last executing test programs: 4m42.187593328s ago: executing program 1 (id=2934): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="0adb0000", @ANYRES16=r2, @ANYBLOB="01000000000000000000140000000400018008000600018000000800030009000000"], 0x28}}, 0x20004004) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="0100000000000000000009000000280001801200010069623a73797a6b616c6c6572310000000d0001007564703a73797a3000000000e0000480090001"], 0x11c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x24}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x60000000}, 0x70) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x0, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {}, {{0x6, 0x0, 0xb}, {0x65, 0x0, 0xc}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x7, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x4001, 0x3, 0x238, 0x0, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'vxcan1\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r7], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r6, &(0x7f0000001280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc900004}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, r8, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28000080}, 0x40004) r12 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r12, 0x0, 0x2, &(0x7f0000001340)="c10507c234a6b7a736e40ef23f4def5afeffc93fbe46c76f401a52c67c6f5c81e488b3c2382ee9b73e3300b2d3a75d633d7e871da9cad41d4493b8159dffee4173d44034e31cb3a577f9d683c0c504da171748c99353cd4e89c9b1c63d9053f2efd6c40a0802680674f29cbad327b13996a88711258dc6cee173ced31129e24e3d52b1d9a4765114393d00"/153, 0xfda4) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x41, &(0x7f0000001000)=0x43aa, 0x4) 4m41.53976496s ago: executing program 1 (id=2937): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071120b000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r0, 0x0, 0x24}, 0x10) 4m41.160692685s ago: executing program 1 (id=2938): prlimit64(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='block_plug\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000240)='./file0\x00', 0x10000, &(0x7f0000000340)=ANY=[], 0x1, 0x1c2, &(0x7f0000001680)="$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") r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FIBMAP(r2, 0x2282, &(0x7f00000002c0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) sendmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="f911547157a17c8fcf1f380d32e2f42aa18e0235e0e3ecccf1c66c14b953f6e02426ba5e223a91", 0x27}, {&(0x7f0000000180)="eb220184949c24623ad787ab1e4ada08396e8c1a53f96b04b340c0af35a6a77f06e59d1d7589064fd044686805e36fa29ce294db64c2484353421cb95600d9f8b107e5eaee748e12ae3e6a5290b23a1a70459c87b5598a930b886effcd0aa89a874f35c96a3920311e14abfdcdc3e75653daeff6c1907982", 0x78}, {&(0x7f0000000340)="d7662aadf689a5f7434db8e0a986c1bed3fa93e6cf1ee672bca1582bda2d7fd9c9cb55f965c2bcfce0382ac42c9b439096d2ad64d7e72135db57253fb5fac9feffc0cf13aff9b137f2dfa0e0d19a05bb46b507ac382149ceb29ccb853cbfdd744a8f5675cd27141e707b372507e057de0519dc0f915e3c74421beef76a7c87d19f8fe5cefd6e912e5a23e64c291b8514cb83412e131cf09b027d286ca900ae1a53", 0xa1}], 0x3, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xee01, r3}}}], 0x20}, 0x10) socket$inet(0x2, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$char_usb(r4, &(0x7f0000001840)=""/4090, 0xffa) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000180)=""/128, 0x80}], 0x1, 0xffffffff, 0x0) read$char_usb(r4, &(0x7f0000000240)=""/34, 0x43) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @func={0x2}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000005c0)=""/208, 0x40, 0xd0, 0x1}, 0x20) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) close(r5) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x20000000000000d3, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000100000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000082000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4m38.470929852s ago: executing program 1 (id=2939): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) 4m38.042113641s ago: executing program 1 (id=2940): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[], 0x1, 0x36e, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="2598ccde00000000b70800004e9d00007b8af8ff00000000bfa20000fbff000007020000f8fffffdb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000187b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e8500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x6d}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x6, 0x1, 0xc, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mknod(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./bus\x00') getdents64(0xffffffffffffffff, &(0x7f0000000540)=""/239, 0xef) 4m36.108742796s ago: executing program 1 (id=2942): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r0, 0x0, 0x400000, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(r0, 0x52e, 0x0, 0x0, 0x0, 0x0) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000040)=r1, 0x1) 3m51.032893785s ago: executing program 2 (id=3024): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xa37, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000001840)={0x0, 0x1, "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"}) 3m50.612673711s ago: executing program 2 (id=3027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000", 0xffffffffffffffff}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b81af000000008d674fe69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r2, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000080)={"000c00816800df00", r5, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x2, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r10}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x1, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="40000000010201010000000000020000002c000180060003400000000014000180524cdb9dfb47a0aa08000200000000000c0002800500010000000000000000"], 0x40}}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804000, &(0x7f0000000100), 0x3, 0x4ce, &(0x7f0000000e00)="$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") r12 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r12, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @auto="b8f92416074d3848"}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r12, 0x40086602, &(0x7f0000000080)={@desc={0x80000, 0x0, @desc2}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x28, 0x4, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x20401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x1, [{@private=0xa010100}, {@remote}, {@dev, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop]}}}}}) 3m47.198950518s ago: executing program 2 (id=3030): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1}}, 0x20) 3m46.427870696s ago: executing program 2 (id=3034): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) prctl$PR_GET_FP_MODE(0x2e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000004000010a000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0xff45) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$eJzs3d9rW1UcAPDvTdv96nQdjKE+SGEPTubStfXHBB/mo+hwoO8ztHdlNFlGk461Dtwe3IsvMgQRB+If4LuPw3/Av2KggyGj6IMvkZvedNmatFmXrZn5fOC259x703NPzv2enpOTkACG1mT2oxDxakR8m0Qcajs2GvnByfXz1h5cm8u2JBqNz/5KIsn3tc5P8t/jeeaViPjt64gThc3l1lZWF0vlcrqU56fqlctTtZXVkxcrpYV0Ib00Mzt7+p3Zmfffe7dvdX3z3D8/fHrno9PfHFv7/pd7h28lcSYO5sfa6/EUrrdnJmMyf07G4sxjJ073obBBkuz2BbAjI3mcj0XWBxyKkTzqgf+/ryKiAQypRPzDkGqNA1pz+z7Ng18Y9z9cnwBtrv/o+msjsa85NzqwljwyM8rmuxN9KD8r49c/b9/Ktujf6xAA27p+IyJOjY5u7v+SvP/buVM9nPN4Gfo/eH7uZOOftzqNfwob45/oMP4Z7xC7O7F9/Bfu9aGYrrLx3wcdx78bi1YTI3nupeaYbyy5cLGcZn3byxFxPMb2Zvmt1nNOr91tdDvWPv7Ltqz81lgwv457o3sffcx8qV56mjq3u38j4rWO499ko/2TDu2fPR/neizjaHr79W7Htq//s9X4OeKNju3/cEUr2Xp9cqp5P0y17orN/r559Pdu5e92/bP2P7B1/SeS9vXa2pOX8dO+f9Nux3Z6/+9JPm+m9+T7rpbq9aXpiD3JJ5v3zzx8bCvfOj+r//FjW/d/ne7//RHxRY/1v3nkZtdTB6H955+o/Z88cffjL3/sVn5v7f92M3U839NL/9frBT7NcwcAAAAAAACDphARByMpFDfShUKxuP7+jiNxoFCu1uonLlSXL81H87OyEzFWaK10j7e9H2I6fz9sKz/zWH42Ig5HxHcj+5v54ly1PL/blQcAAAAAAAAAAAAAAAAAAIABMd7l8/+ZP0Z2++qAZ85XfsPw2jb++/FNT8BA8v8fhpf4h+El/mF4iX8YXuIfhpf4h+El/mF4iX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoq3Nnz2ZbY+3BtbksP39lZXmxeuXkfFpbLFaW54pz1aXLxYVqdaGcFueqle3+XrlavTw9E8tXp+pprT5VW1k9X6kuX6qfv1gpLaTn07HnUisAAAAAAAAAAAAAAAAAAAB4sdRWVhdL5XK6JCGxo8ToYFyGRJ8Tu90zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBD/wUAAP//y284sw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$vcsu(&(0x7f0000000180), 0x9, 0x121000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000280)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) mkdir(0x0, 0x94) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) 3m39.845813069s ago: executing program 2 (id=3043): unshare(0x24020400) r0 = syz_io_uring_setup(0x44f, &(0x7f0000000140)={0x0, 0x0, 0x10780}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000740)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00'}) io_uring_enter(r0, 0x42d3e, 0x0, 0x0, 0x0, 0x0) 3m34.048355158s ago: executing program 2 (id=3055): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) prctl$PR_GET_FP_MODE(0x2e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000004000010a000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0xff45) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$eJzs3d9rW1UcAPDvTdv96nQdjKE+SGEPTubStfXHBB/mo+hwoO8ztHdlNFlGk461Dtwe3IsvMgQRB+If4LuPw3/Av2KggyGj6IMvkZvedNmatFmXrZn5fOC259x703NPzv2enpOTkACG1mT2oxDxakR8m0Qcajs2GvnByfXz1h5cm8u2JBqNz/5KIsn3tc5P8t/jeeaViPjt64gThc3l1lZWF0vlcrqU56fqlctTtZXVkxcrpYV0Ib00Mzt7+p3Zmfffe7dvdX3z3D8/fHrno9PfHFv7/pd7h28lcSYO5sfa6/EUrrdnJmMyf07G4sxjJ073obBBkuz2BbAjI3mcj0XWBxyKkTzqgf+/ryKiAQypRPzDkGqNA1pz+z7Ng18Y9z9cnwBtrv/o+msjsa85NzqwljwyM8rmuxN9KD8r49c/b9/Ktujf6xAA27p+IyJOjY5u7v+SvP/buVM9nPN4Gfo/eH7uZOOftzqNfwob45/oMP4Z7xC7O7F9/Bfu9aGYrrLx3wcdx78bi1YTI3nupeaYbyy5cLGcZn3byxFxPMb2Zvmt1nNOr91tdDvWPv7Ltqz81lgwv457o3sffcx8qV56mjq3u38j4rWO499ko/2TDu2fPR/neizjaHr79W7Htq//s9X4OeKNju3/cEUr2Xp9cqp5P0y17orN/r559Pdu5e92/bP2P7B1/SeS9vXa2pOX8dO+f9Nux3Z6/+9JPm+m9+T7rpbq9aXpiD3JJ5v3zzx8bCvfOj+r//FjW/d/ne7//RHxRY/1v3nkZtdTB6H955+o/Z88cffjL3/sVn5v7f92M3U839NL/9frBT7NcwcAAAAAAACDphARByMpFDfShUKxuP7+jiNxoFCu1uonLlSXL81H87OyEzFWaK10j7e9H2I6fz9sKz/zWH42Ig5HxHcj+5v54ly1PL/blQcAAAAAAAAAAAAAAAAAAIABMd7l8/+ZP0Z2++qAZ85XfsPw2jb++/FNT8BA8v8fhpf4h+El/mF4iX8YXuIfhpf4h+El/mF4iX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoq3Nnz2ZbY+3BtbksP39lZXmxeuXkfFpbLFaW54pz1aXLxYVqdaGcFueqle3+XrlavTw9E8tXp+pprT5VW1k9X6kuX6qfv1gpLaTn07HnUisAAAAAAAAAAAAAAAAAAAB4sdRWVhdL5XK6JCGxo8ToYFyGRJ8Tu90zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBD/wUAAP//y284sw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$vcsu(&(0x7f0000000180), 0x9, 0x121000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000280)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) mkdir(0x0, 0x94) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) 3m31.646989718s ago: executing program 4 (id=3061): r0 = landlock_create_ruleset(&(0x7f0000000780)={0x7a63}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = mq_open(&(0x7f0000000480)='!selinuxwk1\x1f\xd0m\xc3\x7f9\xc9\x9e*\rT\x93\xfd\xe2\x91\xef\xaa\x16#j\x97\x8f\xbc\xdeY\x0f\xcc\xc5mV\xcb\x15vm(p\xc9-QZ#\xd2{\x84\xbf\x06\x00\x00\xd9', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000240)={0x0, 0x1, 0x7}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000580)) 3m29.319809283s ago: executing program 4 (id=3063): syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x2, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800804, &(0x7f0000000100)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRES32, @ANYRES32], 0xfe, 0xa15, &(0x7f00000002c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x38}}, 0x0) 3m27.436613871s ago: executing program 4 (id=3065): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 3m21.338943986s ago: executing program 4 (id=3072): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) faccessat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) 3m19.953023926s ago: executing program 4 (id=3075): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000202020005000300000000000900010073797a02"], 0x30}, 0x1, 0x40030000000000}, 0x0) 3m19.326075419s ago: executing program 4 (id=3078): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket$kcm(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4a0, 0x4e8, 0x340, 0xc0, 0xc0, 0x340, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'nicvf0\x00', 'gretap0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pimreg0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@esp={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, 0x0, 0x0, 'bond_slave_1\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@mcast1, [], @ipv6=@dev, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], @ipv6=@remote}}}]}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'gretap0\x00', 'syzkaller0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) write$cgroup_int(0xffffffffffffffff, &(0x7f00000005c0), 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000200000000000011240000000000ae282714803944720000003ff5f5fc9a0d1a4cb2000000000200000000000008020000000000"], 0x0, 0x54}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x4001, 0x3, 0x488, 0x0, 0xb, 0x148, 0x0, 0x148, 0x3f0, 0x240, 0x240, 0x3f0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x2d0, 0x338, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x21, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000100)=0x1, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000e03a0200000018000000000000000000000000000090cd58562a15002c000064a6693bad89000000000018000000000000"], 0x0}, 0x90) r6 = socket$inet(0x2, 0x80001, 0x84) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYRESHEX=r6], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) unshare(0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x1d0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1b2, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f7ab87594b3f"}, 0x0, 0x0, @random, @val, @void, [{0xdd, 0x6, "8b7668a21729"}, {0xdd, 0x66, "d8a062cc132f8c370fffcfbf6c255947985b88cb9f22e02d96f87d9c0a6796487053adb1a2d1f8ed33d6ef7faf4ba99f81c72edefbc742d2d897c0fb6eb2289c22b03871ec6ddb7398d4b5509078903c634145233d8a7a9a2fc09946ff1a847d43452a17ee7a"}, {0xdd, 0xb2, "95e79490e4be3bd5f39a64947fd4f137cfd9c5eca413775fff8b403d1c6824961df673862737c366f53984496ea72bc7f78d843ce303b67336957356a02e1c5bdcbd4acf120d5d44f07910bdee6eabe82f6c76ecc7c98d5a107f6eab471672d7179671906048fe7622486b35f02bac5c2f9f0c923711e82767b10da5a68b7e74d5ed8477aa43553caa8a6a5244b329c5ea5d533697643fd5f3fa33ac9b1eac2c7f88c0d5c6c9594a701e79960dd7d5ab4df3"}, {0xdd, 0x6, "85251095238f"}, {0xdd, 0x60, "a83d63f0d27aa001676fcb9ee526e68baeaffb47b1c3feb502aa94cc0c02fa026b0843067418e349a066eb39770717f632173e6bf4be46c03a8b7d4a3e7be2dd21f3c139c233576a6580ed5368fc27caead9239899776d594603177acb5662b5"}]}}]}, 0x1d0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x11, 0x4, 0x4, 0x8, 0x250}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x16}]}, &(0x7f0000000a00)='syzkaller\x00'}, 0x90) 17.577246162s ago: executing program 0 (id=3384): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfffffffffffffc2e}) 16.844597369s ago: executing program 0 (id=3387): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x11044c6, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") r1 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000400)='./file0\x00', r1, &(0x7f0000000440)='./file1\x00') mkdirat(r1, &(0x7f0000000080)='./file1/../file0\x00', 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0xa00004c4) r3 = open$dir(&(0x7f00000001c0)='./file1/../file0\x00', 0x0, 0x0) mkdirat(r3, &(0x7f00000000c0)='./file0\x00', 0x0) renameat(r1, &(0x7f0000000140)='./file1\x00', r3, &(0x7f0000000200)='./file0\x00') 12.113752745s ago: executing program 0 (id=3392): syz_emit_ethernet(0xda, &(0x7f00000002c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "e408ab", 0xa4, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@srh={0x0, 0x0, 0x4, 0x0, 0x2}], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "b9dc925ed2504d01a7ca319b353407a48d4711818765990586ddcc134860f40c", "0d38dccc45c4f9d4d49339424573967431883573b366f3909a4bcf5ea31d6841c0a54161c73fa117cafc4282c4cc8b43", "6a3f81199c86078117e6283745189f1524d71b8f1fc5ea0e875b660c", {"27dad99a33c39bcffcc37d806f979b66", "7a365ca8959231fb81792b60466d24f6"}}}}}}}}, 0x0) 11.786048163s ago: executing program 3 (id=3394): syz_emit_ethernet(0xda, &(0x7f0000001940)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0xa4, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@routing={0x67}], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ec9623abcc4bd2ceffa36fadcd9330abb76fa7040ef919fc7b0f9b0da2e9e929", "6e35f0c80882f70000c08862205573dd2a5eb2f85b00", "da1274d5285d85f9776ed87dab0d73f66c063c8bc0ea74bd2ef59e05", {"b69bcf4bd1856a7a3a60c503f240ae8f"}}}}}}}}, 0x0) 11.552985758s ago: executing program 0 (id=3395): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") fchownat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) 11.227705438s ago: executing program 3 (id=3396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0xeaa) umount2(0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f00000000c0)={0x28, 0x4}, 0x28) write$FUSE_INIT(r3, &(0x7f0000000240)={0x50, 0x0, r4, {0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) r5 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000040), 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r6, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) 10.694396785s ago: executing program 0 (id=3398): r0 = socket$inet6(0xa, 0x3, 0x7) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) setpriority(0x1, 0x0, 0x8c1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3b}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x3}}, 0xe4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r3, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0}}, 0x48) write$vhost_msg_v2(r3, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000200)=""/115, 0x73, 0x0, 0x0, 0x3}}, 0x48) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB], 0x70}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000140)={'\x00', 0x0, 0x1000, 0x3}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000040)=@raw={0xfe, 