c0306201 0 returned -14 [ 467.204841][ T9035] binder: 9031:9035 ioctl c0306201 0 returned -14 [ 468.000609][ T9036] 8021q: VLANs not supported on gre0 [ 468.979821][ T9044] block device autoloading is deprecated and will be removed. [ 471.526336][ T4345] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 472.572715][ T4345] usb 3-1: Using ep0 maxpacket: 8 [ 472.697278][ T4345] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 472.717987][ T4345] usb 3-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 472.752027][ T4345] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 472.787626][ T4345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.487535][ T4345] hub 3-1:32.0: bad descriptor, ignoring hub [ 473.493664][ T4345] hub: probe of 3-1:32.0 failed with error -5 [ 474.497491][ T4296] usb 3-1: USB disconnect, device number 7 [ 481.415256][ T9167] sch_fq: defrate 0 ignored. [ 482.556325][ T9189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1274'. [ 486.291031][ T9235] binder: 9234:9235 ioctl 4018620d 0 returned -22 [ 487.558896][ T4248] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 489.126611][ T4248] usb 7-1: device descriptor read/all, error -71 [ 494.278368][ T9292] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 501.675915][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.689402][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.566309][ T13] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 502.926487][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.957911][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.006444][ T13] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 503.015505][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.065185][ T13] usb 1-1: config 0 descriptor?? [ 503.285413][ T9365] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 503.519557][ T9365] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 504.191908][ T13] usbhid 1-1:0.0: can't add hid device: -71 [ 504.200859][ T13] usbhid: probe of 1-1:0.0 failed with error -71 [ 504.233966][ T13] usb 1-1: USB disconnect, device number 12 [ 509.520740][ T9437] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 511.206679][ T4345] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 511.486537][ T4345] usb 3-1: Using ep0 maxpacket: 16 [ 511.971369][ T4345] usb 3-1: config 0 has an invalid interface number: 236 but max is 1 [ 511.979802][ T4345] usb 3-1: config 0 has an invalid interface number: 129 but max is 1 [ 511.988406][ T4345] usb 3-1: config 0 has no interface number 0 [ 511.994507][ T4345] usb 3-1: config 0 has no interface number 1 [ 512.000951][ T4345] usb 3-1: config 0 interface 236 has no altsetting 0 [ 512.008008][ T4345] usb 3-1: config 0 interface 129 has no altsetting 0 [ 512.086948][ T4345] usb 3-1: string descriptor 0 read error: -71 [ 512.094110][ T4345] usb 3-1: New USB device found, idVendor=1ace, idProduct=e9b2, bcdDevice=5c.3d [ 512.186406][ T4345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.264376][ T4345] usb 3-1: config 0 descriptor?? [ 513.286365][ T4345] usb 3-1: can't set config #0, error -71 [ 513.299738][ T4345] usb 3-1: USB disconnect, device number 8 [ 516.005706][ T9488] overlayfs: failed to clone upperpath [ 518.672472][ T9512] device macsec1 entered promiscuous mode [ 518.678427][ T9512] device dummy0 entered promiscuous mode [ 519.559514][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1364'. [ 522.476370][ T4248] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 522.766373][ T4248] usb 3-1: Using ep0 maxpacket: 16 [ 522.927260][ T4248] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.122177][ T4248] usb 3-1: config 0 has no interfaces? [ 523.557170][ T4248] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 523.634440][ T4248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.818996][ T4248] usb 3-1: Product: syz [ 523.912884][ T4248] usb 3-1: Manufacturer: syz [ 524.105144][ T4248] usb 3-1: SerialNumber: syz [ 524.187010][ T4248] r8152-cfgselector 3-1: config 0 descriptor?? [ 524.466373][ T4248] r8152-cfgselector 3-1: Unknown version 0x0000 [ 524.946629][ T4248] r8152-cfgselector 3-1: USB disconnect, device number 9 [ 526.238537][ T9573] loop6: detected capacity change from 0 to 128 [ 526.397263][ T9573] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 526.684128][ T21] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 526.796343][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 526.846809][ T9581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.855385][ T9581] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.870621][ T6802] [ 526.873058][ T6802] ====================================================== [ 526.880079][ T6802] WARNING: possible circular locking dependency detected [ 526.887112][ T6802] syzkaller #0 Not tainted [ 526.891528][ T6802] ------------------------------------------------------ [ 526.898545][ T6802] syz-executor/6802 is trying to acquire lock: [ 526.900838][ T9581] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 526.904701][ T6802] ffff8880783e7138 ((wq_completion)loop6){+.+.}-{0:0}, at: flush_workqueue+0x126/0x1380 [ 526.923205][ T6802] [ 526.923205][ T6802] but task is already holding lock: [ 526.930575][ T6802] ffff8881475f5468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 526.933748][ T9581] caif:caif_disconnect_client(): nothing to disconnect [ 526.939377][ T6802] [ 526.939377][ T6802] which lock already depends on the new lock. [ 526.939377][ T6802] [ 526.939385][ T6802] [ 526.939385][ T6802] the existing dependency chain (in reverse order) is: [ 526.939391][ T6802] [ 526.939391][ T6802] -> #6 (&lo->lo_mutex){+.+.}-{3:3}: [ 526.973082][ T6802] __mutex_lock_common+0x1eb/0x2390 [ 526.978837][ T6802] mutex_lock_killable_nested+0x17/0x20 [ 526.984934][ T6802] lo_open+0x6a/0x100 [ 526.989446][ T6802] blkdev_get_whole+0x90/0x390 [ 526.994741][ T6802] blkdev_get_by_dev+0x2d0/0xa60 [ 527.000233][ T6802] blkdev_open+0x12d/0x2c0 [ 527.005175][ T6802] do_dentry_open+0x7ff/0xf80 [ 527.010401][ T6802] path_openat+0x2682/0x2f30 [ 527.015522][ T6802] do_filp_open+0x1b3/0x3e0 [ 527.020557][ T6802] do_sys_openat2+0x142/0x4a0 [ 527.025766][ T6802] __x64_sys_openat+0x135/0x160 [ 527.031152][ T6802] do_syscall_64+0x4c/0xa0 [ 527.036097][ T6802] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 527.042527][ T6802] [ 527.042527][ T6802] -> #5 (&disk->open_mutex){+.+.}-{3:3}: [ 527.050353][ T6802] __mutex_lock_common+0x1eb/0x2390 [ 527.056083][ T6802] mutex_lock_nested+0x17/0x20 [ 527.061374][ T6802] blkdev_get_by_dev+0x157/0xa60 [ 527.066842][ T6802] swsusp_check+0x9b/0x2a0 [ 527.071787][ T6802] software_resume+0xc6/0x3b0 [ 527.076994][ T6802] resume_store+0xe4/0x130 [ 527.081936][ T6802] kernfs_fop_write_iter+0x379/0x4c0 [ 527.087750][ T6802] vfs_write+0x712/0xd00 [ 527.092546][ T6802] ksys_write+0x14d/0x250 [ 527.097407][ T6802] do_syscall_64+0x4c/0xa0 [ 527.102355][ T6802] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 527.108779][ T6802] [ 527.108779][ T6802] -> #4 (system_transition_mutex/1){+.+.}-{3:3}: [ 527.117313][ T6802] __mutex_lock_common+0x1eb/0x2390 [ 527.123045][ T6802] mutex_lock_nested+0x17/0x20 [ 527.128363][ T6802] software_resume+0x7c/0x3b0 [ 527.133574][ T6802] resume_store+0xe4/0x130 [ 527.138521][ T6802] kernfs_fop_write_iter+0x379/0x4c0 [ 527.144341][ T6802] vfs_write+0x712/0xd00 [ 527.149112][ T6802] ksys_write+0x14d/0x250 [ 527.153978][ T6802] do_syscall_64+0x4c/0xa0 [ 527.158940][ T6802] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 527.165386][ T6802] [ 527.165386][ T6802] -> #3 (&of->mutex){+.