last executing test programs: 7m2.156026728s ago: executing program 1 (id=326): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030040000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704640180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 7m0.412810647s ago: executing program 1 (id=331): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r4, &(0x7f0000000300)={{0x3, @netrom}, [@rose, @null, @bcast, @rose, @default, @netrom]}, &(0x7f0000000040)=0x48) bind$inet6(r3, 0x0, 0x0) listen(r3, 0x4) 6m59.084987214s ago: executing program 1 (id=336): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x4, &(0x7f0000000180)=0x7f, 0x4) 6m57.979658775s ago: executing program 1 (id=339): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x97, 0x2a9, &(0x7f0000000500)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$xfs(&(0x7f00000003c0), &(0x7f0000000000)='./file0\x00', 0x4008, &(0x7f0000000040)={[{@noalign}, {@pquota}]}, 0x1, 0x9825, &(0x7f000001c900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x801) setpriority(0x2, 0x0, 0x3) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x54}}, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) 6m55.030961323s ago: executing program 1 (id=347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) fsopen(0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x14) keyctl$chown(0x4, r5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(r1, &(0x7f0000000000)=@abs={0x28fc7d05f949ee4f, 0x0, 0x4e24}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0100000", @ANYRESDEC=r3, @ANYBLOB="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", @ANYRES32=r1, @ANYRES8=r4], 0x10e0}}, 0x24000040) 6m53.923232154s ago: executing program 1 (id=351): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) ioctl$FITHAW(r0, 0xc0045878) r1 = socket$alg(0x26, 0x5, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00'], 0xfe33) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x8) setfsgid(0xee01) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r4, 0x0, 0x0) socket(0x21, 0xe, 0x6da) 6m38.411899935s ago: executing program 32 (id=351): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) ioctl$FITHAW(r0, 0xc0045878) r1 = socket$alg(0x26, 0x5, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00'], 0xfe33) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x8) setfsgid(0xee01) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r4, 0x0, 0x0) socket(0x21, 0xe, 0x6da) 1m48.687852729s ago: executing program 3 (id=1550): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x5, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="0200ffff00", 0x5, 0x0, 0x0, 0x2}]) 1m47.895906787s ago: executing program 3 (id=1554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, 0x0, 0x0) listen(r3, 0x4) 1m44.910827006s ago: executing program 3 (id=1571): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = getpgid(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x146b1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) socket(0x28, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000480)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_abort}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x618, &(0x7f0000000640)="$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") write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300)="ca0e808bb35bda", 0x7) 1m43.818134547s ago: executing program 3 (id=1577): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) pivot_root(&(0x7f0000000480)='./file0/../file0\x00', &(0x7f0000000600)='./file0/file0/file0\x00') 1m43.664015038s ago: executing program 3 (id=1579): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x14) 1m43.353681501s ago: executing program 3 (id=1580): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) dup(0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000001200)=[{0x0}], 0x1) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r3, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) socket$nl_generic(0x10, 0x3, 0x10) 1m43.203948552s ago: executing program 33 (id=1580): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) dup(0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000001200)=[{0x0}], 0x1) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r3, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) socket$nl_generic(0x10, 0x3, 0x10) 18.117096948s ago: executing program 5 (id=1877): r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$can_j1939(0x1d, 0x2, 0x7) getsockname$netlink(r5, 0x0, &(0x7f0000001640)) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x40006c89, 0x80, 0xffffffff, 0x0, 0x0, r0}, &(0x7f0000000440)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x8aa, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x58}}, 0x0) 16.831788022s ago: executing program 5 (id=1879): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 15.722003584s ago: executing program 5 (id=1881): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 14.570460968s ago: executing program 5 (id=1883): signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x800) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x4048814, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x702, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x802}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 13.484017458s ago: executing program 5 (id=1888): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001480)={{0x12, 0x1, 0x310, 0x5, 0x8, 0x79, 0x10, 0xaf0, 0x6711, 0xe9bc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7d, 0x7, 0x18, 0x80, [{{0x9, 0x4, 0xee, 0x0, 0x0, 0xff, 0xfe, 0xff, 0xd4}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 10.326544751s ago: executing program 5 (id=1901): landlock_create_ruleset(&(0x7f00000000c0)={0x0, 0x1, 0x3}, 0x3e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000010) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f00000001c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 5.362999226s ago: executing program 0 (id=1918): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r0, 0x0) 5.16778732s ago: executing program 0 (id=1919): r0 = syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x212d40, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x1d, r9}, 0x10, &(0x7f0000000440)={&(0x7f0000000340)={0x7, 0x48c, 0x6, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x1, 0x1}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, "7081a3aa9f1b16e8"}}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r10, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 5.157111431s ago: executing program 4 (id=1920): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000f8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x6, [@type_tag={0x4, 0x0, 0x0, 0x12, 0x5}, @func={0x9, 0x0, 0x0, 0xc, 0x1}, @typedef={0x9}, @const={0xa, 0x0, 0x0, 0xa, 0x2}, @union={0xf, 0x0, 0x0, 0x5, 0x1, 0x1000}, @restrict={0xe, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x0]}}, &(0x7f00000002c0)=""/97, 0x66, 0x61, 0x1, 0xfffffffc, 0x10000, @value}, 0x28) clock_adjtime(0x0, &(0x7f00000004c0)={0x3d7, 0x5, 0x2, 0xfffffffffffffffa, 0x8, 0x200, 0x7fffffff, 0x7fffffffffffffff, 0xe, 0xc, 0xa, 0x2, 0x3ff, 0x3, 0x10000, 0x3, 0x8, 0x1, 0x0, 0x2, 0x4, 0x7, 0x80000000, 0x1, 0x6, 0x73c5}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000ff0100000500000000000000", @ANYRES32, @ANYBLOB="0408000000000000000000030000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000000000000000081"], 0x0, 0x34, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1a}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 4.982929974s ago: executing program 0 (id=1921): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x192) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4.435409844s ago: executing program 2 (id=1922): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) dup(r0) socketpair(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000940)={&(0x7f0000000840), &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1, 0x3, 0x8}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='./binderfs/binder-control\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[]) 4.230845419s ago: executing program 4 (id=1923): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)="050db32fe21b8ba3fc7269ca1822d6", 0xf}], 0x1}}], 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='htcp\x00', 0x5) shutdown(r0, 0x2) 4.032086294s ago: executing program 0 (id=1924): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10500}, &(0x7f0000000080), &(0x7f0000000040)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 4.031794834s ago: executing program 2 (id=1925): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = getpgid(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x146b1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) socket(0x28, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000480)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_abort}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x618, &(0x7f0000000640)="$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") write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300)="ca0e808bb35bda", 0x7) 3.865944086s ago: executing program 0 (id=1926): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x8) write$cgroup_int(r6, &(0x7f0000000040)=0x100000001, 0x12) write$binfmt_elf64(r6, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3, 0xc, 0x3, 0x8108, 0x2, 0x0, 0xfb89, 0x21, 0x40, 0x36b, 0x7, 0x7b63, 0x38, 0x2, 0x5, 0x3}, [{0x6, 0xa, 0x3, 0x1, 0x6, 0xd6, 0xfffffffffffffffe, 0x8}, {0x6474e551, 0x40, 0x2, 0x8, 0x1, 0x59faab25, 0x3, 0x2}], "6d87125ab711e8c167d6c4eee732e886abeca7498e45e4365b917b2408338bee4c1585ff69e3842f26b5eec6f72f31ec4187fa448fb9d6fdae632ba5daa8e79214963c9000da", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5f6) write$cgroup_devices(r6, &(0x7f0000000040)=ANY=[], 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0x7000000) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r7, &(0x7f0000000100)={0x5, 0x1, 0x3, 0x1, 0x4}, 0x4e) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r8, 0x408c5333, &(0x7f00000003c0)={0x5a1, 0x7f, 0x1, 'queue1\x00', 0xb}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r8, 0x40049366, &(0x7f0000000000)=0x1) 3.643653122s ago: executing program 4 (id=1927): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) close(0x3) 3.006753959s ago: executing program 2 (id=1928): syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x20, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_vhci(&(0x7f00000015c0)=ANY=[], 0x102) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000480), 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = mq_open(0x0, 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r4, &(0x7f000001d600)=""/102381, 0xec29, 0x20000004, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x7]}) 2.839931491s ago: executing program 4 (id=1929): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x3, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001500)=ANY=[], 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f0000000280)="822a0ab3ff010000000000000580a7b6070d63e286a5cefe", 0x18) 1.91113684s ago: executing program 6 (id=1930): prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x36, 0x0, 0x0) sendmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x801) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) io_setup(0x7d, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) io_destroy(0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="34ac0000", @ANYRES16=0x0, @ANYBLOB="010028bd7000f9dbdf2505000000200001800d0001007564703a73797a32000000000c0002800800030004"], 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x100) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0414"], 0x528}}, 0xc000) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r5, 0x5408, 0x0) ioctl$TIOCGPGRP(r2, 0x5437, 0x0) 1.893815151s ago: executing program 2 (id=1931): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 1.779335779s ago: executing program 4 (id=1932): r0 = syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x212d40, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x1d, r9}, 0x10, &(0x7f0000000440)={&(0x7f0000000340)={0x7, 0x48c, 0x6, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x1, 0x1}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, "7081a3aa9f1b16e8"}}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r10, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.760759741s ago: executing program 2 (id=1933): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000f8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x6, [@type_tag={0x4, 0x0, 0x0, 0x12, 0x5}, @func={0x9, 0x0, 0x0, 0xc, 0x1}, @typedef={0x9}, @const={0xa, 0x0, 0x0, 0xa, 0x2}, @union={0xf, 0x0, 0x0, 0x5, 0x1, 0x1000}, @restrict={0xe, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x0]}}, &(0x7f00000002c0)=""/97, 0x66, 0x61, 0x1, 0xfffffffc, 0x10000, @value}, 0x28) clock_adjtime(0x0, &(0x7f00000004c0)={0x3d7, 0x5, 0x2, 0xfffffffffffffffa, 0x8, 0x200, 0x7fffffff, 0x7fffffffffffffff, 0xe, 0xc, 0xa, 0x2, 0x3ff, 0x3, 0x10000, 0x3, 0x8, 0x1, 0x0, 0x2, 0x4, 0x7, 0x80000000, 0x1, 0x6, 0x73c5}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000ff0100000500000000000000", @ANYRES32, @ANYBLOB="0408000000000000000000030000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000000000000000081"], 0x0, 0x34, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1a}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 1.523792268s ago: executing program 6 (id=1934): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) 1.432010725s ago: executing program 6 (id=1935): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) mq_open(&(0x7f0000000000)='.