0x0, "c1a86dab95c5"}) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000003180), 0x80043, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r6, 0x80045104, &(0x7f0000000000)) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$char_usb(r7, &(0x7f00000031c0)=""/4105, 0x1009) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r8, 0x1, 0x6, @dev}, 0x10) r9 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r9, 0x0, 0x0) 9.232543939s ago: executing program 5 (id=3401): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}]}}}]}, 0x40}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)={'#! ', './file0', [{0x20, '#! '}, {0x20, '#! '}, {0x20, '#! =t\xe0,R\x17\xd3\xb6\xd6\xb8\xec\x9f\x7f\xf0\x94\xa5\xa4\xa7\x92\x1c\xbf\xab\x8a\xe7\xa4\f\xbe\x0e\x19:ps\x12:\xd9B\xde\xe9\x1c\xd1\xfb\xc5\x87%\xb4\xbf+m~\xc5c\x85`<\xea\xac\x88>\xf5\x17\x945G\xb5\xa72z\xd3f%O\x9e\xcf\xc5\xdf\xe3 0#\x01=\xe0\n\xd2y\xf2\xa6\xd8\x97\x02\x00\x00\x00\x00\x00\x00\x00\xb8\xf0\xf5_\xbcl5\x19\xf6\xe3\\\xa4U\xa5\x86\x1dxW\xc4\x0e\xed\xaa\x89m\xb3\xa0\xf4%F\x0ebM\xa74\xcd\xea\xbb\xc1\xcb\x1f\xedE4\\\xcb\xae\x95\xdf\x14\x03\x81|gSTW\xddc\x125\b|\xce\xcen$\xc8'}, {0x20, '\x00'}, {}, {0x20, '+\xcc[-%\xfe$%\xdb]'}, {0x20, '\x00'}, {0x20, '\x00'}]}, 0xcd) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@int, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {0x80000}]}, @var]}, {0x0, [0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x75}, 0x20) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r8, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001c00)=ANY=[@ANYBLOB="c85e0400000000000000130000", @ANYRES16=r8, @ANYBLOB="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"], 0x1370}}, 0x20000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket$inet(0x2, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000a40)={@local, @random="bf7d132b5a64", @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x78, r4, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x38}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x98}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x45c}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x78}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) recvmmsg(r10, &(0x7f0000004180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_int(r10, 0x0, 0x7, &(0x7f0000000140)=0x30, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000012020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001a00000085000000c800000095"], &(0x7f00000005c0)='syzkaller\x00', 0x7, 0x7d, &(0x7f0000000280)=""/125}, 0x90) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 7.871442437s ago: executing program 3 (id=3402): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={&(0x7f0000000200)="4a491680f57a567ed3b37105f328805a0538eb996f11036d52bd20d6810eb501ab60ed0ae3ce739383137d306cec1c1310dbb6d22110f9510dffd1a6ae69149eea85e215869fa74f404ca0f91cdffb9f38bc66424c95d793db35c5cd18d6bfb4ec72beea1c8c7de043c41a4dec897b425739059545d9174a", &(0x7f00000003c0)=""/208, 0x0, &(0x7f0000000700)="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", 0xfffff40d, 0x1}, 0x38) open(0x0, 0x400141042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 6.906008018s ago: executing program 5 (id=3403): mknod(0x0, 0x8001420, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) dup(0xffffffffffffffff) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x10000001}) 6.748954556s ago: executing program 0 (id=3404): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92782f9ffcdb020e6f3baf26d57a000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 6.547156315s ago: executing program 3 (id=3405): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) syz_open_dev$evdev(&(0x7f0000000000), 0xc0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) write(r0, &(0x7f0000000340)="05000000", 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB='trans=virtio,noextend,access=any,cache=fscache,version=9p']) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800}) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x26}) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xe8}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x1de) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=[0x0]) open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/98, 0x62) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x8020, 0x0, 0x1, {0x2}}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0x0) 6.425337609s ago: executing program 5 (id=3406): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000) 5.526027091s ago: executing program 5 (id=3407): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x208, &(0x7f0000000640)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0xff39, 0x3) 5.251507064s ago: executing program 3 (id=3408): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007cc0)=[{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000240)="64c885f9d881", 0x6}], 0x1}], 0x1, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/11, 0xb}}, 0x120) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0c000000a9"], 0xaf) 4.009877186s ago: executing program 5 (id=3409): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x120, 0x111, 0x4b4, 0x120, 0xd4feffff, 0x1f0, 0x20a, 0x278, 0x1f0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'ipvlan0\x00', 'team_slave_0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 3.479505951s ago: executing program 5 (id=3410): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0xa00010, &(0x7f0000000700)=ANY=[@ANYBLOB='nodecompose,decompose\x00nobfrrier,gid=', @ANYRESHEX, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r4, &(0x7f0000000080), 0xffffff1c) r5 = syz_open_procfs(0x0, 0x0) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000000)=ANY=[], 0x31) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r6, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1408}}], 0x1, 0x0) close(r6) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1507, &(0x7f0000001b00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x26e1, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) 0s ago: executing program 3 (id=3411): openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r7}) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 374][T15442] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.095644][ T29] audit: type=1326 audit(1722052091.047:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17982 comm="syz.2.2952" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0325177299 code=0x0 [ 1679.097784][T17503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1679.146102][T15442] usb 5-1: config 0 descriptor?? [ 1679.204794][T17503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.272153][T17503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1679.306173][T17503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.327887][T17503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1679.347088][T17503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.367880][T17503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1679.412038][T17503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.421884][T17503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1679.451184][T17503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.480462][T17503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1679.498772][T17503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.534873][T17503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1679.607556][T17503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1679.631362][T17503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.650749][T17503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1679.662360][T17503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.705447][T17503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1679.728705][T17503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.747990][T17503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1679.813629][T17503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.823491][T17503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1679.861965][T17969] loop4: detected capacity change from 0 to 2048 [ 1679.878191][T17503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.886860][T17987] loop0: detected capacity change from 0 to 128 [ 1679.887994][T17503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1679.888025][T17503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.941311][T17969] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1679.983661][T17503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1679.996388][T17503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.051176][T15442] usb 5-1: USB disconnect, device number 20 [ 1680.064246][T17503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1680.203966][T17503] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.212723][T17503] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.282983][T17503] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.309401][T17503] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.750685][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1681.839721][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1683.542135][T16026] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1683.590397][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1683.625288][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1683.673692][ T3928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1683.681543][ T3928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1684.138378][T16026] usb 1-1: Using ep0 maxpacket: 8 [ 1684.150365][T16026] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1684.171369][T16026] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1684.248611][T18021] NILFS (nullb0): couldn't find nilfs on the device [ 1684.491692][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1684.627295][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1685.032183][T16026] usb 1-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 1685.126932][T16026] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.264735][T16026] usb 1-1: config 0 descriptor?? [ 1685.867416][T16026] usb 1-1: can't set config #0, error -71 [ 1685.885586][T16026] usb 1-1: USB disconnect, device number 63 [ 1686.254993][ T29] audit: type=1326 audit(1722052097.652:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18029 comm="syz.4.2964" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1db2977299 code=0x0 [ 1686.486958][T15078] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1686.526958][T15078] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1686.560347][T15078] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1686.588253][T15078] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1686.600915][T15078] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1686.614780][T15078] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1687.358360][ T46] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1687.769933][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 1687.846452][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1687.956331][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1688.337310][ T46] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1688.346592][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.367650][ T46] usb 1-1: config 0 descriptor?? [ 1688.392116][ T46] usbhid 1-1:0.0: can't add hid device: -22 [ 1688.398194][ T46] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 1688.953732][ T5243] Bluetooth: hci1: command tx timeout [ 1688.973603][T18056] loop4: detected capacity change from 0 to 128 [ 1689.133446][T18046] loop0: detected capacity change from 0 to 1024 [ 1689.577031][T18056] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1689.612747][T18056] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1690.772753][T18075] overlayfs: failed to resolve './file0': -2 [ 1691.218025][ T5243] Bluetooth: hci1: command tx timeout [ 1691.783166][T17416] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1691.785812][T18084] loop5: detected capacity change from 0 to 128 [ 1693.273689][T18092] NILFS (nullb0): couldn't find nilfs on the device [ 1694.896117][ T5243] Bluetooth: hci1: command tx timeout [ 1695.354432][ T2632] usb 1-1: USB disconnect, device number 64 [ 1695.497813][ T5365] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1695.758642][ T29] audit: type=1326 audit(1722052106.425:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18099 comm="syz.3.2978" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3802d77299 code=0x0 [ 1695.760851][ T5365] usb 3-1: Using ep0 maxpacket: 8 [ 1695.903795][T18034] chnl_net:caif_netlink_parms(): no params data found [ 1695.915037][ T5365] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1695.956652][ T5365] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1696.086387][ T5365] usb 3-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 1696.114853][ T5365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.128304][ T5365] usb 3-1: config 0 descriptor?? [ 1696.134837][ T5365] usb 3-1: can't set config #0, error -71 [ 1696.158518][ T5365] usb 3-1: USB disconnect, device number 17 [ 1697.140100][T15078] Bluetooth: hci1: command tx timeout [ 1697.178558][T18034] bridge0: port 1(bridge_slave_0) entered blocking state [ 1697.200359][T18034] bridge0: port 1(bridge_slave_0) entered disabled state [ 1697.814108][T18034] bridge_slave_0: entered allmulticast mode [ 1698.221804][T18133] loop4: detected capacity change from 0 to 128 [ 1698.241432][T18034] bridge_slave_0: entered promiscuous mode [ 1698.308160][T18034] bridge0: port 2(bridge_slave_1) entered blocking state [ 1698.349971][T18034] bridge0: port 2(bridge_slave_1) entered disabled state [ 1698.357253][T18034] bridge_slave_1: entered allmulticast mode [ 1698.419439][T18034] bridge_slave_1: entered promiscuous mode [ 1699.125583][T18034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1699.189480][T18034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1699.401526][T15442] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1699.475026][T18153] batadv_slave_1: entered promiscuous mode [ 1699.607293][T15442] usb 1-1: Using ep0 maxpacket: 32 [ 1699.634773][T18152] batadv_slave_1: left promiscuous mode [ 1699.646220][T15442] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1699.703486][T15442] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1699.726627][T18034] team0: Port device team_slave_0 added [ 1699.733191][T15442] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1699.775932][T15442] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.843744][T18034] team0: Port device team_slave_1 added [ 1699.851134][T15442] usb 1-1: config 0 descriptor?? [ 1699.927872][T15442] usbhid 1-1:0.0: can't add hid device: -22 [ 1699.997746][T15442] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 1700.255834][T18165] loop2: detected capacity change from 0 to 1024 [ 1700.267190][T18165] hfsplus: failed to load catalog file [ 1701.828017][T18148] loop0: detected capacity change from 0 to 1024 [ 1704.543038][T18181] overlayfs: failed to resolve './file0': -2 [ 1704.995513][T18034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1705.111095][T18034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1705.298949][ T5293] usb 1-1: USB disconnect, device number 65 [ 1705.402525][T18034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1705.496164][T18034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1705.550902][T18034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1705.733524][T18034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1706.101732][ T5292] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1706.354526][ T5292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1706.371866][T18034] hsr_slave_0: entered promiscuous mode [ 1706.448108][T18034] hsr_slave_1: entered promiscuous mode [ 1706.453687][ T5292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1706.487206][ T5292] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1706.497476][ T5292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.511506][ T5292] usb 1-1: config 0 descriptor?? [ 1706.520863][T18034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1706.587712][T18034] Cannot create hsr debugfs directory [ 1706.826348][T18200] batadv_slave_1: entered promiscuous mode [ 1706.879194][T18198] batadv_slave_1: left promiscuous mode [ 1707.158707][T18195] loop5: detected capacity change from 0 to 512 [ 1707.253199][ T5292] usb 1-1: language id specifier not provided by device, defaulting to English [ 1707.271769][T18195] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1707.524443][ T5292] uclogic 0003:256C:006D.0025: failed retrieving Huion firmware version: -71 [ 1707.557710][T18195] EXT4-fs (loop5): 1 orphan inode deleted [ 1707.598815][T18195] EXT4-fs (loop5): 1 truncate cleaned up [ 1707.647854][ T5292] uclogic 0003:256C:006D.0025: failed probing parameters: -71 [ 1707.717996][ T5292] uclogic 0003:256C:006D.0025: probe with driver uclogic failed with error -71 [ 1707.749515][T18195] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1707.796605][ T5292] usb 1-1: USB disconnect, device number 66 [ 1708.270069][T18195] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1401: inode #12: block 7: comm syz.5.3005: path /12/bus/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 1709.318364][T18195] EXT4-fs (loop5): Remounting filesystem read-only [ 1709.723907][ T29] audit: type=1326 audit(1722052119.312:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18216 comm="syz.0.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe450f77299 code=0x7ffc0000 [ 1709.832083][T17462] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1709.878203][T18220] loop3: detected capacity change from 0 to 1024 [ 1709.910109][T18220] hfsplus: failed to load catalog file [ 1709.925648][ T29] audit: type=1326 audit(1722052119.358:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18216 comm="syz.0.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe450f77299 code=0x7ffc0000 [ 1710.025643][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1710.032009][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1710.153420][ T29] audit: type=1326 audit(1722052119.377:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18216 comm="syz.0.