+.}-{3:3}: [ 527.172612][ T6802] __mutex_lock_common+0x1eb/0x2390 [ 527.178343][ T6802] mutex_lock_nested+0x17/0x20 [ 527.183629][ T6802] kernfs_seq_start+0x51/0x3c0 [ 527.188925][ T6802] seq_read_iter+0x3c4/0xd50 [ 527.194069][ T6802] vfs_read+0x725/0xcf0 [ 527.198760][ T6802] ksys_read+0x14d/0x250 [ 527.203544][ T6802] do_syscall_64+0x4c/0xa0 [ 527.208489][ T6802] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 527.214913][ T6802] [ 527.214913][ T6802] -> #2 (&p->lock){+.+.}-{3:3}: [ 527.221963][ T6802] __mutex_lock_common+0x1eb/0x2390 [ 527.227708][ T6802] mutex_lock_nested+0x17/0x20 [ 527.233016][ T6802] seq_read_iter+0xad/0xd50 [ 527.238053][ T6802] do_iter_readv_writev+0x497/0x600 [ 527.243770][ T6802] do_iter_read+0x20b/0x7c0 [ 527.248801][ T6802] loop_process_work+0x18dc/0x2480 [ 527.254451][ T6802] process_one_work+0x863/0x1000 [ 527.259930][ T6802] worker_thread+0xaa8/0x12a0 [ 527.265140][ T6802] kthread+0x436/0x520 [ 527.269735][ T6802] ret_from_fork+0x1f/0x30 [ 527.274679][ T6802] [ 527.274679][ T6802] -> #1 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 527.283795][ T6802] process_one_work+0x7bf/0x1000 [ 527.289249][ T6802] worker_thread+0xaa8/0x12a0 [ 527.294441][ T6802] kthread+0x436/0x520 [ 527.299031][ T6802] ret_from_fork+0x1f/0x30 [ 527.303969][ T6802] [ 527.303969][ T6802] -> #0 ((wq_completion)loop6){+.+.}-{0:0}: [ 527.312044][ T6802] __lock_acquire+0x2c33/0x7c60 [ 527.317417][ T6802] lock_acquire+0x197/0x3f0 [ 527.322440][ T6802] flush_workqueue+0x142/0x1380 [ 527.327824][ T6802] drain_workqueue+0xcf/0x380 [ 527.333029][ T6802] destroy_workqueue+0x7b/0xb20 [ 527.338407][ T6802] __loop_clr_fd+0x234/0xb90 [ 527.343512][ T6802] blkdev_put+0x53f/0x7d0 [ 527.348358][ T6802] deactivate_locked_super+0x93/0xf0 [ 527.354169][ T6802] cleanup_mnt+0x418/0x4d0 [ 527.359105][ T6802] task_work_run+0x125/0x1a0 [ 527.364216][ T6802] exit_to_user_mode_loop+0x10f/0x130 [ 527.370109][ T6802] exit_to_user_mode_prepare+0xee/0x180 [ 527.376171][ T6802] syscall_exit_to_user_mode+0x16/0x40 [ 527.382151][ T6802] do_syscall_64+0x58/0xa0 [ 527.387082][ T6802] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 527.393489][ T6802] [ 527.393489][ T6802] other info that might help us debug this: [ 527.393489][ T6802] [ 527.403708][ T6802] Chain exists of: [ 527.403708][ T6802] (wq_completion)loop6 --> &disk->open_mutex --> &lo->lo_mutex [ 527.403708][ T6802] [ 527.417170][ T6802] Possible unsafe locking scenario: [ 527.417170][ T6802] [ 527.424615][ T6802] CPU0 CPU1 [ 527.429973][ T6802] ---- ---- [ 527.435330][ T6802] lock(&lo->lo_mutex); [ 527.439567][ T6802] lock(&disk->open_mutex); [ 527.446669][ T6802] lock(&lo->lo_mutex); [ 527.453423][ T6802] lock((wq_completion)loop6); [ 527.458270][ T6802] [ 527.458270][ T6802] *** DEADLOCK *** [ 527.458270][ T6802] [ 527.466402][ T6802] 2 locks held by syz-executor/6802: [ 527.471692][ T6802] #0: ffff88802004a118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 527.481087][ T6802] #1: ffff8881475f5468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 527.490303][ T6802] [ 527.490303][ T6802] stack backtrace: [ 527.496182][ T6802] CPU: 0 PID: 6802 Comm: syz-executor Not tainted syzkaller #0 [ 527.503714][ T6802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 527.513775][ T6802] Call Trace: [ 527.517064][ T6802] [ 527.520014][ T6802] dump_stack_lvl+0x168/0x230 [ 527.524693][ T6802] ? load_image+0x3b0/0x3b0 [ 527.529194][ T6802] ? show_regs_print_info+0x20/0x20 [ 527.534396][ T6802] ? print_circular_bug+0x12b/0x1a0 [ 527.539591][ T6802] check_noncircular+0x274/0x310 [ 527.544525][ T6802] ? add_chain_block+0x940/0x940 [ 527.549477][ T6802] ? lockdep_lock+0xdc/0x1e0 [ 527.554104][ T6802] ? mark_lock+0x94/0x320 [ 527.558434][ T6802] __lock_acquire+0x2c33/0x7c60 [ 527.563300][ T6802] ? verify_lock_unused+0x140/0x140 [ 527.568501][ T6802] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 527.574488][ T6802] ? verify_lock_unused+0x140/0x140 [ 527.579829][ T6802] ? verify_lock_unused+0x140/0x140 [ 527.585030][ T6802] ? verify_lock_unused+0x140/0x140 [ 527.590239][ T6802] ? memset+0x1e/0x40 [ 527.594240][ T6802] lock_acquire+0x197/0x3f0 [ 527.598764][ T6802] ? flush_workqueue+0x126/0x1380 [ 527.603789][ T6802] ? __mutex_trylock_common+0x14f/0x250 [ 527.609328][ T6802] ? read_lock_is_recursive+0x10/0x10 [ 527.614702][ T6802] ? __init_swait_queue_head+0xa5/0x150 [ 527.620267][ T6802] flush_workqueue+0x142/0x1380 [ 527.625115][ T6802] ? flush_workqueue+0x126/0x1380 [ 527.630146][ T6802] ? __lock_acquire+0x7c60/0x7c60 [ 527.635181][ T6802] ? lock_chain_count+0x20/0x20 [ 527.640085][ T6802] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 527.645451][ T6802] ? lockdep_hardirqs_off+0x70/0x100 [ 527.650736][ T6802] ? rcu_work_rcufn+0x110/0x110 [ 527.655579][ T6802] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 527.661211][ T6802] ? finish_wait+0xc0/0x1d0 [ 527.665717][ T6802] drain_workqueue+0xcf/0x380 [ 527.670392][ T6802] destroy_workqueue+0x7b/0xb20 [ 527.675242][ T6802] __loop_clr_fd+0x234/0xb90 [ 527.679840][ T6802] ? lo_release+0x172/0x1f0 [ 527.684339][ T6802] ? lo_open+0x100/0x100 [ 527.688582][ T6802] blkdev_put+0x53f/0x7d0 [ 527.692914][ T6802] deactivate_locked_super+0x93/0xf0 [ 527.698195][ T6802] cleanup_mnt+0x418/0x4d0 [ 527.702607][ T6802] ? lockdep_hardirqs_on+0x94/0x140 [ 527.707803][ T6802] task_work_run+0x125/0x1a0 [ 527.712395][ T6802] exit_to_user_mode_loop+0x10f/0x130 [ 527.717766][ T6802] exit_to_user_mode_prepare+0xee/0x180 [ 527.723309][ T6802] syscall_exit_to_user_mode+0x16/0x40 [ 527.728763][ T6802] do_syscall_64+0x58/0xa0 [ 527.733183][ T6802] ? clear_bhb_loop+0x30/0x80 [ 527.737854][ T6802] ? clear_bhb_loop+0x30/0x80 [ 527.742539][ T6802] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 527.748445][ T6802] RIP: 0033:0x7ff3ac10ea77 [ 527.752859][ T6802] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 527.772475][ T6802] RSP: 002b:00007fff894a20a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 527.780880][ T6802] RAX: 0000000000000000 RBX: 00007ff3ac191d7d RCX: 00007ff3ac10ea77 [ 527.788848][ T6802] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff894a2160 [ 527.796831][ T6802] RBP: 00007fff894a2160 R08: 0000000000000000 R09: 0000000000000000 [ 527.804802][ T6802] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff894a31f0 [ 527.812775][ T6802] R13: 00007ff3ac191d7d R14: 0000000000080836 R15: 00007fff894a3230 [ 527.820750][ T6802] [ 528.011197][ T9581] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 528.020200][ T9581] chnl_net:chnl_net_open(): state disconnected [ 528.026800][ T9581] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 528.046344][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.057411][ T21] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 528.066612][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.103469][ T21] usb 3-1: config 0 descriptor?? [ 528.907409][ T21] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 528.918420][ T21] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000B/input/input14 [ 529.001731][ T21] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 529.109922][ T2303] usb 3-1: USB disconnect, device number 10