\x00', 0x2, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x9, 0x5, 0x100000}]}, 0x10) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x8, 0x0, 0xf77}]}, 0x10) 1.392504257s ago: executing program 6 (id=1936): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 1.283719185s ago: executing program 0 (id=1937): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)="050db32fe21b8ba3fc7269ca1822d6", 0xf}], 0x1}}], 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='htcp\x00', 0x5) shutdown(r0, 0x2) 263.43045ms ago: executing program 2 (id=1938): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x0, @remote}}) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000b80)={'trans=rdma,', {'port', 0x3d, 0x4e22}}) mount(0x0, 0x0, &(0x7f0000000080)='pstore\x00', 0x1c011, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000380)=0x1, 0x4) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 228.836133ms ago: executing program 6 (id=1939): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x2000000000000032) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 212.193704ms ago: executing program 4 (id=1940): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x80, 0x7, 0x7, 0x8, {{0x5, 0x4, 0x1, 0x1, 0x14, 0x65, 0x0, 0xd, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100}}}}) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x0, 0x1000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24058000}, 0x0) 0s ago: executing program 6 (id=1941): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f000000b400)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000019c0)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x40, 0x0) kernel console output (not intermixed with test programs): tdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.467496][ T4030] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.469953][ T4030] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.480671][ T4032] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.484447][ T4032] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.486083][ T4108] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 50.486729][ T4032] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.493615][ T4032] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.523446][ T4026] device veth0_macvtap entered promiscuous mode [ 50.529443][ T4026] device veth1_macvtap entered promiscuous mode [ 50.617074][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.619811][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.627041][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.630038][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.633606][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.636407][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.639142][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.645156][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.649487][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.659686][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.662276][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.680267][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.683301][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.685907][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.688727][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.691284][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.719618][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.725134][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.728092][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.731260][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.738596][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.741488][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.744657][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.747565][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.753074][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.769718][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.772424][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.777722][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.780440][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.783579][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.793565][ T4026] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.795875][ T4026] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.798020][ T4026] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.800220][ T4026] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.844597][ T335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.846907][ T335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.853765][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.969839][ T335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.973547][ T335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.978760][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.021502][ T335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.024351][ T335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.027565][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.040610][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.049184][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.055928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.121284][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.127078][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.131440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.624180][ T4115] loop0: detected capacity change from 0 to 1024 [ 51.656233][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 51.659627][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 51.670963][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 51.806090][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 51.810414][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 51.908126][ T4115] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 51.912145][ T4115] EXT4-fs (loop0): orphan cleanup on readonly fs [ 51.917772][ T4115] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 51.922863][ T4115] EXT4-fs (loop0): Remounting filesystem read-only [ 51.924652][ T4115] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #3: comm syz.0.1: mark_inode_dirty error [ 51.928094][ T4115] EXT4-fs (loop0): Remounting filesystem read-only [ 51.929924][ T4115] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1: Invalid block bitmap block 3 in block_group 0 [ 51.943984][ T4115] EXT4-fs (loop0): Remounting filesystem read-only [ 51.945860][ T4115] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 51.948611][ T4115] EXT4-fs (loop0): Remounting filesystem read-only [ 51.950317][ T4115] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #3: comm syz.0.1: mark_inode_dirty error [ 51.954254][ T4115] EXT4-fs (loop0): Remounting filesystem read-only [ 51.956146][ T4115] Quota error (device loop0): write_blk: dquota write failed [ 51.958226][ T4115] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 1: comm syz.0.1: lblock 6 mapped to illegal pblock 1 (length 1) [ 51.965931][ T4115] EXT4-fs (loop0): Remounting filesystem read-only [ 51.967741][ T4115] Quota error (device loop0): write_blk: dquota write failed [ 51.969747][ T4115] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 51.972407][ T4115] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 48: comm syz.0.1: lblock 0 mapped to illegal pblock 48 (length 1) [ 51.977881][ T4115] EXT4-fs (loop0): Remounting filesystem read-only [ 51.979689][ T4115] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 51.982198][ T4115] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.1: Failed to acquire dquot type 0 [ 51.986427][ T4115] EXT4-fs (loop0): Remounting filesystem read-only [ 51.988721][ T4115] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 49: comm syz.0.1: lblock 1 mapped to illegal pblock 49 (length 1) [ 51.993213][ T4115] EXT4-fs (loop0): Remounting filesystem read-only [ 51.995010][ T4115] Quota error (device loop0): do_insert_tree: Can't read tree quota block 1 [ 51.997238][ T4115] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 51.999945][ T4115] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.1: Failed to acquire dquot type 0 [ 52.004851][ T4115] EXT4-fs (loop0): Remounting filesystem read-only [ 52.006682][ T4115] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 52.036036][ T4115] EXT4-fs (loop0): Remounting filesystem read-only [ 52.037839][ T4115] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #15: comm syz.0.1: mark_inode_dirty error [ 52.043216][ T4115] EXT4-fs (loop0): Remounting filesystem read-only [ 52.044928][ T4115] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 52.047571][ T4115] EXT4-fs (loop0): 1 orphan inode deleted [ 52.182315][ T4115] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000008,data_err=abort,minixdf,errors=remount-ro,abort,noblock_validity,barrier,journal_dev=0x0000000000000f35,. Quota mode: none. [ 52.209115][ T4116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.211366][ T4116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.225692][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.330789][ T4128] loop1: detected capacity change from 0 to 1024 [ 53.695178][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 53.697318][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 53.855287][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 53.857236][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 53.891751][ C0] sched: RT throttling activated [ 53.933073][ T25] Bluetooth: hci2: command 0x0419 tx timeout [ 54.048342][ T4128] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 54.727252][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.742211][ T25] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 54.752992][ T4140] udc-core: couldn't find an available UDC or it's busy [ 54.754952][ T4140] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.785070][ T4140] hid-generic 0000:0000:0000.0001: pid 4140 passed too short report [ 55.118736][ T4152] loop3: detected capacity change from 0 to 512 [ 55.269366][ T4152] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 56.073015][ T4159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 56.160617][ T4164] syz.4.22 uses obsolete (PF_INET,SOCK_PACKET) [ 56.194494][ T4170] loop2: detected capacity change from 0 to 128 [ 56.250798][ T4172] process 'syz.3.19' launched './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 56.520350][ T4179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.27'. [ 56.625222][ T4170] attempt to access beyond end of device [ 56.625222][ T4170] loop2: rw=2049, want=745, limit=128 [ 56.690920][ T4170] attempt to access beyond end of device [ 56.690920][ T4170] loop2: rw=524288, want=369, limit=128 [ 56.698307][ T4170] attempt to access beyond end of device [ 56.698307][ T4170] loop2: rw=0, want=153, limit=128 [ 56.701294][ T4170] attempt to access beyond end of device [ 56.701294][ T4170] loop2: rw=0, want=153, limit=128 [ 56.706538][ T4170] attempt to access beyond end of device [ 56.706538][ T4170] loop2: rw=0, want=153, limit=128 [ 56.713818][ T4170] attempt to access beyond end of device [ 56.713818][ T4170] loop2: rw=0, want=153, limit=128 [ 56.716782][ T4170] attempt to access beyond end of device [ 56.716782][ T4170] loop2: rw=0, want=153, limit=128 [ 56.731269][ T4170] attempt to access beyond end of device [ 56.731269][ T4170] loop2: rw=0, want=153, limit=128 [ 56.752377][ T4170] attempt to access beyond end of device [ 56.752377][ T4170] loop2: rw=0, want=153, limit=128 [ 56.755256][ T4170] attempt to access beyond end of device [ 56.755256][ T4170] loop2: rw=0, want=153, limit=128 [ 56.797598][ T4182] netlink: 28 bytes leftover after parsing attributes in process `syz.0.28'. [ 56.799934][ T4182] tipc: Started in network mode [ 56.801223][ T4182] tipc: Node identity 7, cluster identity 5 [ 56.821932][ T4182] tipc: Node number set to 7 [ 56.916543][ T4195] loop1: detected capacity change from 0 to 1024 [ 56.921980][ T4192] xt_CT: No such helper "pptp" [ 56.979589][ T4195] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 57.004877][ T4195] EXT4-fs error (device loop1): ext4_get_journal_inode:5160: inode #32: comm syz.1.32: iget: special inode unallocated [ 57.030218][ T4195] EXT4-fs (loop1): no journal found [ 57.031689][ T4195] EXT4-fs (loop1): can't get journal size [ 57.058311][ T4195] EXT4-fs error (device loop1): ext4_protect_reserved_inode:160: inode #32: comm syz.1.32: iget: special inode unallocated [ 57.068317][ T4195] EXT4-fs (loop1): failed to initialize system zone (-117) [ 57.070268][ T4195] EXT4-fs (loop1): mount failed [ 57.176197][ T4201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 57.178557][ T4201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.35'. [ 57.214866][ T4201] device gretap0 entered promiscuous mode [ 57.228263][ T4192] loop1: detected capacity change from 0 to 2048 [ 57.542207][ T4218] Cannot find set identified by id 0 to match [ 57.621291][ T26] audit: type=1326 audit(57.590:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4223 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fda6a68 code=0x7ffc0000 [ 57.634758][ T26] audit: type=1326 audit(57.600:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4223 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffff9fda6a68 code=0x7ffc0000 [ 57.641133][ T26] audit: type=1326 audit(57.600:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4223 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fda6a68 code=0x7ffc0000 [ 59.128727][ T4264] netlink: 60 bytes leftover after parsing attributes in process `syz.3.61'. [ 59.323583][ T4273] loop4: detected capacity change from 0 to 1024 [ 59.373979][ T4273] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 59.409411][ T4273] Quota error (device loop4): find_tree_dqentry: Getting block too big (64 >= 6) [ 59.416616][ T4273] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 59.422123][ T4273] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.66: Failed to acquire dquot type 0 [ 59.439972][ T4273] EXT4-fs error (device loop4): mb_free_blocks:1865: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 59.459069][ T4273] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #13: comm syz.4.66: corrupted inode contents [ 59.513632][ T4273] EXT4-fs error (device loop4): ext4_dirty_inode:6010: inode #13: comm syz.4.66: mark_inode_dirty error [ 59.522221][ T4273] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #13: comm syz.4.66: corrupted inode contents [ 59.525930][ T4273] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #13: comm syz.4.66: mark_inode_dirty error [ 59.541975][ T4273] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #13: comm syz.4.66: corrupted inode contents [ 59.547158][ T4273] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 59.943520][ T4282] loop1: detected capacity change from 0 to 1024 [ 60.256524][ T4273] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #13: comm syz.4.66: corrupted inode contents [ 60.307666][ T4273] EXT4-fs error (device loop4): ext4_truncate:4272: inode #13: comm syz.4.66: mark_inode_dirty error [ 60.340319][ T4273] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 60.348823][ T4282] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 60.351683][ T4282] EXT4-fs (loop1): orphan cleanup on readonly fs [ 60.359162][ T4273] EXT4-fs (loop4): 1 truncate cleaned up [ 60.360839][ T4273] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,dioread_nolock,nojournal_checksum,noblock_validity,stripe=0x0000000000000004,nodelalloc,i_version,,errors=continue. Quota mode: writeback. [ 60.372157][ T4282] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 60.381349][ T4285] loop0: detected capacity change from 0 to 1024 [ 60.389012][ T4282] EXT4-fs (loop1): Remounting filesystem read-only [ 60.390650][ T4282] EXT4-fs error (device loop1): ext4_dirty_inode:6010: inode #3: comm syz.1.67: mark_inode_dirty error [ 60.394806][ T4282] EXT4-fs (loop1): Remounting filesystem read-only [ 60.396679][ T4282] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.67: Invalid block bitmap block 3 in block_group 0 [ 60.400587][ T4282] EXT4-fs (loop1): Remounting filesystem read-only [ 60.402475][ T4282] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 60.406225][ T4282] EXT4-fs (loop1): Remounting filesystem read-only [ 60.408011][ T4282] EXT4-fs error (device loop1): ext4_dirty_inode:6010: inode #3: comm syz.1.67: mark_inode_dirty error [ 60.411466][ T4282] EXT4-fs (loop1): Remounting filesystem read-only [ 60.413423][ T4282] Quota error (device loop1): write_blk: dquota write failed [ 60.415485][ T4282] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #3: block 1: comm syz.1.67: lblock 6 mapped to illegal pblock 1 (length 1) [ 60.419627][ T4282] EXT4-fs (loop1): Remounting filesystem read-only [ 60.421280][ T4282] Quota error (device loop1): write_blk: dquota write failed [ 60.423442][ T4282] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 60.425673][ T4282] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #3: block 48: comm syz.1.67: lblock 0 mapped to illegal pblock 48 (length 1) [ 60.440745][ T4282] EXT4-fs (loop1): Remounting filesystem read-only [ 60.442694][ T4282] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 60.444946][ T4282] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.67: Failed to acquire dquot type 0 [ 60.448382][ T4282] EXT4-fs (loop1): Remounting filesystem read-only [ 60.450136][ T4282] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #3: block 49: comm syz.1.67: lblock 1 mapped to illegal pblock 49 (length 1) [ 60.454793][ T4282] EXT4-fs (loop1): Remounting filesystem read-only [ 60.456554][ T4282] Quota error (device loop1): do_insert_tree: Can't read tree quota block 1 [ 60.458757][ T4282] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.67: Failed to acquire dquot type 0 [ 60.463191][ T4282] EXT4-fs (loop1): Remounting filesystem read-only [ 60.464996][ T4282] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 60.468166][ T4282] EXT4-fs (loop1): Remounting filesystem read-only [ 60.469958][ T4282] EXT4-fs error (device loop1): ext4_evict_inode:282: inode #15: comm syz.1.67: mark_inode_dirty