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fe450f77299 code=0x7ffc0000 [ 1710.293318][T18034] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.339150][ T5292] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1710.371261][ T29] audit: type=1326 audit(1722052119.377:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18216 comm="syz.0.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe450f77299 code=0x7ffc0000 [ 1710.610071][ T5292] usb 3-1: Using ep0 maxpacket: 8 [ 1711.042109][ T5292] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1711.170341][ T5292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.251296][ T5292] usb 3-1: Product: syz [ 1711.255523][ T5292] usb 3-1: Manufacturer: syz [ 1711.350016][ T5292] usb 3-1: SerialNumber: syz [ 1711.423091][ T9995] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1711.435358][ T5292] usb 3-1: config 0 descriptor?? [ 1711.642082][ T9995] usb 5-1: Using ep0 maxpacket: 32 [ 1711.673833][ T9995] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1711.715675][ T9995] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1711.736517][ T9995] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1711.743356][T18034] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.758335][ T9995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.800199][ T9995] usb 5-1: config 0 descriptor?? [ 1711.831088][ T9995] usbhid 5-1:0.0: can't add hid device: -22 [ 1711.950534][ T9995] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 1712.541684][T18223] loop4: detected capacity change from 0 to 1024 [ 1712.949592][T18249] NILFS (nullb0): couldn't find nilfs on the device [ 1713.882423][T18223] EXT4-fs warning (device loop4): ext4_multi_mount_protect:397: Unable to create kmmpd thread for loop4. [ 1714.621680][ T5292] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1714.752294][T14381] usb 5-1: USB disconnect, device number 21 [ 1715.212245][ T5292] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1715.317084][T18260] netlink: 'syz.3.3021': attribute type 9 has an invalid length. [ 1715.327065][T18260] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3021'. [ 1715.329932][T18034] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.361834][ T5292] dib0700: firmware download failed at 7 with -22 [ 1715.445545][ T5292] usb 3-1: USB disconnect, device number 18 [ 1715.856799][T16026] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1715.940053][T18034] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.108695][T16026] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1716.132279][T16026] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1716.147223][T18263] netlink: 'syz.3.3021': attribute type 9 has an invalid length. [ 1716.189098][ T29] audit: type=1326 audit(1722052125.253:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18278 comm="syz.4.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db2977299 code=0x7ffc0000 [ 1716.215218][T18263] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3021'. [ 1716.232349][T16026] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1716.300396][T16026] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.350543][ T29] audit: type=1326 audit(1722052125.253:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18278 comm="syz.4.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db2977299 code=0x7ffc0000 [ 1716.378454][T16026] usb 6-1: config 0 descriptor?? [ 1717.428517][T18286] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3027'. [ 1717.926148][T18285] loop2: detected capacity change from 0 to 512 [ 1718.198460][ T29] audit: type=1326 audit(1722052125.271:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18278 comm="syz.4.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f1db2977299 code=0x7ffc0000 [ 1718.867622][ T29] audit: type=1326 audit(1722052125.271:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18278 comm="syz.4.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db2977299 code=0x7ffc0000 [ 1719.014529][T18285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1719.027205][T18285] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1719.105571][T16026] usbhid 6-1:0.0: can't add hid device: -71 [ 1719.146625][T16026] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1719.218066][T16026] usb 6-1: USB disconnect, device number 16 [ 1719.545344][T17460] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1720.169387][T18034] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1720.307465][T18034] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1720.451868][T18034] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1720.557932][T18309] netlink: 'syz.3.3032': attribute type 1 has an invalid length. [ 1720.607285][T18309] netlink: 'syz.3.3032': attribute type 4 has an invalid length. [ 1720.647885][T18309] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.3032'. [ 1720.654352][T18315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3033'. [ 1720.670351][T18315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3033'. [ 1720.747867][T18034] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1720.800090][ T46] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1721.059957][ T2632] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1721.070141][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 1721.221604][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1721.318192][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1721.342459][ T2632] usb 5-1: Using ep0 maxpacket: 8 [ 1721.411133][ T46] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1721.429834][ T2632] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1721.439010][ T2632] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.468999][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.477345][ T2632] usb 5-1: Product: syz [ 1721.513398][ T2632] usb 5-1: Manufacturer: syz [ 1721.539221][ T46] usb 3-1: config 0 descriptor?? [ 1721.591103][ T2632] usb 5-1: SerialNumber: syz [ 1721.608798][ T46] usbhid 3-1:0.0: can't add hid device: -22 [ 1721.668450][ T2632] usb 5-1: config 0 descriptor?? [ 1721.689846][ T46] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 1722.238185][T18312] loop2: detected capacity change from 0 to 1024 [ 1722.308434][T18328] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1722.314993][T18328] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1722.430230][T18328] vhci_hcd vhci_hcd.0: Device attached [ 1723.160615][T18312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1723.219282][T18034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1723.287487][ T29] audit: type=1326 audit(1722052131.821:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18335 comm="syz.0.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe450f77299 code=0x7ffc0000 [ 1723.454073][ T29] audit: type=1326 audit(1722052131.821:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18335 comm="syz.0.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe450f77299 code=0x7ffc0000 [ 1723.584676][T18034] 8021q: adding VLAN 0 to HW filter on device team0 [ 1724.125535][T16026] usb 16-1: SetAddress Request (2) to port 0 [ 1725.059128][ T29] audit: type=1326 audit(1722052131.904:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18335 comm="syz.0.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fe450f77299 code=0x7ffc0000 [ 1725.090041][T18334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3038'. [ 1725.099450][T16026] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1725.283654][T18330] vhci_hcd: connection closed [ 1725.315598][T10312] vhci_hcd: stop threads [ 1725.421053][T10312] vhci_hcd: release socket [ 1725.508984][ T5365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1725.516324][ T5365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1725.539757][T10312] vhci_hcd: disconnect device [ 1725.576557][ T29] audit: type=1326 audit(1722052131.904:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18335 comm="syz.0.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe450f77299 code=0x7ffc0000 [ 1725.782750][ T2632] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1725.805712][ T2632] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1725.815722][ T2632] dib0700: firmware download failed at 7 with -22 [ 1725.839068][ T2632] usb 5-1: USB disconnect, device number 22 [ 1726.850076][T10274] usb 3-1: USB disconnect, device number 19 [ 1726.987620][T17460] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 1726.996399][ T5293] bridge0: port 2(bridge_slave_1) entered blocking state [ 1727.005959][ T5293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1727.122550][T17460] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 1727.152483][T14381] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1727.192837][T17460] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 1727.268892][T17460] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 1727.289129][T18353] netlink: 'syz.4.3044': attribute type 9 has an invalid length. [ 1727.327173][T17460] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 1727.393414][T14381] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1727.423955][T18034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1727.435067][T18353] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3044'. [ 1727.460121][T17460] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 1727.502717][T14381] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1727.593708][T14381] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1727.634839][T17460] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 1727.695746][T14381] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.723735][T17460] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 1727.733263][T14381] usb 6-1: config 0 descriptor?? [ 1727.882982][T18362] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3042'. [ 1728.008286][T18362] loop0: detected capacity change from 0 to 512 [ 1728.533764][T17460] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 1728.609559][T18358] netlink: 'syz.4.3044': attribute type 9 has an invalid length. [ 1728.630873][T17460] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 1728.715791][T18358] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3044'. [ 1728.906577][T14381] usb 6-1: can't set config #0, error -71 [ 1728.990515][T14381] usb 6-1: USB disconnect, device number 17 [ 1729.754188][T18377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3049'. [ 1729.763218][T18377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3049'. [ 1729.969310][T18034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1730.064828][T18383] loop4: detected capacity change from 0 to 512 [ 1730.135310][T18383] ext4: Unknown parameter 'noacl' [ 1730.154439][T17460] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1731.272425][T16026] usb 16-1: device descriptor read/8, error -110 [ 1732.606820][T16026] usb usb16-port1: attempt power cycle [ 1732.782975][T10312] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.909814][T18385] loop5: detected capacity change from 0 to 1024 [ 1733.036885][T18395] loop0: detected capacity change from 0 to 128 [ 1733.162777][T18385] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1733.745849][T18400] loop3: detected capacity change from 0 to 40427 [ 1733.759367][T16026] usb usb16-port1: unable to enumerate USB device [ 1733.787630][T18400] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1733.795394][T18400] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1733.881858][T18400] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1734.088883][T18400] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1734.096065][T18400] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1734.700362][T17462] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1734.723771][T10312] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.134742][T10312] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.637297][T18418] loop5: detected capacity change from 0 to 40427 [ 1735.677799][T18418] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1735.685609][T18418] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1735.806473][T18418] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1735.878457][T18034] veth0_vlan: entered promiscuous mode [ 1736.182883][T18034] veth1_vlan: entered promiscuous mode [ 1736.220628][T18418] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1736.228085][T18418] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1736.260983][T18423] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3059'. [ 1736.294280][T18423] loop0: detected capacity change from 0 to 512 [ 1736.520739][T18427] cannot load conntrack support for proto=3 [ 1736.666401][T10312] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1737.077707][T17503] syz-executor: attempt to access beyond end of device [ 1737.077707][T17503] loop3: rw=2051, sector=49152, nr_sectors = 4096 limit=40427 [ 1737.095994][T17503] F2FS-fs (loop3): Issue discard(6144, 6144, 512) failed, ret: -5 [ 1737.541901][T18034] veth0_macvtap: entered promiscuous mode [ 1737.597145][T18034] veth1_macvtap: entered promiscuous mode [ 1737.823318][T18431] loop4: detected capacity change from 0 to 1764 [ 1737.986893][T18034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1738.019320][T18034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.068498][T18034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1738.132412][T18034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.195544][T18034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1738.231149][T18034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.296293][T18034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1738.330088][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1738.343587][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1738.361545][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1738.383947][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1738.401856][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1738.403983][T18034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.422645][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1738.558290][T18034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1738.612192][T18034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.685813][T18034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1738.730777][T18034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.750749][T18034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1738.784902][T18034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.815866][T18034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1738.826314][T18034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.889647][T18034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1738.931990][T18431] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3063'. [ 1739.134714][T18034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1739.199959][T18034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.250227][T18034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1739.303611][T18034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.336192][T18034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1739.346733][T18034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.422933][T18034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1739.433417][T18034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.531430][T18034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1739.541892][T18034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.607159][T18034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1739.661396][T18034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.671259][T18034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1739.727701][T18034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.761866][T18034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1739.794410][T18034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.843966][T18034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1739.902457][T10312] bridge_slave_1: left allmulticast mode [ 1739.908137][T10312] bridge_slave_1: left promiscuous mode [ 1739.986857][T10312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1740.095064][T10312] bridge_slave_0: left allmulticast mode [ 1740.100744][T10312] bridge_slave_0: left promiscuous mode [ 1740.141141][T10312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1740.557822][T18450] loop0: detected capacity change from 0 to 512 [ 1740.585189][T18450] ext4: Unknown parameter 'noacl' [ 1740.713913][T15078] Bluetooth: hci2: command tx timeout [ 1742.429179][T16040] IPVS: starting estimator thread 0... [ 1742.529361][T18456] IPVS: using max 15 ests per chain, 36000 per kthread [ 1742.958605][T18458] IPVS: rr: SCTP 127.0.0.1:0 - no destination available [ 1743.060445][T15078] Bluetooth: hci2: command tx timeout [ 1743.410594][T18458] syz.0.3069 (18458) used greatest stack depth: 20080 bytes left [ 1743.987384][T10312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1744.019311][T18460] loop0: detected capacity change from 0 to 128 [ 1744.041654][T10312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1744.077122][T10312] bond0 (unregistering): Released all slaves [ 1745.267346][T18034] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1745.341594][T15078] Bluetooth: hci2: command tx timeout [ 1745.395802][T18034] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1745.404581][T18034] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1745.536715][T18034] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1746.581440][T18471] loop0: detected capacity change from 0 to 2048 [ 1747.101081][T18471] loop0: detected capacity change from 0 to 2048 [ 1747.115861][T18479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3075'. [ 1747.165192][T18471] udf: Unknown parameter 'uessi' [ 1747.326864][T18481] loop5: detected capacity change from 0 to 1764 [ 1747.567779][T15078] Bluetooth: hci2: command tx timeout [ 1747.733785][T18481] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3076'. [ 1747.875164][T18487] netlink: 'syz.4.3078': attribute type 9 has an invalid length. [ 1747.935787][T18487] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3078'. [ 