error [ 60.473815][ T4282] EXT4-fs (loop1): Remounting filesystem read-only [ 60.475690][ T4282] EXT4-fs warning (device loop1): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 60.478510][ T4282] EXT4-fs (loop1): 1 orphan inode deleted [ 60.488708][ T4285] EXT4-fs (loop0): inline encryption not supported [ 60.497640][ T4282] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000008,data_err=abort,minixdf,errors=remount-ro,abort,noblock_validity,barrier,journal_dev=0x0000000000000f35,. Quota mode: none. [ 60.557961][ T4285] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,acl,debug_want_extra_isize=0x0000000000000008,inlinecrypt,jqfmt=vfsold,nodiscard,journal_dev=0x0000000000000002,acl,resgid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 60.663554][ T4292] loop3: detected capacity change from 0 to 512 [ 62.919285][ T4296] device pim6reg1 entered promiscuous mode [ 62.939137][ T4292] ======================================================= [ 62.939137][ T4292] WARNING: The mand mount option has been deprecated and [ 62.939137][ T4292] and is ignored by this kernel. Remove the mand [ 62.939137][ T4292] option from the mount to silence this warning. [ 62.939137][ T4292] ======================================================= [ 63.271269][ T4292] EXT4-fs (loop3): orphan cleanup on readonly fs [ 63.291158][ T4292] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.70: bg 0: block 248: padding at end of block bitmap is not set [ 63.301909][ T4292] __quota_error: 1 callbacks suppressed [ 63.301950][ T4292] Quota error (device loop3): write_blk: dquota write failed [ 63.305852][ T4292] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 63.308792][ T4292] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.70: Failed to acquire dquot type 1 [ 63.338371][ T4292] EXT4-fs (loop3): 1 truncate cleaned up [ 63.347530][ T4292] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 64.325562][ T4326] mmap: syz.0.79 (4326) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 64.536690][ T4331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.83'. [ 64.549067][ T4331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.83'. [ 65.572803][ T4346] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 65.578106][ T4348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.88'. [ 65.580633][ T4348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.88'. [ 65.617858][ T4354] netlink: 20 bytes leftover after parsing attributes in process `syz.4.85'. [ 65.624686][ T4354] udc-core: couldn't find an available UDC or it's busy [ 65.626673][ T4354] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 66.469804][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 66.505617][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.507651][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.529062][ T4386] device bridge_slave_0 left promiscuous mode [ 66.539233][ T4386] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.607582][ T4386] device bridge_slave_1 left promiscuous mode [ 66.609403][ T4386] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.682778][ T4386] bond0: (slave bond_slave_0): Releasing backup interface [ 66.730194][ T4386] bond0: (slave bond_slave_1): Releasing backup interface [ 66.819279][ T4386] team0: Port device team_slave_0 removed [ 66.843530][ T4399] loop3: detected capacity change from 0 to 128 [ 66.853051][ T4386] team0: Port device team_slave_1 removed [ 66.855294][ T4386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.868748][ T4386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.889055][ T4386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.897673][ T4386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.340777][ T4116] handle_bad_sector: 1636 callbacks suppressed [ 67.340792][ T4116] attempt to access beyond end of device [ 67.340792][ T4116] loop3: rw=1, want=945, limit=128 [ 68.428218][ T4402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.113'. [ 68.435422][ T4402] device bridge_slave_1 left promiscuous mode [ 68.438357][ T4402] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.516138][ T4402] device bridge_slave_0 left promiscuous mode [ 68.518098][ T4402] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.798575][ T4435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.124'. [ 69.129319][ T26] audit: type=1326 audit(129.099:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4446 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa7a5a68 code=0x7ffc0000 [ 69.157431][ T26] audit: type=1326 audit(129.129:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4446 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=273 compat=0 ip=0xffffaa7a5a68 code=0x7ffc0000 [ 69.163730][ T26] audit: type=1326 audit(129.139:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4446 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa7a5a68 code=0x7ffc0000 [ 69.344825][ T4455] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 69.346829][ T4455] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 69.368615][ T4455] vhci_hcd vhci_hcd.0: Device attached [ 69.422837][ T4456] vhci_hcd: connection closed [ 69.454168][ T153] vhci_hcd: stop threads [ 69.457208][ T153] vhci_hcd: release socket [ 69.458462][ T153] vhci_hcd: disconnect device [ 69.576014][ T4468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'. [ 69.615279][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.617255][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.747844][ T26] audit: type=1326 audit(129.719:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4478 comm="syz.0.143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fda6a68 code=0x7ffc0000 [ 69.757632][ T26] audit: type=1326 audit(129.719:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4478 comm="syz.0.143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=97 compat=0 ip=0xffff9fda6a68 code=0x7ffc0000 [ 69.793987][ T26] audit: type=1326 audit(129.719:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4478 comm="syz.0.143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fda6a68 code=0x7ffc0000 [ 69.871119][ T4491] loop4: detected capacity change from 0 to 512 [ 70.016217][ T4499] loop2: detected capacity change from 0 to 1024 [ 70.063030][ T4491] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 70.066979][ T4491] EXT4-fs (loop4): Unrecognized mount option "seclabel" or missing value [ 70.116912][ T4499] EXT4-fs (loop2): Ignoring removed nobh option [ 70.118528][ T4499] EXT4-fs (loop2): Ignoring removed bh option [ 70.120105][ T4499] EXT4-fs (loop2): Unrecognized mount option "seclabel" or missing value [ 70.428034][ T4509] loop4: detected capacity change from 0 to 512 [ 70.438411][ T4509] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 70.456449][ T4509] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 70.509295][ T4509] EXT4-fs (loop4): 1 truncate cleaned up [ 70.511037][ T4509] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 71.668864][ T4530] loop1: detected capacity change from 0 to 512 [ 71.680110][ T26] audit: type=1326 audit(143.642:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4529 comm="syz.4.162" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa7a5a68 code=0x0 [ 71.727303][ T4530] EXT4-fs (loop1): orphan cleanup on readonly fs [ 71.737834][ T4530] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.161: bg 0: block 248: padding at end of block bitmap is not set [ 71.749585][ T4530] Quota error (device loop1): write_blk: dquota write failed [ 71.755000][ T4530] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 71.766735][ T4530] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.161: Failed to acquire dquot type 1 [ 71.797958][ T4530] EXT4-fs (loop1): 1 truncate cleaned up [ 71.823748][ T4530] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.628293][ T4567] loop3: detected capacity change from 0 to 256 [ 72.664638][ T26] audit: type=1326 audit(156.636:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4570 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa7a5a68 code=0x7ffc0000 [ 73.810714][ T4590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.188'. [ 74.047562][ T4593] netlink: 'syz.4.189': attribute type 13 has an invalid length. [ 74.053160][ T4593] gretap0: refused to change device tx_queue_len [ 74.055220][ T4593] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 74.664114][ T4600] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.734038][ T1960] cfg80211: failed to load regulatory.db [ 74.805141][ T4600] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.883622][ T4609] loop0: detected capacity change from 0 to 2048 [ 74.955510][ T4609] loop0: p1 < > p2 p3 < > p4 < p5 > [ 74.957170][ T4609] loop0: partition table partially beyond EOD, truncated [ 74.962708][ T4609] loop0: p1 start 3405774849 is beyond EOD, truncated [ 74.964547][ T4609] loop0: p2 size 458752 extends beyond EOD, truncated [ 75.006551][ T4609] loop0: p3 start 4284289 is beyond EOD, truncated [ 75.022469][ T4600] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.038685][ T4609] loop0: p5 size 458752 extends beyond EOD, truncated [ 75.149846][ T4600] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.254932][ T4014] udevd[4014]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 75.280844][ T4516] udevd[4516]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 75.311372][ T4519] udevd[4519]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 75.424063][ T4519] udevd[4519]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 75.465849][ T4014] udevd[4014]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 75.470585][ T4516] udevd[4516]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 75.485761][ T4600] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.521366][ T4600] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.541230][ T4600] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.570654][ T4600] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.307407][ T4647] loop1: detected capacity change from 0 to 512 [ 76.485699][ T4647] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ee01c, mo2=0002] [ 76.488223][ T4647] System zones: 1-12 [ 76.489983][ T4647] EXT4-fs (loop1): orphan cleanup on readonly fs [ 76.512143][ T4647] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.210: bg 0: block 328: padding at end of block bitmap is not set [ 76.535827][ T4647] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 76.545522][ T4647] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.210: invalid indirect mapped block 65280 (level 0) [ 76.553106][ T4647] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.210: attempt to clear invalid blocks 33619980 len 1 [ 76.581926][ T4647] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.210: invalid indirect mapped block 1819239214 (level 0) [ 76.594605][ T4654] udc-core: couldn't find an available UDC or it's busy [ 76.596639][ T4654] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 76.621926][ T4647] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.210: invalid indirect mapped block 1819239214 (level 1) [ 76.672090][ T4647] EXT4-fs (loop1): 1 orphan inode deleted [ 76.673668][ T4647] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000200,quota,,errors=continue. Quota mode: writeback. [ 76.908116][ T4664] loop1: detected capacity change from 0 to 8 [ 77.008366][ T4664] SQUASHFS error: Unable to read inode 0xa7 [ 77.874004][ T4677] loop1: detected capacity change from 0 to 128 [ 78.002862][ T4662] loop4: detected capacity change from 0 to 32768 [ 78.002953][ T4677] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 78.036282][ T4677] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.099296][ T4662] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 78.115812][ T4662] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 78.199522][ T4662] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 78.225444][ T4072] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 78.227604][ T4072] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 78.352512][ T4072] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 124ms [ 78.355088][ T4072] gfs2: fsid=syz:syz.0: jid=0: Done [ 78.357239][ T4662] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 78.529946][ T4686] bridge0: port 3(ipvlan0) entered blocking state [ 78.533408][ T4686] bridge0: port 3(ipvlan0) entered disabled state [ 78.853037][ T4694] device hsr_slave_0 left promiscuous mode [ 79.508730][ T4694] device hsr_slave_1 left promiscuous mode [ 79.676950][ T4703] loop1: detected capacity change from 0 to 256 [ 79.900828][ T4709] udc-core: couldn't find an available UDC or it's busy [ 79.911277][ T4709] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 80.094757][ T4712] loop0: detected capacity change from 0 to 1024 [ 80.255170][ T4718] loop4: detected capacity change from 0 to 128 [ 80.473949][ T4718] FAT-fs (loop4): Unrecognized mount option "id_resolver" or missing value [ 80.943435][ T4718] sch_fq: defrate 0 ignored. [ 80.988931][ T4712] EXT4-fs (loop0): Test dummy encryption mode enabled [ 80.990821][ T4712] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 80.993237][ T4712] EXT4-fs (loop0): Ignoring removed orlov option [ 80.999944][ T4712] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,dioread_lock,mblk_io_submit,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 81.045039][ T4726] udc-core: couldn't find an available UDC or it's busy [ 81.046993][ T4726] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 81.090825][ T4730] loop4: detected capacity change from 0 to 64 [ 81.179571][ T4732] loop0: detected capacity change from 0 to 164 [ 82.939321][ T4732] attempt to access beyond end of device [ 82.939321][ T4732] loop0: rw=524288, want=263332, limit=164 [ 82.958934][ T4740] udc-core: couldn't find an available UDC or it's busy [ 82.960694][ T4740] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 83.011897][ T4732] attempt to access beyond end of device [ 83.011897][ T4732] loop0: rw=0, want=263332, limit=164 [ 83.506247][ T4758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.252'. [ 83.884927][ T4765] udc-core: couldn't find an available UDC or it's busy [ 83.886657][ T4765] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 83.886667][ T4764] loop0: detected capacity change from 0 to 1024 [ 84.409013][ T4767] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 84.487991][ T4767] trusted_key: encrypted_key: key user:syz not found [ 84.676683][ T4764] EXT4-fs (loop0): Test dummy encryption mode enabled [ 84.680256][ T4764] EXT4-fs (loop0): Ignoring removed orlov option [ 84.706338][ T4764] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 84.775644][ T153] Bluetooth: (null): Invalid header checksum [ 84.777611][ T153] Bluetooth: (null): Invalid header checksum [ 85.028794][ T4769] loop4: detected capacity change from 0 to 32768 [ 85.042638][ T4764] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 85.203201][ T4764] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 85.414930][ T4788] ptrace attach of "./syz-executor exec"[4030] was attempted by "./syz-executor exec"[4788] [ 86.105548][ T4791] device batadv_slave_1 entered promiscuous mode [ 86.118304][ T4790] device batadv_slave_1 left promiscuous mode [ 86.558392][ T4780] loop2: detected capacity change from 0 to 32768 [ 86.657363][ T4780] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.258 (4780) [ 86.768232][ T4780] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 86.771046][ T4780] BTRFS info (device loop2): metadata ratio 2 [ 86.778167][ T4780] BTRFS info (device loop2): allowing degraded mounts [ 86.779839][ T4780] BTRFS info (device loop2): force zlib compression, level 3 [ 86.781843][ T4780] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 86.803819][ T4780] BTRFS info (device loop2): use zstd compression, level 3 [ 86.805833][ T4780] BTRFS info (device loop2): force clearing of disk cache [ 86.826385][ T4780] BTRFS info (device loop2): allowing