1748.346167][T15078] Bluetooth: Unexpected continuation frame (len 18) [ 1748.687437][T10312] hsr_slave_0: left promiscuous mode [ 1748.868175][T10312] hsr_slave_1: left promiscuous mode [ 1748.967150][T10312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1749.010376][T10312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1749.118042][T10312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1749.171849][T10312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1749.247899][T18509] loop5: detected capacity change from 0 to 2048 [ 1749.323043][T18514] loop0: detected capacity change from 0 to 164 [ 1749.347829][T18509] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1749.390396][T18517] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1749.408225][T18517] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1749.418528][T18517] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1749.438609][T18517] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1749.450397][T18517] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1749.461351][T18517] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1749.544884][ T29] audit: type=1800 audit(1722052156.046:460): pid=18509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3081" name="bus" dev="loop5" ino=1357 res=0 errno=0 [ 1749.576682][T10312] veth1_macvtap: left promiscuous mode [ 1749.637103][T10312] veth0_macvtap: left promiscuous mode [ 1749.661510][T10312] veth1_vlan: left promiscuous mode [ 1749.693165][T10312] veth0_vlan: left promiscuous mode [ 1749.997396][T18517] Bluetooth: hci0: command tx timeout [ 1751.087771][T18517] Bluetooth: hci3: command 0x0406 tx timeout [ 1751.731258][T15078] Bluetooth: hci4: command tx timeout [ 1752.557474][T18535] loop5: detected capacity change from 0 to 40427 [ 1752.569449][T18535] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1752.577315][T18535] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1752.616720][T18535] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1752.734135][T18535] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1752.741765][T18535] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1753.454820][T10312] team0 (unregistering): Port device team_slave_1 removed [ 1753.643174][T10312] team0 (unregistering): Port device team_slave_0 removed [ 1753.656386][T17462] syz-executor: attempt to access beyond end of device [ 1753.656386][T17462] loop5: rw=2051, sector=49152, nr_sectors = 4096 limit=40427 [ 1753.688051][T17462] F2FS-fs (loop5): Issue discard(6144, 6144, 512) failed, ret: -5 [ 1753.981431][T15078] Bluetooth: hci4: command tx timeout [ 1755.620452][T18544] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3088'. [ 1755.744314][T18544] loop5: detected capacity change from 0 to 512 [ 1756.042160][T18544] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1756.056662][T18544] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1756.244016][T18517] Bluetooth: hci4: command tx timeout [ 1756.583368][T18517] Bluetooth: hci7: command 0x0406 tx timeout [ 1756.702227][T18498] netlink: 'syz.4.3078': attribute type 9 has an invalid length. [ 1756.767703][T18498] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3078'. [ 1756.805619][T17462] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1758.183091][T18553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3090'. [ 1758.310036][T18553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3090'. [ 1758.496795][T15078] Bluetooth: hci4: command tx timeout [ 1758.837555][T14380] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1759.034409][ T9994] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1759.068286][T14380] usb 1-1: config 0 has an invalid interface number: 217 but max is 1 [ 1759.098160][T14380] usb 1-1: config 0 has no interface number 1 [ 1759.126582][T14380] usb 1-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice=1f.44 [ 1759.190417][T14380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.204032][T18574] loop5: detected capacity change from 0 to 1764 [ 1759.229309][T14380] usb 1-1: config 0 descriptor?? [ 1759.243822][T14380] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628f [ 1759.292810][ T9994] usb 4-1: Using ep0 maxpacket: 8 [ 1759.332365][T18434] chnl_net:caif_netlink_parms(): no params data found [ 1759.339520][ T9994] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1759.381412][ T9994] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1759.419806][T18574] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3097'. [ 1759.436417][ T9994] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1759.477905][ T9994] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1759.527479][T14380] gspca_sn9c20x: Write register 1000 failed -71 [ 1759.531347][ T9994] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1759.556728][T14380] gspca_sn9c20x: Device initialization failed [ 1759.562949][T14380] gspca_sn9c20x 1-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 1759.613225][ T9994] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1759.652136][ T9994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.659224][T14380] usb 1-1: USB disconnect, device number 67 [ 1760.394581][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1760.412487][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1760.425502][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1760.437291][ T5365] usb 4-1: USB disconnect, device number 15 [ 1760.445678][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1760.463793][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1760.471487][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1760.870735][T10312] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1761.251224][T18594] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3099'. [ 1761.376450][T18594] loop0: detected capacity change from 0 to 512 [ 1762.153211][ T5243] Bluetooth: hci0: command 0x0406 tx timeout [ 1762.280466][T18599] loop5: detected capacity change from 0 to 128 [ 1762.845013][T18517] Bluetooth: hci1: command tx timeout [ 1763.175216][T18617] loop3: detected capacity change from 0 to 1024 [ 1763.186220][T18618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3105'. [ 1763.195129][T18618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3105'. [ 1763.224416][T10312] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1763.390939][T18617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1763.551475][T18623] netlink: 'syz.5.3106': attribute type 9 has an invalid length. [ 1763.560919][T18623] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.3106'. [ 1763.583605][T18603] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1763.654161][T18603] xt_TCPMSS: Only works on TCP SYN packets [ 1763.879155][T10312] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1764.029126][T17503] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1764.259949][T18434] bridge0: port 1(bridge_slave_0) entered blocking state [ 1764.291452][T18434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1764.312991][T18434] bridge_slave_0: entered allmulticast mode [ 1764.321636][T18434] bridge_slave_0: entered promiscuous mode [ 1764.451247][T18633] loop3: detected capacity change from 0 to 1764 [ 1764.466146][T10312] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1764.564928][T18434] bridge0: port 2(bridge_slave_1) entered blocking state [ 1764.586048][T18434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1764.596519][T18434] bridge_slave_1: entered allmulticast mode [ 1764.605404][T18434] bridge_slave_1: entered promiscuous mode [ 1764.625135][T18633] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3107'. [ 1764.733963][T18626] netlink: 'syz.5.3106': attribute type 9 has an invalid length. [ 1764.771589][T18626] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.3106'. [ 1764.817347][T18516] chnl_net:caif_netlink_parms(): no params data found [ 1765.081617][T18517] Bluetooth: hci1: command tx timeout [ 1765.249537][T18434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1765.270923][T18434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1766.156731][T18650] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3112'. [ 1766.282382][T18650] loop0: detected capacity change from 0 to 512 [ 1766.829318][T18652] loop5: detected capacity change from 0 to 128 [ 1766.866111][T18434] team0: Port device team_slave_0 added [ 1767.313027][T18434] team0: Port device team_slave_1 added [ 1767.336247][T18517] Bluetooth: hci1: command tx timeout [ 1767.940367][T18516] bridge0: port 1(bridge_slave_0) entered blocking state [ 1767.965742][T18516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1767.992840][T18516] bridge_slave_0: entered allmulticast mode [ 1768.046903][T18516] bridge_slave_0: entered promiscuous mode [ 1768.102211][T18665] netlink: 'syz.5.3116': attribute type 4 has an invalid length. [ 1768.297924][T18667] netlink: 'syz.5.3116': attribute type 4 has an invalid length. [ 1768.405682][T18680] netlink: 'syz.0.3121': attribute type 9 has an invalid length. [ 1768.441951][T18680] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3121'. [ 1768.453040][T18668] netlink: 'syz.5.3116': attribute type 2 has an invalid length. [ 1768.454291][T18668] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1768.500198][T10312] bridge_slave_1: left allmulticast mode [ 1768.500235][T10312] bridge_slave_1: left promiscuous mode [ 1768.500578][T10312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1768.570803][T10312] bridge_slave_0: left allmulticast mode [ 1768.570841][T10312] bridge_slave_0: left promiscuous mode [ 1768.571195][T10312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1769.592013][T18517] Bluetooth: hci1: command tx timeout [ 1770.496224][T10312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1770.527847][T10312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1770.556314][T10312] bond0 (unregistering): Released all slaves [ 1770.612641][T18516] bridge0: port 2(bridge_slave_1) entered blocking state [ 1770.619902][T18516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1770.642635][T18516] bridge_slave_1: entered allmulticast mode [ 1770.660348][T18516] bridge_slave_1: entered promiscuous mode [ 1770.768476][T18434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1770.783630][T18434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1770.814816][T18434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1770.999915][T10312] hsr_slave_0: left promiscuous mode [ 1771.011918][T10312] hsr_slave_1: left promiscuous mode [ 1771.018743][T10312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1771.042796][T10312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1771.053662][T10312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1771.061684][T10312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1771.109888][T10312] veth1_macvtap: left promiscuous mode [ 1771.115668][T10312] veth0_macvtap: left promiscuous mode [ 1771.121618][T10312] veth1_vlan: left promiscuous mode [ 1771.127297][T10312] veth0_vlan: left promiscuous mode [ 1772.605086][T10312] team0 (unregistering): Port device team_slave_1 removed [ 1772.719856][T10312] team0 (unregistering): Port device team_slave_0 removed [ 1773.930386][T18434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1773.937383][T18434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1773.963551][T18434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1774.047106][T18683] netlink: 'syz.0.3121': attribute type 9 has an invalid length. [ 1774.054869][T18683] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3121'. [ 1774.064830][T18516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1774.131275][T18516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1774.787721][T18706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3126'. [ 1774.839154][T18706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3126'. [ 1775.006427][T18434] hsr_slave_0: entered promiscuous mode [ 1775.071577][T18434] hsr_slave_1: entered promiscuous mode [ 1775.096360][T18434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1775.130863][T18434] Cannot create hsr debugfs directory [ 1775.222174][T18516] team0: Port device team_slave_0 added [ 1775.353320][T18720] loop0: detected capacity change from 0 to 128 [ 1775.604309][T18516] team0: Port device team_slave_1 added [ 1776.572943][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1776.582014][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1776.711206][T18730] netlink: 'syz.3.3132': attribute type 2 has an invalid length. [ 1776.724927][T18730] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1776.927247][T18727] netlink: 'syz.3.3132': attribute type 4 has an invalid length. [ 1777.099387][T18585] chnl_net:caif_netlink_parms(): no params data found [ 1777.187668][T18725] netlink: 'syz.3.3132': attribute type 4 has an invalid length. [ 1777.403785][T18516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1777.447953][T18516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1777.567051][T18516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1777.701296][T18516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1777.719606][T18516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1777.840246][T18516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1778.393274][T18757] loop0: detected capacity change from 0 to 1024 [ 1778.760137][T18757] xt_TCPMSS: Only works on TCP SYN packets [ 1779.097105][T18516] hsr_slave_0: entered promiscuous mode [ 1779.203465][T18516] hsr_slave_1: entered promiscuous mode [ 1779.263352][T18516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1779.270948][T18516] Cannot create hsr debugfs directory [ 1779.544101][T18775] loop5: detected capacity change from 0 to 128 [ 1779.627874][T18775] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1779.663476][T18775] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1781.825692][T17462] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1782.071334][ T46] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1782.086623][T18585] bridge0: port 1(bridge_slave_0) entered blocking state [ 1782.107962][T18585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1782.125134][T18585] bridge_slave_0: entered allmulticast mode [ 1782.167148][T18585] bridge_slave_0: entered promiscuous mode [ 1782.187620][T18788] netlink: 'syz.0.3148': attribute type 4 has an invalid length. [ 1782.289847][T18789] netlink: 'syz.0.3148': attribute type 4 has an invalid length. [ 1782.306810][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 1782.340236][T18790] netlink: 'syz.0.3148': attribute type 2 has an invalid length. [ 1782.350047][ T46] usb 4-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1782.371620][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.379651][ T46] usb 4-1: Product: syz [ 1782.394226][T18790] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1782.410601][ T46] usb 4-1: Manufacturer: syz [ 1782.425704][ T46] usb 4-1: SerialNumber: syz [ 1782.445202][ T46] usb 4-1: config 0 descriptor?? [ 1782.741594][ T3928] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.094050][T18809] loop5: detected capacity change from 0 to 1024 [ 1783.410585][T18809] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1783.655062][T18809] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1783.727620][T18819] syz.0.3157[18819] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1783.727939][T18819] syz.0.3157[18819] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1783.805347][T18809] xt_TCPMSS: Only works on TCP SYN packets [ 1783.832418][T18819] syz.0.3157[18819] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1783.832661][T18819] syz.0.3157[18819] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1783.998068][T18585] bridge0: port 2(bridge_slave_1) entered blocking state [ 1784.098649][T18585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1784.157561][T18585] bridge_slave_1: entered allmulticast mode [ 1784.220439][T18585] bridge_slave_1: entered promiscuous mode [ 1784.274701][T17462] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1784.565038][ T46] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1784.627642][ T46] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1784.635889][ T46] dib0700: firmware download failed at 7 with -22 [ 1784.687021][ T46] usb 4-1: USB disconnect, device number 16 [ 1784.718608][ T3928] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.010501][T18585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1785.294290][T18832] loop5: detected capacity change from 0 to 2048 [ 1785.325795][ T3928] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.389223][T18585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1785.418614][T18832] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1785.463834][T18834] loop0: detected capacity change from 0 to 128 [ 1785.538803][T18832] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1786.615780][ T3928] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.971425][T17462] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1787.243793][T18585] team0: Port device team_slave_0 added [ 1787.370709][T18849] netlink: 'syz.5.3165': attribute type 4 has an invalid length. [ 1787.436521][T18849] netlink: 'syz.5.3165': attribute type 2 has an invalid length. [ 1788.562447][T18850] loop3: detected capacity change from 0 to 40427 [ 1788.597020][T18849] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1788.626858][T18850] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 1788.633495][T18850] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1788.706329][T18850] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1788.850082][T18850] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1788.857347][T18850] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1788.886621][T18585] team0: Port device team_slave_1 added [ 1788.912410][T18846] netlink: 'syz.5.3165': attribute type 4 has an invalid length. [ 1788.938790][ C1] eth0: bad gso: type: 1, size: 1408 [ 1788.949402][T17503] syz-executor: attempt to access beyond end of device [ 1788.949402][T17503] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1789.049606][T17503] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1789.654750][T18863] loop0: detected capacity change from 0 to 1024 [ 1789.889661][T18860] loop5: detected capacity change from 0 to 40427 [ 1789.903918][T18860] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1789.911756][T18860] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1789.968004][T18860] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1790.066707][T18860] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1790.073895][T18860] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1790.512457][T18585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1790.533926][T18585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1790.602394][T18862] xt_TCPMSS: Only works on TCP SYN packets [ 1790.731281][T18585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1790.808124][T18585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1790.815079][T18585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1790.952908][T18585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1791.100016][T18434] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1792.606615][T17462] syz-executor: attempt to access beyond end of device [ 1792.606615][T17462] loop5: rw=2051, sector=49152, nr_sectors = 4096 limit=40427 [ 1792.738275][T17462] F2FS-fs (loop5): Issue discard(6144, 6144, 512) failed, ret: -5 [ 1793.111810][T18434] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1793.428467][ T9995] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1793.602555][T18434] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1793.674198][ T9995] usb 1-1: Using ep0 maxpacket: 8 [ 1793.680548][T18434] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1793.697179][ T9995] usb 1-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1793.731767][ T9995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.764309][ T9995] usb 1-1: Product: syz [ 1793.768523][ T9995] usb 1-1: Manufacturer: syz [ 1793.808969][ T9995] usb 1-1: SerialNumber: syz [ 1793.852576][ T9995] usb 1-1: config 0 descriptor?? [ 1793.944893][T18585] hsr_slave_0: entered promiscuous mode [ 1794.014606][T18585] hsr_slave_1: entered promiscuous mode [ 1794.028018][T18585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1794.060270][T18585] Cannot create hsr debugfs directory [ 1794.177192][ T3928] bridge_slave_1: left allmulticast mode [ 1794.182884][ T3928] bridge_slave_1: left promiscuous mode [ 1794.244401][ T3928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1794.413435][ T3928] bridge_slave_0: left allmulticast mode [ 1794.475513][ T3928] bridge_slave_0: left promiscuous mode [ 1794.504305][ T3928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1794.829762][T14379] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1795.065621][T14379] usb 4-1: Using ep0 maxpacket: 16 [ 1795.090737][T14379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1795.157742][T14379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1795.205731][T14379] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1795.254816][T14379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.331468][T14379] usb 4-1: config 0 descriptor?? [ 1796.042754][T14379] uclogic 0003:5543:0781.0026: No inputs registered, leaving [ 1796.109966][T14379] uclogic 0003:5543:0781.0026: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.3-1/input0 [ 1796.249711][T14379] usb 4-1: USB disconnect, device number 17 [ 1797.233860][T18906] loop5: detected capacity change from 0 to 128 [ 1797.312491][T18906] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1797.353003][T18906] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1798.650186][T18916] loop3: detected capacity change from 0 to 256 [ 1798.881138][T18918] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1799.171285][ T3928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1799.195286][ T3928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1799.243385][ T3928] bond0 (unregistering): Released all slaves [ 1799.687809][ T9995] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1799.701248][ T9995] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1799.718310][ T9995] dib0700: firmware download failed at 7 with -22 [ 1800.914995][ T9994] usb 1-1: USB disconnect, device number 68 [ 1801.128794][T17462] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1801.955828][T18927] loop0: detected capacity change from 0 to 40427 [ 1805.042240][ T5243] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1805.054596][ T5243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1805.076536][ T5243] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1805.106297][ T5243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1805.116238][ T5243] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1805.123789][ T5243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1805.922203][T18516] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1805.965348][T18516] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1806.176291][ T3928] hsr_slave_0: left promiscuous mode [ 1806.209128][ T3928] hsr_slave_1: left promiscuous mode [ 1806.384676][ T3928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1806.392148][ T3928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1806.590531][ T46] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1806.624154][ T3928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1806.634351][ T3928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1807.023790][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 1807.488186][T18517] Bluetooth: hci3: command tx timeout [ 1807.607214][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1807.632620][T18960] loop5: detected capacity change from 0 to 1024 [ 1807.648916][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1807.683234][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1807.711294][ T46] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1807.786712][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.817564][ T3928] veth1_macvtap: left promiscuous mode [ 1807.863477][ T46] usb 1-1: config 0 descriptor?? [ 1807.869171][ T3928] veth0_macvtap: left promiscuous mode [ 1807.875313][ T3928] veth1_vlan: left promiscuous mode [ 1807.888219][ T3928] veth0_vlan: left promiscuous mode [ 1808.038444][T18960] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1808.238842][ T5365] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1808.336837][ T46] koneplus 0003:1E7D:2E22.0027: item fetching failed at offset 1/2 [ 1808.374909][ T46] koneplus 0003:1E7D:2E22.0027: parse failed [ 1808.408665][ T46] koneplus 0003:1E7D:2E22.0027: probe with driver koneplus failed with error -22 [ 1808.463503][ T5365] usb 4-1: Using ep0 maxpacket: 8 [ 1808.486624][T18960] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1808.516660][ T5365] usb 4-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1808.540868][T18960] xt_TCPMSS: Only works on TCP SYN packets [ 1808.575518][ T5365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1808.616748][ T5365] usb 4-1: Product: syz [ 1808.637404][ T5365] usb 4-1: Manufacturer: syz [ 1808.642035][ T5365] usb 4-1: SerialNumber: syz [ 1808.672048][ T46] usb 1-1: USB disconnect, device number 69 [ 1808.709572][ T5365] usb 4-1: config 0 descriptor?? [ 1808.934472][T17462] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1810.024489][T18517] Bluetooth: hci3: command tx timeout [ 1812.261925][T18517] Bluetooth: hci3: command tx timeout [ 1814.559148][T18517] Bluetooth: hci3: command tx timeout [ 1814.569140][ T5365] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1814.607193][ T5365] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1814.694442][ T5365] dib0700: firmware download failed at 7 with -22 [ 1814.817437][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1814.830150][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1814.860430][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1814.887923][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1814.897241][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1814.919607][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1814.946320][ T9995] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1815.173673][ T9995] usb 1-1: Using ep0 maxpacket: 32 [ 1815.187171][ T9995] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0105, bcdDevice=43.55 [ 1815.208203][ T9995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.216242][ T9995] usb 1-1: Product: syz [ 1815.226694][ T9995] usb 1-1: Manufacturer: syz [ 1815.238726][ T9995] usb 1-1: SerialNumber: syz [ 1815.241099][ T3928] team0 (unregistering): Port device team_slave_1 removed [ 1815.262621][ T9995] usb 1-1: config 0 descriptor?? [ 1815.271123][ T9995] kvaser_usb 1-1:0.0: Cannot get usb endpoint(s) [ 1815.446785][ T3928] team0 (unregistering): Port device team_slave_0 removed [ 1815.501696][ T46] usb 1-1: USB disconnect, device number 70 [ 1816.930206][T18516] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1817.206139][ T5243] Bluetooth: hci2: command tx timeout [ 1817.300450][ T5290] usb 4-1: USB disconnect, device number 18 [ 1817.613578][T18994] loop5: detected capacity change from 0 to 1024 [ 1819.366344][T19006] loop3: detected capacity change from 0 to 1024 [ 1819.455570][ T5243] Bluetooth: hci2: command tx timeout [ 1819.490253][T19017] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3202'. [ 1819.518038][T19017] loop0: detected capacity change from 0 to 512 [ 1820.625785][T19006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1820.824195][T19006] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1821.036301][T19006] xt_TCPMSS: Only works on TCP SYN packets [ 1821.434941][T19006] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1821.720935][ T5243] Bluetooth: hci2: command tx timeout [ 1824.302458][ T5243] Bluetooth: hci2: command tx timeout [ 1824.532819][T18947] chnl_net:caif_netlink_parms(): no params data found [ 1824.673728][T18585] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1825.200772][ T46] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1825.461161][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 1825.521986][ T46] usb 1-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1825.570435][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.613839][ T46] usb 1-1: Product: syz [ 1825.655985][ T46] usb 1-1: Manufacturer: syz [ 1825.660637][ T46] usb 1-1: SerialNumber: syz [ 1825.715914][ T46] usb 1-1: config 0 descriptor?? [ 1826.533586][T18988] chnl_net:caif_netlink_parms(): no params data found [ 1826.648020][T18947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1827.180809][T18947] bridge0: port 1(bridge_slave_0) entered disabled state [ 1827.213683][T19077] loop5: detected capacity change from 0 to 40427 [ 1827.264556][T19077] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1827.272550][T19077] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1827.282039][T18947] bridge_slave_0: entered allmulticast mode [ 1827.350974][T18947] bridge_slave_0: entered promiscuous mode [ 1827.366867][T18517] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1827.383082][T18517] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1827.402751][T18517] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1827.438505][T19077] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1827.467285][T18517] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1827.476343][T18517] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1827.485999][T18517] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1827.618702][T19077] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1827.625814][T19077] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1829.812605][ T5243] Bluetooth: hci4: command tx timeout [ 1830.555830][ T46] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1830.570593][ T46] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1830.620687][ T46] dib0700: firmware download failed at 7 with -22 [ 1830.707475][ T46] usb 1-1: USB disconnect, device number 71 [ 1830.762601][T18947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1830.769855][T18947] bridge0: port 2(bridge_slave_1) entered disabled state [ 1830.829014][T18947] bridge_slave_1: entered allmulticast mode [ 1830.866277][T18947] bridge_slave_1: entered promiscuous mode [ 1831.238989][ T46] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1831.307339][T17462] syz-executor: attempt to access beyond end of device [ 1831.307339][T17462] loop5: rw=2051, sector=49152, nr_sectors = 4096 limit=40427 [ 1831.370256][T17462] F2FS-fs (loop5): Issue discard(6144, 6144, 512) failed, ret: -5 [ 1831.455526][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 1831.483527][ T46] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0105, bcdDevice=43.55 [ 1831.507934][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.553042][ T46] usb 1-1: Product: syz [ 1831.557245][ T46] usb 1-1: Manufacturer: syz [ 1831.592084][ T46] usb 1-1: SerialNumber: syz [ 1831.609289][T18947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1831.631666][ T46] usb 1-1: config 0 descriptor?? [ 1831.705654][ T46] kvaser_usb 1-1:0.0: Cannot get usb endpoint(s) [ 1831.851246][T18947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1832.243831][T18463] usb 1-1: USB disconnect, device number 72 [ 1832.302932][ T5243] Bluetooth: hci4: command tx timeout [ 1832.882472][T18947] team0: Port device team_slave_0 added [ 1833.196645][T18988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1833.233332][T18988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1833.268617][T18988] bridge_slave_0: entered allmulticast mode [ 1833.321251][T18988] bridge_slave_0: entered promiscuous mode [ 1833.637882][T18947] team0: Port device team_slave_1 added [ 1833.766311][T18988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1833.773672][T18988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1833.808154][T18988] bridge_slave_1: entered allmulticast mode [ 1833.842042][T18988] bridge_slave_1: entered promiscuous mode [ 1834.679762][ T5243] Bluetooth: hci4: command tx timeout [ 1835.837799][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1835.922849][T18988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1836.002348][T19148] loop5: detected capacity change from 0 to 128 [ 1836.052420][T18947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1836.092392][T18947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1836.139415][T19148] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1836.224557][T19148] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1836.252864][T18947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1836.886476][ T5243] Bluetooth: hci4: command tx timeout [ 1836.907969][T16026] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1837.178663][T18988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1837.248299][T18947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1837.265952][T18947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1837.341666][T18947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1837.444148][T16026] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1837.455499][T16026] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1837.894046][T19161] loop3: detected capacity change from 0 to 40427 [ 1837.921514][T19161] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1837.929333][T19161] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1837.937947][T16026] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1837.979510][T16026] usb 1-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 1838.028464][T16026] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.049573][T19161] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1838.162044][T16026] usb 1-1: config 0 descriptor?? [ 1838.190701][T19161] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1838.197786][T19161] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1838.247322][T17462] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1838.328910][T18988] team0: Port device team_slave_0 added [ 1838.401288][T18988] team0: Port device team_slave_1 added [ 1838.782099][T19170] loop5: detected capacity change from 0 to 64 [ 1839.012334][T16026] waltop 0003:172F:0038.0028: item fetching failed at offset 2/5 [ 1839.043098][T16026] waltop 0003:172F:0038.0028: probe with driver waltop failed with error -22 [ 1839.381993][ T5293] usb 1-1: USB disconnect, device number 73 [ 1839.531920][T18947] hsr_slave_0: entered promiscuous mode [ 1839.574989][T18947] hsr_slave_1: entered promiscuous mode [ 1839.610652][T18988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1839.617719][T18988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1839.738383][T17503] syz-executor: attempt to access beyond end of device [ 1839.738383][T17503] loop3: rw=2051, sector=49152, nr_sectors = 4096 limit=40427 [ 1839.776207][T18988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1839.803643][T17503] F2FS-fs (loop3): Issue discard(6144, 6144, 512) failed, ret: -5 [ 1840.157788][T18988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1840.318047][T18988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1840.723955][T18988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1842.574122][T19079] chnl_net:caif_netlink_parms(): no params data found [ 1843.143395][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1843.149778][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1843.687286][ T29] audit: type=1804 audit(1722052242.623:461): pid=19210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3237" name="/newroot/266/bus/bus" dev="overlay" ino=1517 res=1 errno=0 [ 1844.379615][T18988] hsr_slave_0: entered promiscuous mode [ 1844.475347][T18988] hsr_slave_1: entered promiscuous mode [ 1844.513733][T18988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1844.559623][T18988] Cannot create hsr debugfs directory [ 1844.636717][ T3928] bridge_slave_1: left allmulticast mode [ 1844.658784][ T3928] bridge_slave_1: left promiscuous mode [ 1844.664764][ T3928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1845.054846][T19219] loop0: detected capacity change from 0 to 40427 [ 1845.340027][ T3928] bridge_slave_0: left allmulticast mode [ 1845.392302][ T3928] bridge_slave_0: left promiscuous mode [ 1845.423213][ T3928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1845.440148][T14379] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1845.686612][ T3928] bridge_slave_1: left allmulticast mode [ 1845.741619][ T3928] bridge_slave_1: left promiscuous mode [ 1845.762913][ T3928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1845.766290][T14379] usb 4-1: Using ep0 maxpacket: 32 [ 1845.832852][T14379] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0105, bcdDevice=43.55 [ 1845.860536][T14379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1845.869533][ C1] eth0: bad gso: type: 1, size: 1408 [ 1845.883815][T14379] usb 4-1: Product: syz [ 1845.888013][T14379] usb 4-1: Manufacturer: syz [ 1845.892634][T14379] usb 4-1: SerialNumber: syz [ 1845.928661][ T3928] bridge_slave_0: left allmulticast mode [ 1845.947406][T14379] usb 4-1: config 0 descriptor?? [ 1845.970736][ T3928] bridge_slave_0: left promiscuous mode [ 1845.976518][ T3928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1846.009628][T14379] kvaser_usb 4-1:0.0: Cannot get usb endpoint(s) [ 1846.098283][T19225] loop0: detected capacity change from 0 to 64 [ 1846.467743][ T9994] usb 4-1: USB disconnect, device number 19 [ 1847.792368][T19238] loop0: detected capacity change from 0 to 1024 [ 1850.403343][T19243] loop0: detected capacity change from 0 to 256 [ 1851.861149][ T3928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1852.530968][ T3928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1852.569040][ T3928] bond0 (unregistering): Released all slaves [ 1852.681082][ T3928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1852.720085][ T3928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1852.768347][ T3928] bond0 (unregistering): Released all slaves [ 1853.206326][T19255] loop3: detected capacity change from 0 to 1764 [ 1853.232254][T19255] iso9660: Unknown parameter 'wlan1' [ 1853.366761][T19255] loop3: detected capacity change from 0 to 8 [ 1853.634295][ T3928] hsr_slave_0: left promiscuous mode [ 1853.692007][ T3928] hsr_slave_1: left promiscuous mode [ 1853.704241][T19264] loop3: detected capacity change from 0 to 64 [ 1853.732172][ T3928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1853.745533][ T3928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1853.794682][T19261] loop5: detected capacity change from 0 to 1024 [ 1853.930995][ T3928] hsr_slave_0: left promiscuous mode [ 1853.992359][ T3928] hsr_slave_1: left promiscuous mode [ 1854.001740][T19261] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1854.021675][ T3928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1854.040363][ T3928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1854.228334][T19261] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1854.401813][T19261] xt_TCPMSS: Only works on TCP SYN packets [ 1854.620737][T16026] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1854.759285][T17462] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1854.912896][T16026] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1854.933993][T16026] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1855.004938][T16026] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1855.040045][T16026] usb 4-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 1855.064318][T16026] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1855.200674][T16026] usb 4-1: config 0 descriptor?? [ 1855.739966][ T3928] team0 (unregistering): Port device team_slave_1 removed [ 1855.776449][T16026] waltop 0003:172F:0038.0029: item fetching failed at offset 2/5 [ 1855.801969][T16026] waltop 0003:172F:0038.0029: probe with driver waltop failed with error -22 [ 1855.964862][ T3928] team0 (unregistering): Port device team_slave_0 removed [ 1856.189803][T16026] usb 4-1: USB disconnect, device number 20 [ 1859.008601][ T3928] team0 (unregistering): Port device team_slave_1 removed [ 1859.009620][T19282] loop3: detected capacity change from 0 to 512 [ 1859.136257][T19282] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1859.197218][T19282] EXT4-fs error (device loop3): ext4_free_branches:1027: inode #13: comm syz.3.3257: invalid indirect mapped block 2683928664 (level 1) [ 1859.241489][ T3928] team0 (unregistering): Port device team_slave_0 removed [ 1859.250016][T19282] EXT4-fs (loop3): Remounting filesystem read-only [ 1859.257226][T19282] EXT4-fs (loop3): 1 truncate cleaned up [ 1859.295600][T19282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1859.450288][T17503] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1860.123697][ C1] eth0: bad gso: type: 1, size: 1408 [ 1860.533833][T19079] bridge0: port 1(bridge_slave_0) entered blocking state [ 1860.586187][T19079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1860.882081][ T29] audit: type=1804 audit(1722052258.591:462): pid=19294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3261" name="/newroot/85/bus/bus" dev="overlay" ino=480 res=1 errno=0 [ 1860.897529][T19079] bridge_slave_0: entered allmulticast mode [ 1861.228406][T19079] bridge_slave_0: entered promiscuous mode [ 1861.459651][T19079] bridge0: port 2(bridge_slave_1) entered blocking state [ 1861.538290][T19079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1861.569457][T19079] bridge_slave_1: entered allmulticast mode [ 1861.583206][T19079] bridge_slave_1: entered promiscuous mode [ 1862.398678][T19311] loop5: detected capacity change from 0 to 256 [ 1862.504696][T19307] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 1862.537492][T19311] FAT-fs (loop5): invalid media value (0x29) [ 1862.562261][T19307] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1862.646777][T19079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1862.656286][T19311] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1862.656431][T19307] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1862.745729][T19307] overlayfs: missing 'lowerdir' [ 1862.860959][T19310] xt_CONNSECMARK: invalid mode: 0 [ 1862.950728][T19316] loop0: detected capacity change from 0 to 1024 [ 1862.975387][T19079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1863.777606][T19079] team0: Port device team_slave_0 added [ 1864.068157][T19328] loop0: detected capacity change from 0 to 512 [ 1864.121083][T19079] team0: Port device team_slave_1 added [ 1864.653799][T19079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1864.691197][T19079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1864.786792][T19079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1864.874069][T19333] loop0: detected capacity change from 0 to 1764 [ 1864.904522][T19079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1864.920979][T19333] iso9660: Unknown parameter 'wlan1' [ 1864.938186][T19079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1865.048247][T19079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1865.172900][T19333] loop0: detected capacity change from 0 to 8 [ 1865.695681][ C1] eth0: bad gso: type: 1, size: 1408 [ 1865.788854][T19079] hsr_slave_0: entered promiscuous mode [ 1865.808697][T19079] hsr_slave_1: entered promiscuous mode [ 1865.830325][T19079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1865.837918][T19079] Cannot create hsr debugfs directory [ 1866.270704][T19342] loop0: detected capacity change from 0 to 128 [ 1867.380269][T19348] loop3: detected capacity change from 0 to 2048 [ 1867.404884][T19348] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1867.424311][T19348] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1868.783301][T19363] loop3: detected capacity change from 0 to 128 [ 1868.922597][T19363] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1868.991119][T19363] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1869.199985][T19369] loop5: detected capacity change from 0 to 512 [ 1869.442070][T19369] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1869.464382][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1869.477434][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1869.499101][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1869.521630][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1869.530225][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1869.558372][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1869.576633][T19367] loop0: detected capacity change from 0 to 40427 [ 1869.676580][T19369] EXT4-fs error (device loop5): ext4_free_branches:1027: inode #13: comm syz.5.3277: invalid indirect mapped block 2683928664 (level 1) [ 1869.805728][T17503] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1869.843135][T19369] EXT4-fs (loop5): Remounting filesystem read-only [ 1869.901359][T19369] EXT4-fs (loop5): 1 truncate cleaned up [ 1869.994796][T19369] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1870.612232][T19378] loop3: detected capacity change from 0 to 1764 [ 1870.619964][T19378] iso9660: Unknown parameter 'wlan1' [ 1870.670679][T17462] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1871.637625][ T29] audit: type=1804 audit(1722052268.028:463): pid=19384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3280" name="/newroot/283/bus/bus" dev="overlay" ino=1627 res=1 errno=0 [ 1871.663278][T19378] loop3: detected capacity change from 0 to 8 [ 1871.835722][ T5243] Bluetooth: hci1: command tx timeout [ 1871.924576][T19386] loop5: detected capacity change from 0 to 128 [ 1871.992909][T19386] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1873.195545][T19403] loop5: detected capacity change from 0 to 256 [ 1873.292505][T19405] loop0: detected capacity change from 0 to 1024 [ 1873.350789][T19403] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 1873.487352][ T3928] bridge_slave_1: left allmulticast mode [ 1873.493065][ T3928] bridge_slave_1: left promiscuous mode [ 1873.541792][ T3928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1873.561204][T19407] fuse: Bad value for 'group_id' [ 1873.566175][T19407] fuse: Bad value for 'group_id' [ 1873.582512][ T29] audit: type=1800 audit(1722052270.454:464): pid=19403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3286" name="file1" dev="loop5" ino=1048802 res=0 errno=0 [ 1873.625207][ T3928] bridge_slave_0: left allmulticast mode [ 1873.630858][ T3928] bridge_slave_0: left promiscuous mode [ 1873.691844][ T3928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1873.860793][T19399] xt_TCPMSS: Only works on TCP SYN packets [ 1874.089998][ T5243] Bluetooth: hci1: command tx timeout [ 1874.611589][ T3928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1874.741255][ T3928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1874.784509][ T3928] bond0 (unregistering): Released all slaves [ 1875.020710][T19388] loop3: detected capacity change from 0 to 40427 [ 1875.073737][T19388] F2FS-fs (loop3): Mismatch start address, segment0(134218240) cp_blkaddr(0) [ 1875.126668][T19388] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1875.211983][T19388] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-4) [ 1875.859286][ T3928] hsr_slave_0: left promiscuous mode [ 1875.920089][T19430] loop5: detected capacity change from 0 to 256 [ 1875.929311][ T3928] hsr_slave_1: left promiscuous mode [ 1875.983035][ T3928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1876.006906][T19430] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1876.072017][ T3928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1876.346050][ T5243] Bluetooth: hci1: command tx timeout [ 1876.715568][T19434] loop3: detected capacity change from 0 to 256 [ 1877.246412][T19442] loop3: detected capacity change from 0 to 256 [ 1877.508407][T19444] loop0: detected capacity change from 0 to 256 [ 1878.170413][ T3928] team0 (unregistering): Port device team_slave_1 removed [ 1878.460938][ T3928] team0 (unregistering): Port device team_slave_0 removed [ 1878.600117][ T5243] Bluetooth: hci1: command tx timeout [ 1881.191763][T18517] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1881.214877][T18517] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1881.266581][T18517] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1881.299106][T18517] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1881.307277][T18517] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1881.314883][T18517] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1881.480851][T19455] netlink: 'syz.3.3297': attribute type 4 has an invalid length. [ 1881.958290][T19471] loop0: detected capacity change from 0 to 1024 [ 1883.238890][T19479] loop0: detected capacity change from 0 to 256 [ 1883.591970][T18517] Bluetooth: hci3: command tx timeout [ 1884.227771][T19370] chnl_net:caif_netlink_parms(): no params data found [ 1884.866092][T19486] loop0: detected capacity change from 0 to 256 [ 1886.071899][T18517] Bluetooth: hci3: command tx timeout [ 1886.419688][T19497] loop5: detected capacity change from 0 to 256 [ 1886.856792][T19504] loop0: detected capacity change from 0 to 1024 [ 1887.062122][T19504] Process accounting resumed [ 1887.216390][T19370] bridge0: port 1(bridge_slave_0) entered blocking state [ 1887.251037][T19370] bridge0: port 1(bridge_slave_0) entered disabled state [ 1887.293044][T19370] bridge_slave_0: entered allmulticast mode [ 1887.343880][T19370] bridge_slave_0: entered promiscuous mode [ 1887.492407][T19370] bridge0: port 2(bridge_slave_1) entered blocking state [ 1887.537519][T19370] bridge0: port 2(bridge_slave_1) entered disabled state [ 1887.584280][T19515] loop5: detected capacity change from 0 to 256 [ 1887.597999][T19370] bridge_slave_1: entered allmulticast mode [ 1887.609827][T19370] bridge_slave_1: entered promiscuous mode [ 1887.648376][T19515] FAT-fs (loop5): invalid media value (0x29) [ 1887.663223][T19515] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1888.217675][T19523] loop3: detected capacity change from 0 to 1024 [ 1888.602891][T18517] Bluetooth: hci3: command tx timeout [ 1891.337991][T18517] Bluetooth: hci3: command tx timeout [ 1891.840508][T19370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1893.479579][T19370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1893.845253][T19546] loop3: detected capacity change from 0 to 256 [ 1893.901485][T19546] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1895.446474][T19370] team0: Port device team_slave_0 added [ 1895.474233][T19370] team0: Port device team_slave_1 added [ 1895.876725][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1895.884059][T19563] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1895.907393][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1895.923867][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1895.933113][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1895.946188][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1895.954859][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1896.581201][T19568] loop0: detected capacity change from 0 to 256 [ 1896.597913][T19370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1896.635322][T19370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1896.671835][T19370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1896.851476][T19568] loop0: detected capacity change from 0 to 512 [ 1896.898266][T19370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1896.952997][T19370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1897.086528][T19370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1898.503583][ T5243] Bluetooth: hci2: command tx timeout [ 1898.832784][T19577] loop5: detected capacity change from 0 to 8192 [ 1898.891796][ T5243] Bluetooth: hci7: command 0x0406 tx timeout [ 1899.020823][T19577] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1900.812418][ T5243] Bluetooth: hci2: command tx timeout [ 1901.095561][T18559] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1901.192951][T19370] hsr_slave_0: entered promiscuous mode [ 1901.246168][T19370] hsr_slave_1: entered promiscuous mode [ 1901.295080][T19370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1901.315194][T19370] Cannot create hsr debugfs directory [ 1901.331225][T19462] chnl_net:caif_netlink_parms(): no params data found [ 1901.350458][T18559] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1901.383031][T18559] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1901.433607][T18559] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1901.453120][T18559] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.493249][T18559] usb 6-1: Product: syz [ 1901.506727][T18559] usb 6-1: Manufacturer: syz [ 1901.514923][T18559] usb 6-1: SerialNumber: syz [ 1901.539534][T18559] usb 6-1: config 0 descriptor?? [ 1901.556418][ T3928] bridge_slave_1: left allmulticast mode [ 1901.562540][ T3928] bridge_slave_1: left promiscuous mode [ 1901.563378][T19596] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1901.582885][T19596] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1901.594678][ T3928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1901.669290][ T3928] bridge_slave_0: left allmulticast mode [ 1901.674986][ T3928] bridge_slave_0: left promiscuous mode [ 1901.719188][ T3928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1901.884433][T19596] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1901.927113][T19596] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1902.096302][T19611] loop3: detected capacity change from 0 to 256 [ 1902.241427][T19611] FAT-fs (loop3): invalid media value (0x29) [ 1902.251366][T19611] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1902.525889][ T3928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1902.560662][ T3928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1902.608418][ T3928] bond0 (unregistering): Released all slaves [ 1902.687565][T18559] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 1902.764047][T18559] usb 6-1: USB disconnect, device number 18 [ 1903.054531][ T5243] Bluetooth: hci2: command tx timeout [ 1903.196690][ T3928] hsr_slave_0: left promiscuous mode [ 1903.203372][ T3928] hsr_slave_1: left promiscuous mode [ 1903.222399][ T3928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1903.247792][ T3928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1903.907830][T19618] loop5: detected capacity change from 0 to 256 [ 1903.931432][T19618] exfat: Deprecated parameter 'namecase' [ 1903.957637][T19618] exfat: Deprecated parameter 'utf8' [ 1904.003367][T19618] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0x01284b2f, utbl_chksum : 