degraded mounts [ 86.832067][ T4780] BTRFS info (device loop2): max_inline at 0 [ 86.833647][ T4780] BTRFS info (device loop2): using free space tree [ 86.835280][ T4780] BTRFS info (device loop2): has skinny extents [ 86.999124][ T4815] udc-core: couldn't find an available UDC or it's busy [ 87.000996][ T4815] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 87.120638][ T4780] BTRFS info (device loop2): enabling ssd optimizations [ 87.125509][ T4780] BTRFS info (device loop2): clearing free space tree [ 87.127654][ T4780] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 87.130374][ T4780] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 87.151010][ T4797] loop0: detected capacity change from 0 to 32768 [ 87.223514][ T4780] BTRFS info (device loop2): creating free space tree [ 87.226521][ T4780] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 87.230357][ T4797] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.263 (4797) [ 87.246402][ T4780] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 87.372805][ T25] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 87.375265][ T25] Bluetooth: hci2: Injecting HCI hardware error event [ 87.378113][ T4031] Bluetooth: hci2: hardware error 0x00 [ 87.623581][ T4797] loop0: detected capacity change from 0 to 256 [ 87.712572][ T4797] exfat: Deprecated parameter 'namecase' [ 87.714073][ T4797] exfat: Deprecated parameter 'namecase' [ 87.728167][ T4797] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 87.782038][ T4802] loop4: detected capacity change from 0 to 32768 [ 87.981777][ T4802] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.265 (4802) [ 88.004738][ T4838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.269'. [ 88.702916][ T4835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.267'. [ 88.713641][ T4802] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 88.715992][ T4802] BTRFS info (device loop4): turning on async discard [ 88.717759][ T4802] BTRFS info (device loop4): enabling disk space caching [ 88.719557][ T4802] BTRFS info (device loop4): turning off barriers [ 88.721197][ T4802] BTRFS info (device loop4): turning on flush-on-commit [ 88.761917][ T4802] BTRFS info (device loop4): doing ref verification [ 88.763936][ T4802] BTRFS info (device loop4): force clearing of disk cache [ 88.765741][ T4802] BTRFS info (device loop4): enabling ssd optimizations [ 88.767510][ T4802] BTRFS info (device loop4): max_inline at 2685 [ 88.769060][ T4802] BTRFS info (device loop4): disk space caching is enabled [ 88.770924][ T4802] BTRFS info (device loop4): has skinny extents [ 88.836579][ T4847] loop3: detected capacity change from 0 to 256 [ 88.932525][ T4847] exfat: Bad value for 'uid' [ 89.545288][ T4802] BTRFS info (device loop4): clearing free space tree [ 89.547337][ T4802] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 89.549992][ T4802] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 89.688830][ T4874] loop0: detected capacity change from 0 to 4096 [ 89.782282][ T4874] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 89.921805][ T4887] udc-core: couldn't find an available UDC or it's busy [ 89.923901][ T4887] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 90.109683][ T4878] loop2: detected capacity change from 0 to 32768 [ 90.144892][ T4895] loop1: detected capacity change from 0 to 256 [ 90.197099][ T4895] FAT-fs (loop1): Directory bread(block 64) failed [ 90.200384][ T4895] FAT-fs (loop1): Directory bread(block 65) failed [ 90.252194][ T4895] FAT-fs (loop1): Directory bread(block 66) failed [ 90.254111][ T4895] FAT-fs (loop1): Directory bread(block 67) failed [ 90.255808][ T4895] FAT-fs (loop1): Directory bread(block 68) failed [ 90.257596][ T4895] FAT-fs (loop1): Directory bread(block 69) failed [ 90.259283][ T4895] FAT-fs (loop1): Directory bread(block 70) failed [ 90.261000][ T4895] FAT-fs (loop1): Directory bread(block 71) failed [ 90.280449][ T4895] FAT-fs (loop1): Directory bread(block 72) failed [ 90.284358][ T4895] FAT-fs (loop1): Directory bread(block 73) failed [ 92.043431][ T4910] loop2: detected capacity change from 0 to 256 [ 92.082798][ T4910] exfat: Bad value for 'uid' [ 92.315796][ T4923] Zero length message leads to an empty skb [ 95.915367][ T4987] netlink: 16 bytes leftover after parsing attributes in process `syz.4.299'. [ 96.176800][ T4988] loop4: detected capacity change from 0 to 16 [ 96.305010][ T4990] loop2: detected capacity change from 0 to 64 [ 97.127725][ T4988] erofs: (device loop4): mounted with root inode @ nid 36. [ 97.159246][ T4986] netlink: 132 bytes leftover after parsing attributes in process `syz.4.299'. [ 97.187522][ T4987] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 99.898431][ T5047] loop4: detected capacity change from 0 to 40427 [ 99.949136][ T5047] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 99.951549][ T5047] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 100.280556][ T5047] F2FS-fs (loop4): Found nat_bits in checkpoint [ 100.897301][ T5047] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 100.899353][ T5047] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 100.982265][ T5047] attempt to access beyond end of device [ 100.982265][ T5047] loop4: rw=10241, want=45104, limit=40427 [ 101.009402][ T5047] attempt to access beyond end of device [ 101.009402][ T5047] loop4: rw=2049, want=77952, limit=40427 [ 101.015686][ T5047] attempt to access beyond end of device [ 101.015686][ T5047] loop4: rw=2049, want=45104, limit=40427 [ 103.329378][ T5065] loop3: detected capacity change from 0 to 2048 [ 103.357776][ T5053] loop2: detected capacity change from 0 to 32768 [ 103.420746][ T5053] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.313 (5053) [ 103.475734][ T5053] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 103.478087][ T5053] BTRFS info (device loop2): doing ref verification [ 103.480154][ T5053] BTRFS info (device loop2): turning off barriers [ 103.500971][ T5053] BTRFS info (device loop2): enabling ssd optimizations [ 103.511405][ T5053] BTRFS info (device loop2): using spread ssd allocation scheme [ 103.516307][ T5065] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.522801][ T5053] BTRFS info (device loop2): setting nodatasum [ 103.526937][ T5053] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 103.529288][ T5053] BTRFS info (device loop2): force lzo compression, level 0 [ 103.531189][ T5053] BTRFS info (device loop2): turning on sync discard [ 103.610632][ T5053] BTRFS info (device loop2): using free space tree [ 103.612365][ T5053] BTRFS info (device loop2): has skinny extents [ 104.093427][ T5093] loop1: detected capacity change from 0 to 2048 [ 104.126325][ T5095] udc-core: couldn't find an available UDC or it's busy [ 104.128196][ T5095] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 105.033525][ T5093] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 105.582833][ T5110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.321'. [ 105.763606][ T5110] loop0: detected capacity change from 0 to 16 [ 105.871052][ T5108] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.110242][ T5110] erofs: (device loop0): mounted with root inode @ nid 36. [ 106.138257][ T5109] netlink: 132 bytes leftover after parsing attributes in process `syz.0.321'. [ 106.228502][ T5115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'. [ 108.420562][ T5145] netlink: zone id is out of range [ 108.422487][ T5145] netlink: set zone limit has 4 unknown bytes [ 109.861124][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 109.865052][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.867160][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.464589][ T5159] loop1: detected capacity change from 0 to 256 [ 110.851415][ T5163] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 110.855708][ T5163] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 110.945265][ T5163] device hsr_slave_0 left promiscuous mode [ 111.122036][ T5163] device hsr_slave_1 left promiscuous mode [ 112.067302][ T5156] loop2: detected capacity change from 0 to 40427 [ 112.071364][ T5161] loop0: detected capacity change from 0 to 32768 [ 112.130812][ T5161] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 112.161153][ T5161] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 112.177101][ T5156] F2FS-fs (loop2): invalid crc value [ 112.198945][ T5161] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 112.206144][ T5156] F2FS-fs (loop2): Found nat_bits in checkpoint [ 112.210948][ T3605] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 112.213210][ T3605] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 112.298146][ T5156] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 112.298216][ T3605] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 85ms [ 112.304066][ T3605] gfs2: fsid=syz:syz.0: jid=0: Done [ 112.305446][ T5161] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 112.384007][ T5156] F2FS-fs (loop2) : inject page get in f2fs_pagecache_get_page of generic_perform_write+0x24c/0x520 [ 113.275781][ T4032] attempt to access beyond end of device [ 113.275781][ T4032] loop2: rw=2049, want=45104, limit=40427 [ 113.415534][ T5186] udc-core: couldn't find an available UDC or it's busy [ 113.478659][ T5186] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 114.599988][ T5185] loop3: detected capacity change from 0 to 32768 [ 114.865570][ T5185] XFS (loop3): Mounting V5 Filesystem [ 115.641165][ T5204] device syzkaller1 entered promiscuous mode [ 115.718028][ T5206] loop4: detected capacity change from 0 to 4096 [ 115.799636][ T5185] XFS (loop3): Ending clean mount [ 115.815602][ T5206] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 115.852211][ T5185] XFS (loop3): Quotacheck needed: Please wait. [ 115.898902][ T5206] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 115.930073][ T5206] ntfs3: loop4: Failed to load root. [ 115.932935][ T5185] XFS (loop3): Quotacheck: Done. [ 116.008244][ T4030] XFS (loop3): Unmounting Filesystem [ 117.392452][ T5254] loop3: detected capacity change from 0 to 512 [ 117.397025][ T5232] loop0: detected capacity change from 0 to 32768 [ 117.470635][ T5254] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 117.475559][ T5232] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.362 (5232) [ 117.552750][ T5254] EXT4-fs (loop3): 1 truncate cleaned up [ 117.554943][ T5254] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.575961][ T5232] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 117.579820][ T5232] BTRFS info (device loop0): force clearing of disk cache [ 117.584800][ T5232] BTRFS info (device loop0): setting nodatacow, compression disabled [ 117.586983][ T5232] BTRFS info (device loop0): turning on flush-on-commit [ 117.850749][ T5232] BTRFS info (device loop0): enabling auto defrag [ 117.861535][ T5232] BTRFS info (device loop0): enabling disk space caching [ 118.075385][ T5232] BTRFS info (device loop0): max_inline at 4096 [ 118.077124][ T5232] BTRFS info (device loop0): disk space caching is enabled [ 118.078963][ T5232] BTRFS info (device loop0): has skinny extents [ 118.375084][ T5271] loop2: detected capacity change from 0 to 16 [ 118.594570][ T5232] BTRFS info (device loop0): enabling ssd optimizations [ 118.597335][ T5232] BTRFS info (device loop0): clearing free space tree [ 118.599185][ T5232] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 118.612428][ T5271] erofs: (device loop2): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 118.619582][ T5232] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 119.566186][ T4014] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop0 scanned by udevd (4014) [ 119.759163][ T5292] loop2: detected capacity change from 0 to 256 [ 119.766070][ T5292] exfat: Unknown parameter 'keep_last_dots' [ 119.857819][ T5228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.107912][ T5285] loop3: detected capacity change from 0 to 32768 [ 120.149495][ T4071] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.485616][ T1960] kernel read not supported for file /dsp1 (pid: 1960 comm: kworker/1:2) [ 120.855321][ T5285] XFS (loop3): Mounting V5 Filesystem [ 120.983757][ T5285] XFS (loop3): Ending clean mount [ 121.002110][ T5285] XFS (loop3): Quotacheck needed: Please wait. [ 121.081861][ T4071] usb 1-1: Using ep0 maxpacket: 8 [ 121.089234][ T5285] XFS (loop3): Quotacheck: Done. [ 121.858952][ T5314] infiniband syz1: set down [ 121.860867][ T5314] infiniband syz1: added ipvlan0 [ 121.895121][ T5314] infiniband syz1: Couldn't open port 1 [ 121.913701][ T5314] RDS/IB: syz1: added [ 121.915084][ T5314] smc: adding ib device syz1 with port count 1 [ 121.916787][ T5314] smc: ib device syz1 port 1 has pnetid [ 122.063589][ T4030] XFS (loop3): Unmounting Filesystem [ 122.172109][ T4071] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 122.174779][ T4071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.176993][ T4071] usb 1-1: Product: syz [ 122.178042][ T4071] usb 1-1: Manufacturer: syz [ 122.186886][ T4071] usb 1-1: SerialNumber: syz [ 122.209361][ T4071] usb 1-1: config 0 descriptor?? [ 122.329977][ T5310] loop4: detected capacity change from 0 to 32768 [ 122.368322][ T5310] [ 122.368322][ T5310] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.368322][ T5310] [ 122.437875][ T4026] [ 122.437875][ T4026] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.437875][ T4026] [ 122.440983][ T4026] [ 122.440983][ T4026] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.440983][ T4026] [ 122.492138][ T4071] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 123.061319][ T5334] udc-core: couldn't find an available UDC or it's busy [ 123.080190][ T5334] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 123.193062][ T5336] loop4: detected capacity change from 0 to 256 [ 123.274855][ T5336] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 123.285441][ T5334] udc-core: couldn't find an available UDC or it's busy [ 123.287317][ T5334] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 125.861976][ T4071] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 125.876793][ T4071] usb 1-1: USB disconnect, device number 2 [ 125.886835][ T5343] loop2: detected capacity change from 0 to 32768 [ 126.037729][ T5343] JBD2: Ignoring recovery information on journal [ 126.039795][ T5343] jbd2_journal_bmap: journal block not found at offset 13312 on loop2-75 [ 126.052090][ T5343] JBD2: bad block at offset 13312 [ 126.053766][ T5343] JBD2: error -5 scanning journal [ 126.055205][ T5343] (syz.2.392,5343,0):ocfs2_journal_wipe:1132 ERROR: status = -5 [ 126.060651][ T5343] (syz.2.392,5343,0):ocfs2_check_volume:2421 ERROR: status = -5 [ 126.080291][ T5343] (syz.2.392,5343,0):ocfs2_check_volume:2490 ERROR: status = -5 [ 126.100590][ T5343] (syz.2.392,5343,0):ocfs2_mount_volume:1824 ERROR: status = -5 [ 126.142129][ T5343] (syz.2.392,5343,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 128.195023][ T5389] netlink: 20 bytes leftover after parsing attributes in process `syz.4.406'. [ 129.750019][ T5385] loop3: detected capacity change from 0 to 32768 [ 129.902138][ T5385] XFS (loop3): Mounting V5 Filesystem [ 130.050073][ T5385] XFS (loop3): Ending clean mount [ 130.053730][ T5385] XFS (loop3): Quotacheck needed: Please wait. [ 130.154489][ T5385] XFS (loop3): Quotacheck: Done. [ 130.330322][ T4030] XFS (loop3): Unmounting Filesystem [ 131.054945][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.057352][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.642262][ T5408] capability: warning: `syz.0.413' uses 32-bit capabilities (legacy support in use) [ 132.180223][ T5430] loop4: detected capacity change from 0 to 256 [ 132.499609][ T5430] FAT-fs (loop4): Unrecognized mount option "iocharset" or missing value [ 132.923887][ T5116] Bluetooth: hci5: command 0x0409 tx timeout [ 133.614254][ T5430] loop4: detected capacity change from 0 to 16 [ 133.810180][ T5430] erofs: (device loop4): mounted with root inode @ nid 36. [ 133.893075][ T5430] erofs: (device loop4): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 133.896575][ T5430] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 134.263908][ T5438] netlink: 20 bytes leftover after parsing attributes in process `syz.0.420'. [ 135.220918][ T5116] Bluetooth: hci5: command 0x041b tx timeout [ 135.320936][ T5444] loop3: detected capacity change from 0 to 256 [ 135.332710][ T5444] exfat: Deprecated parameter 'namecase' [ 135.366342][ T5444] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 136.442008][ T5409] chnl_net:caif_netlink_parms(): no params data found [ 137.292806][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 137.351481][ T5409] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.368516][ T5409] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.371370][ T5409] device bridge_slave_0 entered promiscuous mode [ 137.378217][ T5409] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.380231][ T5409] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.402729][ T5409] device bridge_slave_1 entered promiscuous mode [ 137.528642][ T5409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.579904][ T5409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.643477][ T5409] team0: Port device team_slave_0 added [ 137.647100][ T5409] team0: Port device team_slave_1 added [ 137.661081][ T5483] netlink: 20 bytes leftover after parsing attributes in process `syz.0.434'. [ 137.724710][ T5409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.730321][ T5409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.794642][ T5409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.808680][ T5409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.810360][ T5409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.816211][ T5409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.268534][ T5409] device hsr_slave_0 entered promiscuous mode [ 139.364027][ T5409] device hsr_slave_1 entered promiscuous mode [ 139.372028][ T5117] Bluetooth: hci5: command 0x0419 tx timeout [ 139.451988][ T5409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.453946][ T5409] Cannot create hsr debugfs directory [ 141.206815][ T5409] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 141.264325][ T5409] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 141.304752][ T5409] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 141.345873][ T5409] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 141.578748][ T5409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.600735][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.605108][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.618085][ T5409] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.713902][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.717050][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.719860][ T5001] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.721961][ T5001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.756182][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.761298][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.784927][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.958571][ T5001] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.960534][ T5001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.354031][ T5536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.450'. [ 143.356465][ T5536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.450'. [ 143.535303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.566449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.596304][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.601258][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.620250][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.624933][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.632976][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.650580][ T5409] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 143.656991][ T5409] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.675753][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.678764][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.688308][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.722558][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.742503][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.316976][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.319279][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.335737][ T5409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.493380][ T5567] udc-core: couldn't find an available UDC or it's busy [ 144.504067][ T5567] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 144.708870][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.712813][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.832721][ T5409] device veth0_vlan entered promiscuous mode [ 144.835205][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.838014][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.840974][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.853630][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.975873][ T5409] device veth1_vlan entered promiscuous mode [ 145.715962][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 145.718987][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 145.721626][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.751603][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.768269][ T5583] udc-core: couldn't find an available UDC or it's busy [ 145.770212][ T5583] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 145.779559][ T5409] device veth0_macvtap entered promiscuous mode [ 145.792383][ T5409] device veth1_macvtap entered promiscuous mode [ 145.870371][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.891019][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.915546][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.950293][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.954946][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.957761][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.960343][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.963220][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.981338][ T5409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.987303][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 145.990211][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 145.993422][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.007780][ T5593] syz.4.464 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 146.007780][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.007801][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.034118][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.041203][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.054167][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.069954][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.086481][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.097891][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.109369][ T5409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.122556][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.125630][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.139710][ T5409] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.151818][ T5409] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.159571][ T5409] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.222727][ T5409] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.287914][ T4248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.294412][ T4248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.318698][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 147.361373][ T4305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.363987][ T4305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.385152][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 149.010827][ T148] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.728138][ T148] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.984981][ T148] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.183721][ T148] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.929339][ T5659] udc-core: couldn't find an available UDC or it's busy [ 150.940185][ T5659] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 151.149340][ T5659] udc-core: couldn't find an available UDC or it's busy [ 151.151385][ T5659] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 152.481505][ T5697] udc-core: couldn't find an available UDC or it's busy [ 152.487478][ T5697] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 152.847485][ T5710] udc-core: couldn't find an available UDC or it's busy [ 152.860363][ T5710] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 154.742201][ T7] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 154.749160][ T7] Bluetooth: hci3: Injecting HCI hardware error event [ 154.762251][ T4027] Bluetooth: hci3: hardware error 0x00 [ 154.769339][ T5733] udc-core: couldn't find an available UDC or it's busy [ 154.781605][ T5733] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 159.552898][ T7] Bluetooth: hci5: command 0x0411 tx timeout [ 160.406799][ T148] device hsr_slave_0 left promiscuous mode [ 160.902062][ T148] device hsr_slave_1 left promiscuous mode [ 161.164937][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.167255][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.186985][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.204621][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.310541][ T148] device bridge_slave_1 left promiscuous mode [ 161.322610][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.394890][ T148] device bridge_slave_0 left promiscuous mode [ 161.396861][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.313020][ T148] device veth1_macvtap left promiscuous mode [ 163.314994][ T148] device veth0_macvtap left promiscuous mode [ 163.874493][ T148] team0 (unregistering): Port device team_slave_1 removed [ 163.895649][ T148] team0 (unregistering): Port device team_slave_0 removed [ 163.918447][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.975690][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.221510][ T148] bond0 (unregistering): Released all slaves [ 164.757068][ T5886] udc-core: couldn't find an available UDC or it's busy [ 164.842199][ T5886] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 165.747979][ T5900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.548'. [ 165.778127][ T5902] tmpfs: Unknown parameter 'usrquota' [ 165.796743][ T5904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.548'. [ 166.191122][ T5924] udc-core: couldn't find an available UDC or it's busy [ 166.196584][ T5924] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 168.983865][ T4075] Bluetooth: hci0: command 0x0406 tx timeout [ 170.213920][ T6009] udc-core: couldn't find an available UDC or it's busy [ 170.215957][ T6009] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 174.422658][ T6070] udc-core: couldn't find an available UDC or it's busy [ 174.424574][ T6070] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 181.800402][ T6196] overlayfs: unrecognized mount option "verity=on" or missing value [ 183.319517][ T6239] udc-core: couldn't find an available UDC or it's busy [ 183.343104][ T6239] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 183.925526][ T6246] netlink: 'syz.2.640': attribute type 1 has an invalid length. [ 183.927588][ T6246] netlink: 56 bytes leftover after parsing attributes in process `syz.2.640'. [ 185.127457][ T6270] veth0_macvtap: Device is already in use. [ 185.384375][ T6277] udc-core: couldn't find an available UDC or it's busy [ 185.386544][ T6277] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 186.052832][ T6296] udc-core: couldn't find an available UDC or it's busy [ 186.055403][ T6296] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 190.971298][ T6437] udc-core: couldn't find an available UDC or it's busy [ 190.976387][ T6437] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 192.501183][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.504454][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.622087][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 194.932071][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 195.052221][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 195.054172][ T7] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 195.056330][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.075661][ T7] usb 1-1: config 0 descriptor?? [ 197.176589][ T7] aquacomputer-d5next 0003:0C70:F00E.0002: unknown main item tag 0x0 [ 197.179052][ T7] aquacomputer-d5next 0003:0C70:F00E.0002: unknown main item tag 0x0 [ 197.181393][ T7] aquacomputer-d5next 0003:0C70:F00E.0002: unknown main item tag 0x0 [ 197.184072][ T7] aquacomputer-d5next 0003:0C70:F00E.0002: unknown main item tag 0x0 [ 197.186181][ T7] aquacomputer-d5next 0003:0C70:F00E.0002: unknown main item tag 0x0 [ 197.188315][ T7] aquacomputer-d5next 0003:0C70:F00E.0002: unknown main item tag 0x0 [ 197.190550][ T7] aquacomputer-d5next 0003:0C70:F00E.0002: unknown main item tag 0x0 [ 197.995688][ T7] aquacomputer-d5next 0003:0C70:F00E.0002: hidraw0: USB HID v0.00 Device [HID 0c70:f00e] on usb-dummy_hcd.0-1/input0 [ 198.148651][ T7] usb 1-1: USB disconnect, device number 3 [ 200.231956][ T6602] netlink: 'syz.5.729': attribute type 10 has an invalid length. [ 200.234185][ T6602] netlink: 40 bytes leftover after parsing attributes in process `syz.5.729'. [ 200.236902][ T6602] device batadv0 entered promiscuous mode [ 200.239401][ T6602] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 201.470792][ T6608] netlink: 32 bytes leftover after parsing attributes in process `syz.2.731'. [ 201.491034][ T6608] netlink: 32 bytes leftover after parsing attributes in process `syz.2.731'. [ 201.780242][ T6551] udevd[6551]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 208.487161][ T6727] rdma_rxe: rxe_register_device failed with error -23 [ 208.491924][ T6727] rdma_rxe: failed to add ipvlan0 [ 209.762037][ T6742] udevd[6742]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 209.921902][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 210.261589][ T6756] udc-core: couldn't find an available UDC or it's busy [ 210.261867][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 210.267571][ T6756] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 210.381916][ T7] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 210.384423][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.399104][ T7] usb 1-1: config 0 descriptor?? [ 210.456674][ T7] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 211.125193][ T6774] udc-core: couldn't find an available UDC or it's busy [ 211.126928][ T6774] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 211.351954][ T7] gspca_vc032x: reg_w err -71 [ 211.353366][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.355100][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.356500][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.357936][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.359483][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.360839][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.363390][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.364976][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.366751][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.368120][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.372314][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.373721][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.375110][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.387947][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.389622][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.391007][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.398105][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.399537][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.400918][ T7] gspca_vc032x: Unknown sensor... [ 211.415061][ T7] vc032x: probe of 1-1:0.0 failed with error -22 [ 211.419167][ T7] usb 1-1: USB disconnect, device number 4 [ 213.029884][ T6805] netlink: 148 bytes leftover after parsing attributes in process `syz.3.792'. [ 213.050804][ T6805] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 214.602510][ T6853] ptrace attach of "./syz-executor exec"[4032] was attempted by "./syz-executor exec"[6853] [ 214.606929][ T6853] fuse: Bad value for 'fd' [ 217.096813][ T6918] udevd[6918]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 221.273959][ T6984] udevd[6984]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 223.643354][ T7011] loop0: detected capacity change from 0 to 32768 [ 223.710898][ T7011] (syz.0.837,7011,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 223.718133][ T7011] (syz.0.837,7011,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 223.767165][ T7011] JBD2: Ignoring recovery information on journal [ 223.898814][ T7011] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 224.254343][ T4022] ocfs2: Unmounting device (7,0) on (node local) [ 225.969422][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.851'. [ 228.306480][ T7094] udc-core: couldn't find an available UDC or it's busy [ 228.308347][ T7094] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 234.205990][ T6984] udevd[6984]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 235.272796][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.904'. [ 237.732796][ T7254] udc-core: couldn't find an available UDC or it's busy [ 237.734717][ T7254] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 238.941307][ T7270] loop0: detected capacity change from 0 to 1024 [ 239.467444][ T7270] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 239.477227][ T7270] EXT4-fs (loop0): orphan cleanup on readonly fs [ 239.494416][ T7270] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 239.532397][ T7270] EXT4-fs (loop0): Remounting filesystem read-only [ 239.553231][ T7270] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #3: comm syz.0.923: mark_inode_dirty error [ 239.583856][ T7270] EXT4-fs (loop0): Remounting filesystem read-only [ 239.601119][ T7270] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.923: Invalid block bitmap block 3 in block_group 0 [ 239.625928][ T7270] EXT4-fs (loop0): Remounting filesystem read-only [ 239.627825][ T7270] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 239.641809][ T7270] EXT4-fs (loop0): Remounting filesystem read-only [ 239.643527][ T7270] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #3: comm syz.0.923: mark_inode_dirty error [ 239.648664][ T7270] EXT4-fs (loop0): Remounting filesystem read-only [ 239.650459][ T7270] __quota_error: 32 callbacks suppressed [ 239.650479][ T7270] Quota error (device loop0): write_blk: dquota write failed [ 239.681916][ T7270] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 1: comm syz.0.923: lblock 6 mapped to illegal pblock 1 (length 1) [ 239.818410][ T7270] EXT4-fs (loop0): Remounting filesystem read-only [ 239.820342][ T7270] Quota error (device loop0): write_blk: dquota write failed [ 239.867379][ T7270] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 239.870270][ T7270] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 48: comm syz.0.923: lblock 0 mapped to illegal pblock 48 (length 1) [ 239.892606][ T7288] udc-core: couldn't find an available UDC or it's busy [ 239.894503][ T7288] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 239.949103][ T7270] EXT4-fs (loop0): Remounting filesystem read-only [ 239.951069][ T7270] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 240.018499][ T7270] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.923: Failed to acquire dquot type 0 [ 240.038695][ T7270] EXT4-fs (loop0): Remounting filesystem read-only [ 240.040306][ T7270] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 49: comm syz.0.923: lblock 1 mapped to illegal pblock 49 (length 1) [ 240.788542][ T7270] EXT4-fs (loop0): Remounting filesystem read-only [ 240.790367][ T7270] Quota error (device loop0): do_insert_tree: Can't read tree quota block 1 [ 240.816900][ T7270] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 240.823559][ T7270] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.923: Failed to acquire dquot type 0 [ 240.849366][ T7270] EXT4-fs (loop0): Remounting filesystem read-only [ 240.851152][ T7270] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 240.854485][ T7270] EXT4-fs (loop0): Remounting filesystem read-only [ 240.856376][ T7270] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #15: comm syz.0.923: mark_inode_dirty error [ 240.859669][ T7270] EXT4-fs (loop0): Remounting filesystem read-only [ 240.861519][ T7270] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 240.865226][ T7270] EXT4-fs (loop0): 1 orphan inode deleted [ 240.867947][ T7270] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000008,data_err=abort,minixdf,errors=remount-ro,abort,noblock_validity,barrier,journal_dev=0x0000000000000f35,. Quota mode: none. [ 245.163029][ T7326] loop0: detected capacity change from 0 to 256 [ 245.192433][ T7326] exfat: Bad value for 'uid' [ 251.518536][ T7390] udevd[7390]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 252.437194][ T1535] kernel write not supported for file /sequencer (pid: 1535 comm: kworker/0:2) [ 253.944456][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.946219][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.197534][ T7389] udevd[7389]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 256.028847][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.977'. [ 256.788766][ T7389] udevd[7389]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 260.843749][ T7517] udevd[7517]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 262.856604][ T7532] netlink: 'syz.0.1007': attribute type 6 has an invalid length. [ 268.287309][ T4037] Bluetooth: hci5: link tx timeout [ 268.289002][ T4037] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 268.477534][ T4027] Bluetooth: hci5: link tx timeout [ 268.480352][ T4027] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 268.503770][ T4027] Bluetooth: hci5: link tx timeout [ 268.505320][ T4027] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 269.441976][ T4027] Bluetooth: hci5: link tx timeout [ 269.443485][ T4027] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 269.446502][ T4027] Bluetooth: hci5: link tx timeout [ 269.447996][ T4027] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 269.703808][ T7616] udevd[7616]: setting owner of /dev/loop0 to uid=0, gid=6 failed: No such file or directory [ 270.964282][ T7616] udevd[7616]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 271.033611][ T4027] Bluetooth: hci5: link tx timeout [ 271.035025][ T4027] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 271.041891][ T5117] Bluetooth: hci5: command 0x0406 tx timeout [ 271.133733][ T4027] Bluetooth: hci5: link tx timeout [ 271.135108][ T4027] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 272.897681][ T7670] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1040'. [ 273.008267][ T4027] Bluetooth: hci5: link tx timeout [ 273.011569][ T4027] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 273.046118][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1040'. [ 277.148899][ T4027] Bluetooth: hci5: link tx timeout [ 277.151460][ T4027] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 277.786818][ T4027] Bluetooth: hci5: link tx timeout [ 277.788293][ T4027] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.158488][ T4027] Bluetooth: hci5: link tx timeout [ 280.160059][ T4027] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.204138][ T4027] Bluetooth: hci5: link tx timeout [ 280.205603][ T4027] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.184776][ T4027] Bluetooth: hci5: link tx timeout [ 281.186548][ T4027] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 282.145254][ T4027] Bluetooth: hci5: link tx timeout [ 282.146752][ T4027] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.146438][ T4027] Bluetooth: hci5: link tx timeout [ 284.147837][ T4027] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.857763][ T7814] udc-core: couldn't find an available UDC or it's busy [ 285.859729][ T7814] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 286.211962][ T4027] Bluetooth: hci5: link tx timeout [ 286.214681][ T4027] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.137704][ T7850] udc-core: couldn't find an available UDC or it's busy [ 287.161036][ T7850] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 288.362371][ T4027] Bluetooth: hci5: link tx timeout [ 288.363767][ T4027] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 290.484817][ T7896] udevd[7896]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 292.478111][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 293.135052][ T7916] tipc: New replicast peer: 10.1.1.2 [ 293.138454][ T7916] tipc: Enabled bearer , priority 10 [ 295.311931][ T7938] udevd[7938]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 295.631957][ T7945] netlink: 'syz.3.1117': attribute type 10 has an invalid length. [ 295.634094][ T7945] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1117'. [ 295.636513][ T7945] device batadv0 entered promiscuous mode [ 295.638833][ T7945] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 296.928236][ T7963] sctp: [Deprecated]: syz.0.1123 (pid 7963) Use of int in maxseg socket option. [ 296.928236][ T7963] Use struct sctp_assoc_value instead [ 298.098986][ T7972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.224510][ T7972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.738272][ T7992] udevd[7992]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 301.641125][ T8018] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1142'. [ 301.643768][ T8018] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1142'. [ 301.646222][ T8018] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1142'. [ 303.471881][ T4037] Bluetooth: hci5: link tx timeout [ 303.473301][ T4037] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.484154][ T8037] netlink: 'syz.3.1148': attribute type 6 has an invalid length. [ 306.084382][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1154'. [ 308.342191][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 308.841934][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 310.161916][ T7] usb 1-1: unable to read config index 0 descriptor/all [ 310.163800][ T7] usb 1-1: can't read configurations, error -71 [ 312.317895][ T8126] tipc: Started in network mode [ 312.319313][ T8126] tipc: Node identity ac14140f, cluster identity 4711 [ 312.321391][ T8126] tipc: New replicast peer: 10.1.1.2 [ 312.322831][ T8126] tipc: Enabled bearer , priority 10 [ 315.917827][ T1535] tipc: Node number set to 2886997007 [ 316.252732][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.254432][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.900016][ T8179] UBIFS error (pid: 8179): cannot open "ubifs", error -22 [ 321.063196][ T8181] udc-core: couldn't find an available UDC or it's busy [ 321.067096][ T8181] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 326.602948][ T8245] udc-core: couldn't find an available UDC or it's busy [ 326.604780][ T8245] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 326.732276][ T13] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 327.032087][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 327.802100][ T13] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 327.805832][ T13] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 327.808281][ T13] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 327.810799][ T13] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.847899][ T13] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 327.850422][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.887009][ T8255] syzkaller1: tun_chr_ioctl cmd 21731 [ 328.134326][ T13] usb 1-1: GET_CAPABILITIES returned 0 [ 328.136023][ T13] usbtmc 1-1:16.0: can't read capabilities [ 329.025331][ T1960] usb 1-1: USB disconnect, device number 7 [ 334.421924][ T4037] Bluetooth: hci5: link tx timeout [ 334.423292][ T4037] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 334.425579][ T4037] Bluetooth: hci5: link tx timeout [ 334.426976][ T4037] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 334.880489][ T8334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1239'. [ 334.927611][ T8334] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 336.854432][ T8354] udc-core: couldn't find an available UDC or it's busy [ 336.856413][ T8354] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 336.901807][ T13] Bluetooth: hci5: command 0x0406 tx timeout [ 337.404653][ T8367] tipc: Enabling of bearer rejected, already enabled [ 352.409173][ T8488] netlink: 'syz.4.1288': attribute type 21 has an invalid length. [ 375.661510][ T8747] tipc: Invalid UDP bearer configuration [ 375.661563][ T8747] tipc: Enabling of bearer rejected, failed to enable media [ 376.783042][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1377'. [ 376.798950][ T8767] 9pnet: p9_errstr2errno: server reported unknown error loc_per [ 376.832189][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.833913][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.061702][ T8802] udc-core: couldn't find an available UDC or it's busy [ 379.072193][ T8802] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 384.681866][ T21] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 384.971874][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 385.344896][ T21] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 385.347664][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.424011][ T21] usb 1-1: Product: syz [ 385.461794][ T21] usb 1-1: Manufacturer: syz [ 385.518668][ T21] usb 1-1: SerialNumber: syz [ 385.770239][ T21] usb 1-1: config 0 descriptor?? [ 385.854013][ T21] gspca_main: se401-2.14.0 probing 047d:5003 [ 386.066169][ T8856] udc-core: couldn't find an available UDC or it's busy [ 386.071670][ T8856] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 386.922440][ T21] gspca_se401: ExtraFeatures: 85 [ 386.923940][ T21] gspca_se401: Frame size: 0x0 1/16th janggu [ 386.925553][ T21] gspca_se401: Frame size: 34817x0 bayer [ 386.927048][ T21] gspca_se401: Frame size: 0x0 1/16th janggu [ 386.928671][ T21] gspca_se401: Frame size: 0x0 1/16th janggu [ 387.114545][ T21] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input4 [ 387.162258][ T21] usb 1-1: USB disconnect, device number 8 [ 392.040519][ T8938] 9pnet: Insufficient options for proto=fd [ 393.762067][ T8963] udevd[8963]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 397.717219][ T9013] tipc: Enabling of bearer rejected, already enabled [ 398.883686][ T4037] Bluetooth: hci5: link tx timeout [ 398.885286][ T4037] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 398.887394][ T4037] Bluetooth: hci5: link tx timeout [ 398.888542][ T4037] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 402.361931][ T5114] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 402.671890][ T9083] tipc: Started in network mode [ 402.673754][ T9083] tipc: Node identity ac14140f, cluster identity 4711 [ 402.679001][ T9083] tipc: New replicast peer: 10.1.1.2 [ 402.681630][ T9083] tipc: Enabled bearer , priority 10 [ 403.799197][ T4459] tipc: Node number set to 2886997007 [ 405.347159][ T9105] udevd[9105]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 405.559766][ T9111] bridge0: port 1(gretap0) entered blocking state [ 405.562820][ T9111] bridge0: port 1(gretap0) entered disabled state [ 405.569893][ T9111] device gretap0 entered promiscuous mode [ 405.573355][ T9111] bridge0: port 1(gretap0) entered blocking state [ 405.575550][ T9111] bridge0: port 1(gretap0) entered forwarding state [ 