0xe619d30d) [ 1904.532689][ T3928] team0 (unregistering): Port device team_slave_1 removed [ 1905.405492][ T5243] Bluetooth: hci2: command tx timeout [ 1905.835177][ T3928] team0 (unregistering): Port device team_slave_0 removed [ 1908.303103][T19462] bridge0: port 1(bridge_slave_0) entered blocking state [ 1908.333676][T19462] bridge0: port 1(bridge_slave_0) entered disabled state [ 1908.364716][T19462] bridge_slave_0: entered allmulticast mode [ 1908.392904][T19462] bridge_slave_0: entered promiscuous mode [ 1908.476932][T19462] bridge0: port 2(bridge_slave_1) entered blocking state [ 1908.484206][T19462] bridge0: port 2(bridge_slave_1) entered disabled state [ 1908.550200][ T5365] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1908.550444][T19462] bridge_slave_1: entered allmulticast mode [ 1908.593421][T19462] bridge_slave_1: entered promiscuous mode [ 1908.804107][ T5365] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1908.817616][ T5365] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1908.871581][T19657] loop5: detected capacity change from 0 to 256 [ 1908.900883][ T5365] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1908.920356][T19657] exfat: Deprecated parameter 'namecase' [ 1908.926099][T19657] exfat: Deprecated parameter 'utf8' [ 1908.933582][ T5365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.951270][ T5365] usb 4-1: Product: syz [ 1908.955467][ T5365] usb 4-1: Manufacturer: syz [ 1908.960088][ T5365] usb 4-1: SerialNumber: syz [ 1908.981293][T19657] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0x01284b2f, utbl_chksum : 0xe619d30d) [ 1909.033456][ T5365] usb 4-1: config 0 descriptor?? [ 1909.047834][T19462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1909.083236][T19648] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1909.090682][T19648] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1909.261347][T19462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1910.325687][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1910.949195][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1910.969813][T19648] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1910.977236][T19648] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1911.680734][T19462] team0: Port device team_slave_0 added [ 1911.919918][ T5365] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 1911.969955][T19462] team0: Port device team_slave_1 added [ 1911.982715][ T5365] usb 4-1: USB disconnect, device number 21 [ 1913.261000][T19462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1913.290338][T19462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1913.318446][T19462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1913.593756][T19560] chnl_net:caif_netlink_parms(): no params data found [ 1913.632927][T19462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1913.644996][T19462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1913.714032][T19462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1914.703045][T19462] hsr_slave_0: entered promiscuous mode [ 1914.755891][T19462] hsr_slave_1: entered promiscuous mode [ 1914.834775][T19711] loop0: detected capacity change from 0 to 256 [ 1914.888761][T19711] exfat: Deprecated parameter 'namecase' [ 1914.933864][T19711] exfat: Deprecated parameter 'utf8' [ 1915.072930][T19715] loop3: detected capacity change from 0 to 1024 [ 1918.711621][ T5293] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1918.927209][ T5293] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1918.955040][ T5293] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1919.018112][ T5293] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1919.037431][ T5293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1919.057063][ T5293] usb 4-1: Product: syz [ 1919.061270][ T5293] usb 4-1: Manufacturer: syz [ 1919.075273][ T5293] usb 4-1: SerialNumber: syz [ 1919.120016][ T5293] usb 4-1: config 0 descriptor?? [ 1919.150933][T19731] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1919.163649][T19731] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1919.453057][T19560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1919.461864][T19731] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1919.490957][T19560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1919.506544][T19731] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1919.515255][T19560] bridge_slave_0: entered allmulticast mode [ 1919.535542][T19560] bridge_slave_0: entered promiscuous mode [ 1919.581460][T19560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1919.607308][T19560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1919.641055][T19560] bridge_slave_1: entered allmulticast mode [ 1919.682790][T19560] bridge_slave_1: entered promiscuous mode [ 1920.255986][ T5293] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 1920.302153][ T5293] usb 4-1: USB disconnect, device number 22 [ 1920.353725][T19560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1920.430056][T19560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1920.973802][T19560] team0: Port device team_slave_0 added [ 1920.997118][T19560] team0: Port device team_slave_1 added [ 1921.048656][T19751] loop0: detected capacity change from 0 to 256 [ 1921.085294][T19751] exfat: Deprecated parameter 'namecase' [ 1921.091051][T19751] exfat: Deprecated parameter 'utf8' [ 1921.424677][T19755] loop3: detected capacity change from 0 to 1024 [ 1921.461701][T19755] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1921.588987][T19755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1921.663435][T19560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1921.699733][T19560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1922.573756][T19560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1922.589363][T19560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1922.596492][T19560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1922.622446][ C0] vkms_vblank_simulate: vblank timer overrun [ 1922.630387][T19560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1922.668337][T19761] loop0: detected capacity change from 0 to 1024 [ 1924.388298][T19767] loop0: detected capacity change from 0 to 256 [ 1925.361564][T17503] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1927.195448][T19370] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1927.353335][T19560] hsr_slave_0: entered promiscuous mode [ 1927.476825][T19560] hsr_slave_1: entered promiscuous mode [ 1927.532577][T19560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1927.578394][T19560] Cannot create hsr debugfs directory [ 1927.618222][T19370] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1927.686141][T19370] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1928.065925][T19370] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1930.289935][T19803] loop3: detected capacity change from 0 to 1024 [ 1935.353982][ T3928] bridge_slave_1: left allmulticast mode [ 1935.379281][T19830] loop0: detected capacity change from 0 to 1024 [ 1935.390307][ T3928] bridge_slave_1: left promiscuous mode [ 1935.431692][ T3928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1935.649558][ T3928] bridge_slave_0: left allmulticast mode [ 1935.689179][ T3928] bridge_slave_0: left promiscuous mode [ 1935.740125][ T3928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1935.936477][ T3928] bridge_slave_1: left allmulticast mode [ 1935.942170][ T3928] bridge_slave_1: left promiscuous mode [ 1935.988756][ T3928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1936.143790][ T3928] bridge_slave_0: left allmulticast mode [ 1936.174850][ T3928] bridge_slave_0: left promiscuous mode [ 1936.180751][ T3928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1936.359391][T19840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3398'. [ 1936.586171][T18517] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1936.601726][T18517] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1936.616039][T18517] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1936.627670][T18517] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1936.648086][T18517] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1936.655875][T18517] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1937.977532][T19862] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3401'. [ 1938.273532][ T3928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1938.351266][ T3928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1938.492020][ T3928] bond0 (unregistering): Released all slaves [ 1938.668865][ T3928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1938.742497][ T3928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1938.824163][ T3928] bond0 (unregistering): Released all slaves [ 1938.870497][T18517] Bluetooth: hci1: command tx timeout [ 1939.344774][T19840] bond0: entered promiscuous mode [ 1939.357870][T19840] bond_slave_0: entered promiscuous mode [ 1939.390004][T19840] bond_slave_1: entered promiscuous mode [ 1939.449566][T19840] bond0: left promiscuous mode [ 1939.454372][T19840] bond_slave_0: left promiscuous mode [ 1939.477411][T19840] bond_slave_1: left promiscuous mode [ 1939.779770][ T3928] hsr_slave_0: left promiscuous mode [ 1939.800176][ T3928] hsr_slave_1: left promiscuous mode [ 1939.830401][ T3928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1939.872090][ T3928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1940.109647][ T3928] hsr_slave_0: left promiscuous mode [ 1940.190418][ T3928] hsr_slave_1: left promiscuous mode [ 1940.208257][ T3928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1940.241426][ T3928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1940.713586][T19879] 9pnet: Unknown protocol version 9p [ 1941.125679][T18517] Bluetooth: hci1: command tx timeout [ 1941.231549][T19875] overlayfs: overlapping lowerdir path [ 1941.462127][T19881] loop5: detected capacity change from 0 to 16 [ 1941.593961][T19881] erofs: (device loop5): mounted with root inode @ nid 36. [ 1941.692586][T18463] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 1941.701450][T18463] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 1941.715604][T19881] erofs: (device loop5): z_erofs_readahead: readahead error at folio 13 @ nid 36 [ 1941.721249][T18463] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 1941.757512][T18463] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 1941.770190][T19881] erofs: (device loop5): z_erofs_readahead: readahead error at folio 8 @ nid 36 [ 1941.790755][T19881] erofs: (device loop5): z_erofs_readahead: readahead error at folio 6 @ nid 36 [ 1941.809426][T19881] erofs: (device loop5): z_erofs_readahead: readahead error at folio 4 @ nid 36 [ 1941.824377][T18463] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1941.853929][T19881] erofs: (device loop5): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1941.887679][T19881] erofs: (device loop5): z_erofs_readahead: readahead error at folio 0 @ nid 36 [ 1941.923967][T19881] syz.5.3407: attempt to access beyond end of device [ 1941.923967][T19881] loop5: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 1941.950591][T19881] syz.5.3407: attempt to access beyond end of device [ 1941.950591][T19881] loop5: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 1941.974928][ T2632] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1941.995128][T19881] syz.5.3407: attempt to access beyond end of device [ 1941.995128][T19881] loop5: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 1942.042838][T19881] syz.5.3407: attempt to access beyond end of device [ 1942.042838][T19881] loop5: rw=524288, sector=720, nr_sectors = 80 limit=16 [ 1942.093444][ T3928] team0 (unregistering): Port device team_slave_1 removed [ 1942.213716][ T3928] team0 (unregistering): Port device team_slave_0 removed [ 1942.260090][ T2632] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1942.288453][ T2632] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1942.304672][ T2632] usb 4-1: Product: syz [ 1942.320738][ T2632] usb 4-1: Manufacturer: syz [ 1942.325370][ T2632] usb 4-1: SerialNumber: syz [ 1942.375322][ T2632] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1942.591482][T18463] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1943.379469][T18517] Bluetooth: hci1: command tx timeout [ 1943.691120][T19890] loop5: detected capacity change from 0 to 1024 [ 1945.659313][T18517] Bluetooth: hci1: command tx timeout [ 2060.186971][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 2060.193587][ C1] rcu: 1-...!: (1 GPs behind) idle=906c/1/0x4000000000000000 softirq=133769/133770 fqs=30 [ 2060.205993][ C1] rcu: (t=10502 jiffies g=206997 q=1071 ncpus=2) [ 2060.212409][ C1] rcu: rcu_preempt kthread starved for 10441 jiffies! g206997 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2060.223699][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2060.233675][ C1] rcu: RCU grace-period kthread stack dump: [ 2060.239557][ C1] task:rcu_preempt state:R running task stack:27680 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 2060.251306][ C1] Call Trace: [ 2060.254586][ C1] [ 2060.257532][ C1] __schedule+0xe37/0x5490 [ 2060.261978][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 2060.267206][ C1] ? __entry_text_end+0x1020c6/0x1020c9 [ 2060.272785][ C1] ? __pfx___schedule+0x10/0x10 [ 2060.277665][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2060.283318][ C1] ? schedule+0x298/0x350 [ 2060.287670][ C1] ? __pfx_lock_release+0x10/0x10 [ 2060.292719][ C1] ? __pfx___mod_timer+0x10/0x10 [ 2060.297689][ C1] ? lock_acquire+0x1b1/0x560 [ 2060.302393][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2060.308047][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 2060.313541][ C1] schedule+0xe7/0x350 [ 2060.317635][ C1] schedule_timeout+0x136/0x2a0 [ 2060.322517][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 2060.327921][ C1] ? __pfx_process_timeout+0x10/0x10 [ 2060.333241][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2060.338920][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2060.344760][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2060.350438][ C1] ? prepare_to_swait_event+0xf0/0x470 [ 2060.355954][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 2060.360751][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2060.366065][ C1] ? rcu_gp_init+0xc82/0x1630 [ 2060.370784][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2060.376437][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2060.381658][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2060.387319][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2060.393156][ C1] rcu_gp_kthread+0x271/0x380 [ 2060.397861][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2060.403086][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2060.408338][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2060.413997][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2060.419647][ C1] ? __kthread_parkme+0x148/0x220 [ 2060.424694][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2060.429923][ C1] kthread+0x2c4/0x3a0 [ 2060.434013][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2060.439234][ C1] ? __pfx_kthread+0x10/0x10 [ 2060.443846][ C1] ret_from_fork+0x48/0x80 [ 2060.448290][ C1] ? __pfx_kthread+0x10/0x10 [ 2060.452899][ C1] ret_from_fork_asm+0x1a/0x30 [ 2060.457727][ C1] [ 2060.460747][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2060.467063][ C1] Sending NMI from CPU 1 to CPUs 0: [ 2060.472279][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 2060.473267][ C1] CPU: 1 UID: 0 PID: 19888 Comm: syz.5.3410 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 2060.491816][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2060.501877][ C1] RIP: 0010:pie_calculate_probability+0x35d/0x850 [ 2060.508314][ C1] Code: 01 c4 e8 e6 88 6b f8 4f 8d 34 27 31 ff 4c 89 e6 4c 89 73 20 e8 04 84 6b f8 4d 85 e4 0f 8f 90 02 00 00 e8 c6 88 6b f8 4c 89 f6 <4c> 89 ff e8 2b 83 6b f8 4d 39 f7 73 0d e8 b1 88 6b f8 48 c7 43 20 [ 2060.527935][ C1] RSP: 0018:ffffc90000a18b80 EFLAGS: 00000246 [ 2060.534012][ C1] RAX: 0000000000000000 RBX: ffff888045e87f50 RCX: ffffffff892052ac [ 2060.541991][ C1] RDX: ffff88806e940000 RSI: fffffff0a3da8872 RDI: 0000000000000007 [ 2060.549968][ C1] RBP: ffff88807fa23b00 R08: 0000000000000007 R09: 0000000000000000 [ 2060.557970][ C1] R10: fffffff0a3da8872 R11: 0000000000000000 R12: fffffff0a3da8872 [ 2060.565965][ C1] R13: 0000000000000000 R14: fffffff0a3da8872 R15: 0000000000000000 [ 2060.574031][ C1] FS: 000055559124e500(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 2060.582974][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2060.589560][ C1] CR2: 000000110c478d44 CR3: 000000001fcd6000 CR4: 0000000000350ef0 [ 2060.597536][ C1] Call Trace: [ 2060.600816][ C1] [ 2060.603663][ C1] ? show_regs+0x8c/0xa0 [ 2060.607937][ C1] ? rcu_dump_cpu_stacks+0x2a9/0x4c0 [ 2060.613248][ C1] ? rcu_sched_clock_irq+0xa1c/0x33f0 [ 2060.618675][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 2060.624332][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2060.629988][ C1] ? find_held_lock+0x2d/0x110 [ 2060.634771][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2060.640425][ C1] ? ktime_get+0xd9/0x1a0 [ 2060.644776][ C1] ? __pfx_lock_release+0x10/0x10 [ 2060.649829][ C1] ? find_held_lock+0x2d/0x110 [ 2060.654614][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2060.660268][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2060.665929][ C1] ? update_process_times+0x175/0x220 [ 2060.671318][ C1] ? __pfx_update_process_times+0x10/0x10 [ 2060.677054][ C1] ? tick_nohz_handler+0x376/0x530 [ 2060.682185][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 2060.687659][ C1] ? __hrtimer_run_queues+0x65a/0xcc0 [ 2060.693059][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2060.698795][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2060.704447][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 2060.710546][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 2060.715688][ C1] ? __sysvec_apic_timer_interrupt+0x112/0x450 [ 2060.721857][ C1] ? sysvec_apic_timer_interrupt+0x43/0xb0 [ 2060.727689][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2060.733871][ C1] ? pie_calculate_probability+0x34c/0x850 [ 2060.739699][ C1] ? pie_calculate_probability+0x35d/0x850 [ 2060.745555][ C1] fq_pie_timer+0x215/0x5a0 [ 2060.750109][ C1] call_timer_fn+0x1a3/0x610 [ 2060.754723][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 2060.759860][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 2060.765018][ C1] ? __pfx_lock_release+0x10/0x10 [ 2060.770078][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 2060.775124][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 2060.780169][ C1] __run_timers+0x74b/0xaf0 [ 2060.784707][ C1] ? __pfx___run_timers+0x10/0x10 [ 2060.789759][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2060.794835][ C1] run_timer_base+0x111/0x190 [ 2060.799549][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 2060.804800][ C1] run_timer_softirq+0x1a/0x40 [ 2060.809592][ C1] handle_softirqs+0x219/0x8f0 [ 2060.814378][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2060.819678][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2060.825336][ C1] irq_exit_rcu+0xbb/0x120 [ 2060.829765][ C1] sysvec_apic_timer_interrupt+0x95/0xb0 [ 2060.835421][ C1] [ 2060.838348][ C1] [ 2060.841275][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2060.847271][ C1] RIP: 0010:__schedule+0xe3f/0x5490 [ 2060.852491][ C1] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 ba 3f 00 00 48 8b bd 10 ff ff ff 4d 89 77 10 4c 89 f6 e8 b9 f4 ec f5 48 89 c7 e8 11 f9 48 f6 <48> 8b 8d a0 fe ff ff 48 b8 00 00 00 00 00 fc ff df 48 01 c1 48 c7 [ 2060.872124][ C1] RSP: 0018:ffffc90009787980 EFLAGS: 00000202 [ 2060.878200][ C1] RAX: 0000000000001683 RBX: ffff88806e940000 RCX: 1ffffffff20266f1 [ 2060.886201][ C1] RDX: 0000000000000000 RSI: ffffffff8b4cd7c0 RDI: ffffffff8bb0b940 [ 2060.894190][ C1] RBP: ffffc90009787b10 R08: 0000000000000001 R09: 0000000000000001 [ 2060.902164][ C1] R10: ffffffff90137bdf R11: 0000000000000000 R12: ffff8880b933f908 [ 2060.910141][ C1] R13: 0000000000000000 R14: ffff88806e940000 R15: ffff8880b933ee00 [ 2060.918139][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2060.923791][ C1] ? lock_acquire+0x1b1/0x560 [ 2060.928495][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2060.934162][ C1] ? __pfx___schedule+0x10/0x10 [ 2060.939031][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2060.944686][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2060.950346][ C1] ? find_held_lock+0x2d/0x110 [ 2060.955151][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2060.960802][ C1] ? try_to_wake_up+0x5d7/0x13e0 [ 2060.965780][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 2060.971191][ C1] preempt_schedule_common+0x44/0xc0 [ 2060.976505][ C1] preempt_schedule_thunk+0x1a/0x30 [ 2060.981739][ C1] try_to_wake_up+0xc08/0x13e0 [ 2060.986538][ C1] ? __pfx_try_to_wake_up+0x10/0x10 [ 2060.991785][ C1] ? __pfx_lock_release+0x10/0x10 [ 2060.996844][ C1] ? plist_check_head+0xa3/0x150 [ 2061.001820][ C1] wake_up_q+0x91/0x140 [ 2061.006004][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 2061.011220][ C1] futex_wake+0x43e/0x4e0 [ 2061.015579][ C1] ? __pfx_futex_wake+0x10/0x10 [ 2061.020459][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 2061.025696][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2061.031376][ C1] do_futex+0x1e5/0x350 [ 2061.035569][ C1] ? __pfx_do_futex+0x10/0x10 [ 2061.040286][ C1] __x64_sys_futex+0x1e1/0x4c0 [ 2061.045079][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 2061.050405][ C1] do_syscall_64+0xcd/0x250 [ 2061.054943][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2061.060957][ C1] RIP: 0033:0x7f22a3d77299 [ 2061.065380][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2061.085126][ C1] RSP: 002b:00007ffd7a7be148 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2061.093560][ C1] RAX: ffffffffffffffda RBX: 00007f22a3f06058 RCX: 00007f22a3d77299 [ 2061.101537][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f22a3f06060 [ 2061.109513][ C1] RBP: 00007f22a3f06064 R08: 00007f22a3f05f80 R09: 00007ffd7a7be42f [ 2061.117491][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2061.125468][ C1] R13: 00007f22a3f06058 R14: 0000000000000003 R15: 0000000000000c03 [ 2061.133486][ C1] [ 2105.374820][ T30] INFO: task dhcpcd:4890 blocked for more than 143 seconds. [ 2105.382172][ T30] Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 2200.878903][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 244s! [syz.5.3410:19888] [ 2200.887264][ C1] Modules linked in: [ 2200.891157][ C1] irq event stamp: 410107 [ 2200.895473][ C1] hardirqs last enabled at (410106): [] get_random_u32+0x586/0x7e0 [ 2200.905050][ C1] hardirqs last disabled at (410107): [] sysvec_apic_timer_interrupt+0xe/0xb0 [ 2200.915491][ C1] softirqs last enabled at (5760): [] handle_softirqs+0x5be/0x8f0 [ 2200.924982][ C1] softirqs last disabled at (5765): [] irq_exit_rcu+0xbb/0x120 [ 2200.934568][ C1] CPU: 1 UID: 0 PID: 19888 Comm: syz.5.3410 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 2200.944992][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2200.955052][ C1] RIP: 0010:get_random_u32+0x435/0x7e0 [ 2200.960535][ C1] Code: fc 4d 85 e4 0f 85 67 01 00 00 e8 d6 5e 89 fc 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 f4 59 89 fc 48 85 db 0f 85 88 01 00 00 b6 5e 89 fc 8b 5c 24 38 e8 ad 5e 89 fc 48 b8 00 00 00 00 00 fc [ 2200.980156][ C1] RSP: 0018:ffffc90000a18b78 EFLAGS: 00000246 [ 2200.986233][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff85027e28 [ 2200.994212][ C1] RDX: ffff88806e940000 RSI: ffffffff85027e36 RDI: 0000000000000007 [ 2201.002188][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 2201.010163][ C1] R10: 0000000000000000 R11: 0000000088c18cca R12: 0000000000000200 [ 2201.018145][ C1] R13: ffff8880b933ac08 R14: 1ffff92000143172 R15: ffff8880b933ac18 [ 2201.026142][ C1] FS: 000055559124e500(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 2201.035099][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2201.041691][ C1] CR2: 000000110c478d44 CR3: 000000001fcd6000 CR4: 0000000000350ef0 [ 2201.049677][ C1] Call Trace: [ 2201.052967][ C1] [ 2201.055813][ C1] ? show_regs+0x8c/0xa0 [ 2201.060096][ C1] ? watchdog_timer_fn+0x570/0x7d0 [ 2201.065255][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 2201.070727][ C1] ? __hrtimer_run_queues+0x65a/0xcc0 [ 2201.076125][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2201.081868][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2201.087538][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 2201.093641][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 2201.098784][ C1] ? __sysvec_apic_timer_interrupt+0x112/0x450 [ 2201.104970][ C1] ? sysvec_apic_timer_interrupt+0x43/0xb0 [ 2201.110804][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2201.116987][ C1] ? get_random_u32+0x598/0x7e0 [ 2201.121862][ C1] ? get_random_u32+0x5a6/0x7e0 [ 2201.126734][ C1] ? get_random_u32+0x435/0x7e0 [ 2201.131607][ C1] ? get_random_u32+0x5a6/0x7e0 [ 2201.136499][ C1] ? __pfx_get_random_u32+0x10/0x10 [ 2201.141723][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2201.147551][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2201.153200][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2201.158428][ C1] __get_random_u32_below+0x18/0xa0 [ 2201.163656][ C1] garp_join_timer_arm+0x1f/0x70 [ 2201.168628][ C1] call_timer_fn+0x1a3/0x610 [ 2201.173245][ C1] ? __pfx_garp_join_timer+0x10/0x10 [ 2201.178557][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 2201.183710][ C1] ? __pfx_lock_release+0x10/0x10 [ 2201.188794][ C1] ? __pfx_garp_join_timer+0x10/0x10 [ 2201.194114][ C1] ? __pfx_garp_join_timer+0x10/0x10 [ 2201.199445][ C1] __run_timers+0x74b/0xaf0 [ 2201.203985][ C1] ? __pfx___run_timers+0x10/0x10 [ 2201.209047][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2201.214124][ C1] run_timer_base+0x111/0x190 [ 2201.218827][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 2201.224059][ C1] run_timer_softirq+0x1a/0x40 [ 2201.228848][ C1] handle_softirqs+0x219/0x8f0 [ 2201.233634][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2201.238933][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2201.244599][ C1] irq_exit_rcu+0xbb/0x120 [ 2201.249033][ C1] sysvec_apic_timer_interrupt+0x95/0xb0 [ 2201.254697][ C1] [ 2201.257639][ C1] [ 2201.260571][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2201.266566][ C1] RIP: 0010:__schedule+0xe3f/0x5490 [ 2201.271798][ C1] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 ba 3f 00 00 48 8b bd 10 ff ff ff 4d 89 77 10 4c 89 f6 e8 b9 f4 ec f5 48 89 c7 e8 11 f9 48 f6 <48> 8b 8d a0 fe ff ff 48 b8 00 00 00 00 00 fc ff df 48 01 c1 48 c7 [ 2201.291449][ C1] RSP: 0018:ffffc90009787980 EFLAGS: 00000202 [ 2201.297523][ C1] RAX: 0000000000001683 RBX: ffff88806e940000 RCX: 1ffffffff20266f1 [ 2201.305502][ C1] RDX: 0000000000000000 RSI: ffffffff8b4cd7c0 RDI: ffffffff8bb0b940 [ 2201.313478][ C1] RBP: ffffc90009787b10 R08: 0000000000000001 R09: 0000000000000001 [ 2201.321454][ C1] R10: ffffffff90137bdf R11: 0000000000000000 R12: ffff8880b933f908 [ 2201.329427][ C1] R13: 0000000000000000 R14: ffff88806e940000 R15: ffff8880b933ee00 [ 2201.337423][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2201.343077][ C1] ? lock_acquire+0x1b1/0x560 [ 2201.347776][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2201.353443][ C1] ? __pfx___schedule+0x10/0x10 [ 2201.358312][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2201.363968][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2201.369622][ C1] ? find_held_lock+0x2d/0x110 [ 2201.374412][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2201.380080][ C1] ? try_to_wake_up+0x5d7/0x13e0 [ 2201.385063][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 2201.390459][ C1] preempt_schedule_common+0x44/0xc0 [ 2201.395782][ C1] preempt_schedule_thunk+0x1a/0x30 [ 2201.401033][ C1] try_to_wake_up+0xc08/0x13e0 [ 2201.405834][ C1] ? __pfx_try_to_wake_up+0x10/0x10 [ 2201.411060][ C1] ? __pfx_lock_release+0x10/0x10 [ 2201.416111][ C1] ? plist_check_head+0xa3/0x150 [ 2201.421087][ C1] wake_up_q+0x91/0x140 [ 2201.425280][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 2201.430493][ C1] futex_wake+0x43e/0x4e0 [ 2201.434853][ C1] ? __pfx_futex_wake+0x10/0x10 [ 2201.439731][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 2201.444946][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2201.450604][ C1] do_futex+0x1e5/0x350 [ 2201.454782][ C1] ? __pfx_do_futex+0x10/0x10 [ 2201.459502][ C1] __x64_sys_futex+0x1e1/0x4c0 [ 2201.464293][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 2201.469616][ C1] do_syscall_64+0xcd/0x250 [ 2201.474153][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2201.480061][ C1] RIP: 0033:0x7f22a3d77299 [ 2201.484482][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2201.504111][ C1] RSP: 002b:00007ffd7a7be148 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2201.512569][ C1] RAX: ffffffffffffffda RBX: 00007f22a3f06058 RCX: 00007f22a3d77299 [ 2201.520546][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f22a3f06060 [ 2201.528522][ C1] RBP: 00007f22a3f06064 R08: 00007f22a3f05f80 R09: 00007ffd7a7be42f [ 2201.536509][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2201.544500][ C1] R13: 00007f22a3f06058 R14: 0000000000000003 R15: 0000000000000c03 [ 2201.552496][ C1] [ 2201.555513][ C1] Sending NMI from CPU 1 to CPUs 0: [ 2201.560731][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 2201.561717][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 2201.576512][ C1] CPU: 1 UID: 0 PID: 19888 Comm: syz.5.3410 Tainted: G L 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 2201.588417][ C1] Tainted: [L]=SOFTLOCKUP [ 2201.592735][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2201.602791][ C1] Call Trace: [ 2201.606166][ C1] [ 2201.609027][ C1] dump_stack_lvl+0x3d/0x1f0 [ 2201.613639][ C1] panic+0x6f5/0x7a0 [ 2201.617560][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2201.623222][ C1] ? __pfx_panic+0x10/0x10 [ 2201.627676][ C1] ? __pfx__printk+0x10/0x10 [ 2201.632292][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2201.637939][ C1] ? __irq_work_queue_local+0x136/0x440 [ 2201.643512][ C1] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2201.649515][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2201.655165][ C1] ? irq_work_queue+0x2a/0x80 [ 2201.659866][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2201.665516][ C1] ? watchdog_timer_fn+0x5f2/0x7d0 [ 2201.670637][ C1] ? watchdog_timer_fn+0x5e5/0x7d0 [ 2201.675766][ C1] watchdog_timer_fn+0x603/0x7d0 [ 2201.680737][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 2201.686205][ C1] __hrtimer_run_queues+0x65a/0xcc0 [ 2201.691431][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2201.697165][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2201.702818][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 2201.708929][ C1] hrtimer_interrupt+0x31b/0x800 [ 2201.713911][ C1] __sysvec_apic_timer_interrupt+0x112/0x450 [ 2201.719915][ C1] sysvec_apic_timer_interrupt+0x43/0xb0 [ 2201.725576][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2201.731578][ C1] RIP: 0010:get_random_u32+0x435/0x7e0 [ 2201.737090][ C1] Code: fc 4d 85 e4 0f 85 67 01 00 00 e8 d6 5e 89 fc 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 f4 59 89 fc 48 85 db 0f 85 88 01 00 00 b6 5e 89 fc 8b 5c 24 38 e8 ad 5e 89 fc 48 b8 00 00 00 00 00 fc [ 2201.756709][ C1] RSP: 0018:ffffc90000a18b78 EFLAGS: 00000246 [ 2201.762785][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff85027e28 [ 2201.770769][ C1] RDX: ffff88806e940000 RSI: ffffffff85027e36 RDI: 0000000000000007 [ 2201.778746][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 2201.786720][ C1] R10: 0000000000000000 R11: 0000000088c18cca R12: 0000000000000200 [ 2201.794698][ C1] R13: ffff8880b933ac08 R14: 1ffff92000143172 R15: ffff8880b933ac18 [ 2201.802684][ C1] ? get_random_u32+0x598/0x7e0 [ 2201.807564][ C1] ? get_random_u32+0x5a6/0x7e0 [ 2201.812463][ C1] ? get_random_u32+0x5a6/0x7e0 [ 2201.817338][ C1] ? __pfx_get_random_u32+0x10/0x10 [ 2201.822561][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2201.828399][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2201.834069][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2201.839309][ C1] __get_random_u32_below+0x18/0xa0 [ 2201.844554][ C1] garp_join_timer_arm+0x1f/0x70 [ 2201.849516][ C1] call_timer_fn+0x1a3/0x610 [ 2201.854130][ C1] ? __pfx_garp_join_timer+0x10/0x10 [ 2201.859444][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 2201.864581][ C1] ? __pfx_lock_release+0x10/0x10 [ 2201.869636][ C1] ? __pfx_garp_join_timer+0x10/0x10 [ 2201.874954][ C1] ? __pfx_garp_join_timer+0x10/0x10 [ 2201.880271][ C1] __run_timers+0x74b/0xaf0 [ 2201.884811][ C1] ? __pfx___run_timers+0x10/0x10 [ 2201.889862][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2201.894964][ C1] run_timer_base+0x111/0x190 [ 2201.899690][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 2201.904926][ C1] run_timer_softirq+0x1a/0x40 [ 2201.909727][ C1] handle_softirqs+0x219/0x8f0 [ 2201.914509][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2201.919808][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2201.925463][ C1] irq_exit_rcu+0xbb/0x120 [ 2201.929914][ C1] sysvec_apic_timer_interrupt+0x95/0xb0 [ 2201.935570][ C1] [ 2201.938506][ C1] [ 2201.941447][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2201.947442][ C1] RIP: 0010:__schedule+0xe3f/0x5490 [ 2201.952663][ C1] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 ba 3f 00 00 48 8b bd 10 ff ff ff 4d 89 77 10 4c 89 f6 e8 b9 f4 ec f5 48 89 c7 e8 11 f9 48 f6 <48> 8b 8d a0 fe ff ff 48 b8 00 00 00 00 00 fc ff df 48 01 c1 48 c7 [ 2201.972296][ C1] RSP: 0018:ffffc90009787980 EFLAGS: 00000202 [ 2201.978370][ C1] RAX: 0000000000001683 RBX: ffff88806e940000 RCX: 1ffffffff20266f1 [ 2201.986347][ C1] RDX: 0000000000000000 RSI: ffffffff8b4cd7c0 RDI: ffffffff8bb0b940 [ 2201.994324][ C1] RBP: ffffc90009787b10 R08: 0000000000000001 R09: 0000000000000001 [ 2202.002297][ C1] R10: ffffffff90137bdf R11: 0000000000000000 R12: ffff8880b933f908 [ 2202.010273][ C1] R13: 0000000000000000 R14: ffff88806e940000 R15: ffff8880b933ee00 [ 2202.018289][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2202.023981][ C1] ? lock_acquire+0x1b1/0x560 [ 2202.028704][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2202.034393][ C1] ? __pfx___schedule+0x10/0x10 [ 2202.039265][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2202.044924][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2202.050583][ C1] ? find_held_lock+0x2d/0x110 [ 2202.055386][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2202.061040][ C1] ? try_to_wake_up+0x5d7/0x13e0 [ 2202.066008][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 2202.071414][ C1] preempt_schedule_common+0x44/0xc0 [ 2202.076726][ C1] preempt_schedule_thunk+0x1a/0x30 [ 2202.081946][ C1] try_to_wake_up+0xc08/0x13e0 [ 2202.086741][ C1] ? __pfx_try_to_wake_up+0x10/0x10 [ 2202.091964][ C1] ? __pfx_lock_release+0x10/0x10 [ 2202.097015][ C1] ? plist_check_head+0xa3/0x150 [ 2202.101997][ C1] wake_up_q+0x91/0x140 [ 2202.106179][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 2202.111391][ C1] futex_wake+0x43e/0x4e0 [ 2202.115750][ C1] ? __pfx_futex_wake+0x10/0x10 [ 2202.120627][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 2202.125843][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2202.131498][ C1] do_futex+0x1e5/0x350 [ 2202.135680][ C1] ? __pfx_do_futex+0x10/0x10 [ 2202.140387][ C1] __x64_sys_futex+0x1e1/0x4c0 [ 2202.145178][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 2202.150500][ C1] do_syscall_64+0xcd/0x250 [ 2202.155052][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2202.160986][ C1] RIP: 0033:0x7f22a3d77299 [ 2202.165436][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2202.185070][ C1] RSP: 002b:00007ffd7a7be148 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2202.193498][ C1] RAX: ffffffffffffffda RBX: 00007f22a3f06058 RCX: 00007f22a3d77299 [ 2202.201492][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f22a3f06060 [ 2202.209468][ C1] RBP: 00007f22a3f06064 R08: 00007f22a3f05f80 R09: 00007ffd7a7be42f [ 2202.217443][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2202.225418][ C1] R13: 00007f22a3f06058 R14: 0000000000000003 R15: 0000000000000c03 [ 2202.233415][ C1] [ 2202.236622][ C1] Kernel Offset: disabled [ 2202.240948][ C1] Rebooting in 86400 seconds..