405.582379][ T9111] device gretap0 left promiscuous mode [ 405.584257][ T9111] bridge0: port 1(gretap0) entered disabled state [ 405.654455][ T5114] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 405.764560][ T5114] usb 1-1: can't read configurations, error -71 [ 408.062326][ T9124] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 408.064179][ T9124] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 408.084831][ T9124] vhci_hcd vhci_hcd.0: Device attached [ 408.127846][ T9129] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(12) [ 408.129815][ T9129] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 408.140238][ T9129] vhci_hcd vhci_hcd.0: Device attached [ 408.153840][ T9124] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 408.201705][ T9124] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(16) [ 408.203552][ T9124] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 408.222820][ T9129] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 408.226868][ T9129] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 408.262302][ T9124] vhci_hcd vhci_hcd.0: Device attached [ 408.262938][ T9129] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 408.424272][ T25] vhci_hcd: vhci_device speed not set [ 408.450000][ T9124] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(18) [ 408.451776][ T9124] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 408.475144][ T9124] vhci_hcd vhci_hcd.0: Device attached [ 408.480458][ T9134] vhci_hcd: connection closed [ 408.480758][ T4116] vhci_hcd: stop threads [ 408.481319][ T9125] vhci_hcd: connection closed [ 408.482553][ T9130] vhci_hcd: connection closed [ 408.660839][ T4116] vhci_hcd: release socket [ 408.826718][ T4116] vhci_hcd: disconnect device [ 408.881174][ T4116] vhci_hcd: stop threads [ 408.936742][ T4116] vhci_hcd: release socket [ 408.992237][ T4116] vhci_hcd: disconnect device [ 409.084706][ T4116] vhci_hcd: stop threads [ 409.123393][ T9144] vhci_hcd: connection closed [ 409.135413][ T4116] vhci_hcd: release socket [ 409.149520][ T4116] vhci_hcd: disconnect device [ 409.152702][ T4116] vhci_hcd: stop threads [ 409.153871][ T4116] vhci_hcd: release socket [ 409.225200][ T25] usb 12-1: new full-speed USB device number 2 using vhci_hcd [ 409.227279][ T25] usb 12-1: enqueue for inactive port 0 [ 409.375209][ T4116] vhci_hcd: disconnect device [ 409.426178][ T25] vhci_hcd: vhci_device speed not set [ 409.650283][ T9168] udevd[9168]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 412.256075][ T9168] udevd[9168]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 414.793844][ T9235] tipc: Enabling of bearer rejected, already enabled [ 415.324645][ T9240] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1528'. [ 416.796809][ T9249] loop0: detected capacity change from 0 to 32768 [ 417.174713][ T9249] XFS (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 417.177013][ T9249] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 417.186905][ T9249] XFS (loop0): DAX and reflink cannot be used together! [ 418.771876][ T5116] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 419.113989][ T9293] udc-core: couldn't find an available UDC or it's busy [ 419.115982][ T9293] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 419.132234][ T5116] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 419.135038][ T5116] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 419.138022][ T5116] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 419.146100][ T5116] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 419.152468][ T5116] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 419.232061][ T5116] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 419.234399][ T5116] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 419.237174][ T5116] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 419.241227][ T5116] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 419.249762][ T5116] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 419.293492][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'. [ 419.331921][ T5116] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 419.334123][ T5116] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 419.336982][ T5116] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 419.340093][ T5116] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 419.347187][ T5116] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 419.772154][ T5116] usb 1-1: string descriptor 0 read error: -22 [ 419.786347][ T5116] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 419.789109][ T5116] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.405760][ T5116] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 420.497355][ T9320] udc-core: couldn't find an available UDC or it's busy [ 420.499210][ T9320] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 420.639768][ T9283] usb 1-1: Couldn't submit interrupt_out_urb -90 [ 420.652854][ T13] usb 1-1: USB disconnect, device number 11 [ 422.376554][ T9353] udc-core: couldn't find an available UDC or it's busy [ 422.383894][ T4459] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 422.386142][ T9353] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 422.394150][ T4459] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 423.319689][ T9363] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 423.811451][ T9246] udevd[9246]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 426.140199][ T9402] chnl_net:caif_netlink_parms(): no params data found [ 426.763800][ T9402] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.765599][ T9402] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.768319][ T9402] device bridge_slave_0 entered promiscuous mode [ 426.771677][ T9402] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.784619][ T9402] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.787467][ T9402] device bridge_slave_1 entered promiscuous mode [ 426.861102][ T9402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.968975][ T9402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.750950][ T5116] Bluetooth: hci1: command 0x0409 tx timeout [ 427.822136][ T9402] team0: Port device team_slave_0 added [ 427.833837][ T9402] team0: Port device team_slave_1 added [ 427.917509][ T9402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.919391][ T9402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.926510][ T9402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.930948][ T9402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.932946][ T9402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.008000][ T9402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.158527][ T9402] device hsr_slave_0 entered promiscuous mode [ 428.202316][ T9402] device hsr_slave_1 entered promiscuous mode [ 428.960528][ T9402] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 430.140589][ T9402] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 430.192092][ T9476] udc-core: couldn't find an available UDC or it's busy [ 430.194103][ T9476] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 430.209298][ T5116] Bluetooth: hci1: command 0x041b tx timeout [ 430.225271][ T9402] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 430.264095][ T9402] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 430.432552][ T9481] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1605'. [ 430.722660][ T9402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.740984][ T9402] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.800207][ T9402] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 430.811627][ T9402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 430.834918][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 430.839294][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 430.845603][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 430.848639][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 430.851384][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.853330][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.860067][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 430.864158][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 430.866932][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.868644][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.870873][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 430.875114][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 430.878246][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 430.883662][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 430.886446][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 430.891279][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 430.898042][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 430.900940][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 430.909678][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 430.918920][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 430.934979][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 430.948314][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 430.951225][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 431.245494][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 431.251095][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 431.268901][ T9402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.739031][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 431.744240][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 431.991058][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 431.994088][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 431.997094][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 432.006528][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 432.761357][ T9402] device veth0_vlan entered promiscuous mode [ 432.769554][ T9402] device veth1_vlan entered promiscuous mode [ 432.795337][ T5114] Bluetooth: hci1: command 0x040f tx timeout [ 432.866145][ T9402] device veth0_macvtap entered promiscuous mode [ 432.887111][ T9535] udc-core: couldn't find an available UDC or it's busy [ 432.888992][ T9535] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 432.893416][ T9402] device veth1_macvtap entered promiscuous mode [ 432.941998][ T9402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.944713][ T9402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.959354][ T9402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.967750][ T9402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.981510][ T9402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.998178][ T9402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.008519][ T9402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.038769][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 433.041646][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 433.063685][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 433.075893][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 433.086099][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 433.095581][ T9402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.098296][ T9402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.106330][ T9402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.109070][ T9402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.116081][ T9402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.118812][ T9402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.121632][ T9402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.152128][ T9402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.158509][ T9402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.183182][ T9402] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.193470][ T9402] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.219224][ T9402] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.227657][ T9402] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.248800][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 433.255264][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 433.265138][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 433.519002][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.540280][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.582151][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 433.606605][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.609215][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.628889][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 435.306336][ T5117] Bluetooth: hci1: command 0x0419 tx timeout [ 435.856860][ T9573] Can't find ip_set type [ 436.862070][ T9587] tipc: Enabling of bearer rejected, already enabled [ 438.364591][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.366379][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.022818][ T9629] udc-core: couldn't find an available UDC or it's busy [ 442.024590][ T9629] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 442.142393][ T9630] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 446.538185][ T9679] netlink: 'syz.6.1664': attribute type 10 has an invalid length. [ 446.673870][ T9679] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 455.720039][ T9768] capability: warning: `syz.2.1688' uses deprecated v2 capabilities in a way that may be insecure [ 457.511584][ T4069] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 458.062152][ T4069] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.064940][ T4069] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 458.067631][ T4069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.090468][ T4069] usb 1-1: config 0 descriptor?? [ 458.144229][ T4069] pwc: Askey VC010 type 2 USB webcam detected. [ 459.180879][ T4069] pwc: recv_control_msg error -32 req 02 val 2b00 [ 459.360612][ T4069] pwc: recv_control_msg error -32 req 02 val 2700 [ 460.401361][ T9831] tipc: Started in network mode [ 460.402859][ T9831] tipc: Node identity ac14140f, cluster identity 4711 [ 460.404688][ T9831] tipc: New replicast peer: 10.1.1.2 [ 460.406730][ T9831] tipc: Enabled bearer , priority 10 [ 460.914117][ T4069] pwc: recv_control_msg error -32 req 02 val 2c00 [ 460.931895][ T4069] pwc: recv_control_msg error -71 req 04 val 1000 [ 461.892663][ T4075] tipc: Node number set to 2886997007 [ 461.911916][ T4069] pwc: recv_control_msg error -71 req 04 val 1300 [ 462.178316][ T4069] pwc: recv_control_msg error -71 req 04 val 1400 [ 462.191882][ T4069] pwc: recv_control_msg error -71 req 02 val 2000 [ 462.211894][ T4069] pwc: recv_control_msg error -71 req 02 val 2100 [ 462.231889][ T4069] pwc: recv_control_msg error -71 req 04 val 1500 [ 462.253263][ T4069] pwc: recv_control_msg error -71 req 02 val 2500 [ 462.409282][ T4069] pwc: recv_control_msg error -71 req 02 val 2400 [ 462.432022][ T4069] pwc: recv_control_msg error -71 req 02 val 2600 [ 462.467025][ T4069] pwc: recv_control_msg error -71 req 02 val 2900 [ 462.482529][ T4027] Bluetooth: hci5: link tx timeout [ 462.484027][ T4027] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 462.486020][ T4027] Bluetooth: hci5: link tx timeout [ 462.487152][ T4027] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 462.489455][ T4069] pwc: recv_control_msg error -71 req 02 val 2800 [ 462.501990][ T4069] pwc: recv_control_msg error -71 req 04 val 1100 [ 462.522770][ T4069] pwc: recv_control_msg error -71 req 04 val 1200 [ 462.538506][ T4069] pwc: Registered as video11. [ 462.549186][ T4069] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 462.752525][ T4069] usb 1-1: USB disconnect, device number 12 [ 465.149284][ T9877] UBIFS error (pid: 9877): cannot open "ubifs", error -22 [ 466.791648][ T9885] udc-core: couldn't find an available UDC or it's busy [ 466.799142][ T9885] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 467.610596][ T9909] udc-core: couldn't find an available UDC or it's busy [ 467.615212][ T9909] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 467.989469][ T9915] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 467.991236][ T9915] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 468.002868][ T9915] vhci_hcd vhci_hcd.0: Device attached [ 468.043348][ T9915] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(12) [ 468.045283][ T9915] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 468.047659][ T9915] vhci_hcd vhci_hcd.0: Device attached [ 468.051066][ T9915] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 468.074263][ T9915] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(16) [ 468.076010][ T9915] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 468.078193][ T9915] vhci_hcd vhci_hcd.0: Device attached [ 468.087883][ T9915] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 468.110689][ T9915] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 468.121361][ T9915] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 468.291584][ T9915] vhci_hcd vhci_hcd.0: pdev(6) rhport(7) sockfd(24) [ 468.293576][ T9915] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 468.302796][ T5114] vhci_hcd: vhci_device speed not set [ 468.342003][ T9915] vhci_hcd vhci_hcd.0: Device attached [ 468.474731][ T9932] tipc: Started in network mode [ 468.476168][ T9932] tipc: Node identity ac14140f, cluster identity 4711 [ 468.478274][ T9932] tipc: New replicast peer: 10.1.1.2 [ 468.479849][ T9932] tipc: Enabled bearer , priority 10 [ 468.492016][ T5114] usb 14-1: new full-speed USB device number 2 using vhci_hcd [ 469.321924][ T9924] vhci_hcd: connection closed [ 469.327365][ T9916] vhci_hcd: connection reset by peer [ 469.345463][ T9920] vhci_hcd: connection closed [ 469.345594][ T9918] vhci_hcd: connection closed [ 469.352309][ T148] vhci_hcd: stop threads [ 469.357226][ T148] vhci_hcd: release socket [ 469.358688][ T148] vhci_hcd: disconnect device [ 469.362682][ T148] vhci_hcd: stop threads [ 469.363934][ T148] vhci_hcd: release socket [ 469.366358][ T148] vhci_hcd: disconnect device [ 469.416015][ T148] vhci_hcd: stop threads [ 469.417323][ T148] vhci_hcd: release socket [ 469.418879][ T148] vhci_hcd: disconnect device [ 469.443034][ T148] vhci_hcd: stop threads [ 469.509053][ T148] vhci_hcd: release socket [ 469.510265][ T148] vhci_hcd: disconnect device [ 469.573649][ T4459] tipc: Node number set to 2886997007 [ 472.654167][ T9965] udevd[9965]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 473.921939][ T5114] vhci_hcd: vhci_device speed not set [ 474.281372][ T9979] udc-core: couldn't find an available UDC or it's busy [ 474.293093][ T9979] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 475.998478][ T9989] tipc: Enabling of bearer rejected, already enabled [ 477.535061][T10000] udc-core: couldn't find an available UDC or it's busy [ 477.547599][T10000] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 478.677227][T10010] udevd[10010]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 478.716072][T10015] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1757'. [ 479.280592][T10026] udc-core: couldn't find an available UDC or it's busy [ 479.282697][T10026] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 480.299893][T10051] tipc: Enabling of bearer rejected, already enabled [ 481.363415][T10060] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 482.881463][T10068] loop0: detected capacity change from 0 to 1024 [ 482.949023][T10076] udc-core: couldn't find an available UDC or it's busy [ 482.950945][T10076] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 483.057329][T10068] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 483.060137][T10068] EXT4-fs (loop0): orphan cleanup on readonly fs [ 483.066320][T10068] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 483.090252][T10068] EXT4-fs (loop0): Remounting filesystem read-only [ 483.094402][T10068] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #3: comm syz.0.1778: mark_inode_dirty error [ 483.102383][T10068] EXT4-fs (loop0): Remounting filesystem read-only [ 483.104198][T10068] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1778: Invalid block bitmap block 3 in block_group 0 [ 484.322638][T10068] EXT4-fs (loop0): Remounting filesystem read-only [ 484.324650][T10068] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 484.327702][T10068] EXT4-fs (loop0): Remounting filesystem read-only [ 484.329430][T10068] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #3: comm syz.0.1778: mark_inode_dirty error [ 484.342464][T10068] EXT4-fs (loop0): Remounting filesystem read-only [ 484.344381][T10068] Quota error (device loop0): write_blk: dquota write failed [ 485.126178][T10068] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 1: comm syz.0.1778: lblock 6 mapped to illegal pblock 1 (length 1) [ 485.136283][T10068] EXT4-fs (loop0): Remounting filesystem read-only [ 485.138199][T10068] Quota error (device loop0): write_blk: dquota write failed [ 485.140138][T10068] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 485.161952][T10068] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 48: comm syz.0.1778: lblock 0 mapped to illegal pblock 48 (length 1) [ 485.192699][T10068] EXT4-fs (loop0): Remounting filesystem read-only [ 485.196664][T10068] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 485.275958][T10068] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.1778: Failed to acquire dquot type 0 [ 485.290470][T10068] EXT4-fs (loop0): Remounting filesystem read-only [ 485.294035][T10068] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 49: comm syz.0.1778: lblock 1 mapped to illegal pblock 49 (length 1) [ 485.300786][T10068] EXT4-fs (loop0): Remounting filesystem read-only [ 485.311627][T10068] Quota error (device loop0): do_insert_tree: Can't read tree quota block 1 [ 485.345641][T10068] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 485.348618][T10068] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.1778: Failed to acquire dquot type 0 [ 485.399676][T10068] EXT4-fs (loop0): Remounting filesystem read-only [ 485.405295][T10068] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 485.443339][T10068] EXT4-fs (loop0): Remounting filesystem read-only [ 485.445075][T10068] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #15: comm syz.0.1778: mark_inode_dirty error [ 485.448758][T10068] EXT4-fs (loop0): Remounting filesystem read-only [ 485.458397][T10068] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 485.466141][T10068] EXT4-fs (loop0): 1 orphan inode deleted [ 485.467893][T10068] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000008,data_err=abort,minixdf,errors=remount-ro,abort,noblock_validity,barrier,journal_dev=0x0000000000000f35,. Quota mode: none. [ 486.433263][T10103] tipc: Enabling of bearer rejected, already enabled [ 492.399450][T10137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.785524][T10144] sp0: Synchronizing with TNC [ 493.392397][T10148] udc-core: couldn't find an available UDC or it's busy [ 493.394368][T10148] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 494.458517][T10155] MPTCP: kernel_bind error, err=-98 [ 495.284936][ T4069] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 496.925621][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 497.472060][ T4069] usb 1-1: config 0 has no interfaces? [ 497.473617][ T4069] usb 1-1: New USB device found, idVendor=0919, idProduct=3333, bcdDevice= 0.40 [ 497.475870][ T4069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.508538][ T4069] usb 1-1: config 0 descriptor?? [ 497.747242][ T4069] usb 1-1: USB disconnect, device number 13 [ 498.383298][T10198] MPTCP: kernel_bind error, err=-98 [ 499.643379][T10230] MPTCP: kernel_bind error, err=-98 [ 499.700793][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 499.704241][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.154107][T10254] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1844'. [ 502.892322][T10275] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1850'. [ 504.078851][T10288] udc-core: couldn't find an available UDC or it's busy [ 504.095788][T10288] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 505.232691][T10301] loop0: detected capacity change from 0 to 1024 [ 505.318087][T10301] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 505.321038][T10301] EXT4-fs (loop0): orphan cleanup on readonly fs [ 505.325237][T10301] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 505.330331][T10301] EXT4-fs (loop0): Remounting filesystem read-only [ 505.332139][T10301] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #3: comm syz.0.1857: mark_inode_dirty error [ 505.336100][T10301] EXT4-fs (loop0): Remounting filesystem read-only [ 505.338075][T10301] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1857: Invalid block bitmap block 3 in block_group 0 [ 505.346116][T10301] EXT4-fs (loop0): Remounting filesystem read-only [ 505.348078][T10301] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 505.351004][T10301] EXT4-fs (loop0): Remounting filesystem read-only [ 505.352799][T10301] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #3: comm syz.0.1857: mark_inode_dirty error [ 505.357051][T10301] EXT4-fs (loop0): Remounting filesystem read-only [ 505.358743][T10301] Quota error (device loop0): write_blk: dquota write failed [ 505.360785][T10301] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 1: comm syz.0.1857: lblock 6 mapped to illegal pblock 1 (length 1) [ 505.365622][T10301] EXT4-fs (loop0): Remounting filesystem read-only [ 505.367431][T10301] Quota error (device loop0): write_blk: dquota write failed [ 505.369309][T10301] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 505.372058][T10301] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 48: comm syz.0.1857: lblock 0 mapped to illegal pblock 48 (length 1) [ 505.378710][T10301] EXT4-fs (loop0): Remounting filesystem read-only [ 505.380575][T10301] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 505.383115][T10301] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.1857: Failed to acquire dquot type 0 [ 505.387774][T10301] EXT4-fs (loop0): Remounting filesystem read-only [ 505.389657][T10301] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 49: comm syz.0.1857: lblock 1 mapped to illegal pblock 49 (length 1) [ 505.394573][T10301] EXT4-fs (loop0): Remounting filesystem read-only [ 505.396412][T10301] Quota error (device loop0): do_insert_tree: Can't read tree quota block 1 [ 505.398973][T10301] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 505.401621][T10301] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.1857: Failed to acquire dquot type 0 [ 505.406101][T10301] EXT4-fs (loop0): Remounting filesystem read-only [ 505.407953][T10301] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 505.411050][T10301] EXT4-fs (loop0): Remounting filesystem read-only [ 505.412970][T10301] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #15: comm syz.0.1857: mark_inode_dirty error [ 505.417095][T10301] EXT4-fs (loop0): Remounting filesystem read-only [ 505.418876][T10301] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 505.421547][T10301] EXT4-fs (loop0): 1 orphan inode deleted [ 505.424242][T10301] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000008,data_err=abort,minixdf,errors=remount-ro,abort,noblock_validity,barrier,journal_dev=0x0000000000000f35,. Quota mode: none. [ 505.606573][ T26] audit: type=1326 audit(1945.577:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.5.1861" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8337aa68 code=0x7ffc0000 [ 505.616025][ T26] audit: type=1326 audit(1945.587:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.5.1861" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=232 compat=0 ip=0xffff8337aa68 code=0x7ffc0000 [ 505.625891][ T26] audit: type=1326 audit(1945.597:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.5.1861" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8337aa68 code=0x7ffc0000 [ 506.381222][T10311] tipc: Enabling of bearer rejected, already enabled [ 509.004769][T10329] MPTCP: kernel_bind error, err=-98 [ 512.126033][T10369] tipc: Enabling of bearer rejected, already enabled [ 514.810317][T10395] MPTCP: kernel_bind error, err=-98 [ 515.017351][T10400] udc-core: couldn't find an available UDC or it's busy [ 515.020562][T10400] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 515.130804][ T26] audit: type=1326 audit(1979.100:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10410 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac05aa68 code=0x7ffc0000 [ 515.137535][ T26] audit: type=1326 audit(1979.110:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10410 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=32 compat=0 ip=0xffffac05aa68 code=0x7ffc0000 [ 515.152447][ T26] audit: type=1326 audit(1979.110:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10410 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac05aa68 code=0x7ffc0000 [ 517.986737][T10432] udevd[10432]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 519.129084][T10450] tipc: Enabling of bearer rejected, already enabled [ 521.818234][T10371] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 521.829169][T10371] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 522.983588][T10493] netlink: set zone limit has 8 unknown bytes [ 523.190691][T10501] MPTCP: kernel_bind error, err=-98 [ 526.537669][T10559] netlink: set zone limit has 8 unknown bytes [ 526.546974][T10557] MPTCP: kernel_bind error, err=-98 [ 528.373161][T10597] ------------[ cut here ]------------ [ 528.376048][T10597] WARNING: CPU: 1 PID: 10597 at block/genhd.c:586 del_gendisk+0x690/0x724 [ 528.377984][T10597] Modules linked in: [ 528.379002][T10597] CPU: 1 PID: 10597 Comm: syz.2.1938 Not tainted 5.15.178-syzkaller #0 [ 528.381060][T10597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 528.383577][T10597] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 528.385556][T10597] pc : del_gendisk+0x690/0x724 [ 528.386819][T10597] lr : del_gendisk+0x690/0x724 [ 528.387955][T10597] sp : ffff80001feb7bc0 [ 528.389046][T10597] x29: ffff80001feb7be0 x28: ffff0000f2d69b40 x27: 1fffe0001ac8ca2a [ 528.391229][T10597] x26: 1fffe0001cf88410 x25: 1ffff00003fd6f88 x24: ffff0000e7c42080 [ 528.393352][T10597] x23: 0000000000000000 x22: ffff0000e7c420a0 x21: ffff0000e7c42000 [ 528.395568][T10597] x20: ffff0000cc825550 x19: 0000000000000240 x18: 0000000000000000 [ 528.397788][T10597] x17: 0000000000000002 x16: ffff8000082eae30 x15: 0000000000004c82 [ 528.399797][T10597] x14: 1ffff0000296e06c x13: dfff800000000000 x12: 0000000000080000 [ 528.401971][T10597] x11: 000000000000113d x10: ffff8000248da000 x9 : 000000000000113e [ 528.404189][T10597] x8 : ffff80000a8dfad4 x7 : ffff80000c0f8f68 x6 : 0000000000000000 [ 528.406277][T10597] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800011c155a8 [ 528.408418][T10597] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 528.410562][T10597] Call trace: [ 528.411388][T10597] del_gendisk+0x690/0x724 [ 528.412514][T10597] loop_control_ioctl+0x4a8/0x62c [ 528.413881][T10597] __arm64_sys_ioctl+0x14c/0x1c8 [ 528.415203][T10597] invoke_syscall+0x98/0x2b8 [ 528.416377][T10597] el0_svc_common+0x138/0x258 [ 528.417524][T10597] do_el0_svc+0x58/0x14c [ 528.418554][T10597] el0_svc+0x7c/0x1f0 [ 528.419502][T10597] el0t_64_sync_handler+0x84/0xe4 [ 528.420802][T10597] el0t_64_sync+0x1a0/0x1a4 [ 528.421918][T10597] irq event stamp: 628 [ 528.423062][T10597] hardirqs last enabled at (627): [] kasan_quarantine_put+0xdc/0x204 [ 528.425628][T10597] hardirqs last disabled at (628): [] el1_dbg+0x24/0x80 [ 528.427953][T10597] softirqs last enabled at (570): [] local_bh_enable+0x10/0x34 [ 528.430435][T10597] softirqs last disabled at (568): [] local_bh_disable+0x10/0x34 [ 528.432819][T10597] ---[ end trace 18eea73a9b417b69 ]--- [ 529.618599][ T4027] Bluetooth: hci5: link tx timeout [ 529.620036][ T4027] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 529.622208][ T4027] Bluetooth: hci5: link tx timeout [ 529.623565][ T4027] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa