last executing test programs: 1m0.478271125s ago: executing program 3 (id=145): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) symlinkat(0x0, 0xffffffffffffffff, 0x0) 1m0.17117657s ago: executing program 3 (id=149): socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x4020940d, &(0x7f0000000440)={0x4, 0x0, 0x4}) 1m0.073879743s ago: executing program 3 (id=150): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) 59.439272639s ago: executing program 3 (id=153): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) 58.921308934s ago: executing program 3 (id=157): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r2, r3, 0x0, 0x8000fb00) 50.888119967s ago: executing program 3 (id=177): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) getsockname$packet(r0, 0x0, &(0x7f0000000600)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000500}, {0xfffffff9}]}}) 35.764666128s ago: executing program 32 (id=177): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) getsockname$packet(r0, 0x0, &(0x7f0000000600)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000500}, {0xfffffff9}]}}) 7.519473719s ago: executing program 5 (id=396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 6.518107389s ago: executing program 5 (id=399): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000f5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000007000000010001000900000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2}, &(0x7f00000009c0), &(0x7f0000000540)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.018213721s ago: executing program 6 (id=238): syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="0417e9"], 0x6) r0 = syz_open_dev$dri(0x0, 0x3d, 0x101000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_BIND(r0, 0xc0186443, 0x0) 5.93522922s ago: executing program 5 (id=405): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x1a}, @ptr={0x73682a85, 0x20000000, 0x0, 0x0, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb8}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 5.752357849s ago: executing program 6 (id=409): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) fsmount(0xffffffffffffffff, 0x1, 0x8) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r4, 0xfffffffffffffffd, 0xbb) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x60, 0x1, 0xe, 0x7ffffffe}]}) socket$inet_sctp(0x2, 0x1, 0x84) accept4$rose(r0, 0x0, 0x0, 0x80800) 5.472695298s ago: executing program 5 (id=412): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(0x0, 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r2, r3, 0x0, 0x8000fb00) 4.049161296s ago: executing program 1 (id=421): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) 2.981055999s ago: executing program 1 (id=422): add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000340)='user\x00', 0x0, &(0x7f00000003c0)='q\xa9', 0x0) 2.818937546s ago: executing program 0 (id=423): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001c000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b70200000400000063aaf0ff00000000b509000000000000c3aaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.654253164s ago: executing program 1 (id=424): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x1a}, @ptr={0x73682a85, 0x20000000, 0x0, 0x0, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb8}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 2.493277449s ago: executing program 0 (id=425): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x50) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000180)=ANY=[], 0x3a) 2.406933173s ago: executing program 6 (id=426): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) r5 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) r6 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f00000000c0)='THAWED\x00', 0x7) 2.166070288s ago: executing program 0 (id=427): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNDETACHFILTER(r0, 0x541b, 0x20000000) 2.161208198s ago: executing program 1 (id=428): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) 2.00203397s ago: executing program 5 (id=430): syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0xf2d8, 0x13090, 0x0, 0x40382}, 0x0, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0x80803, 0x2) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000340)=0x68) socket$unix(0x1, 0x1, 0x0) fsopen(0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x20044034) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x100000b, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x1, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x4007, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xf, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0x3, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x4, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1006, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8005, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x1003, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x1, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x0, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) accept4(r1, &(0x7f00000001c0)=@sco, &(0x7f0000000240)=0x80, 0x80000) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.001706777s ago: executing program 2 (id=431): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x2, 0x1, 0x10000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 1.866326874s ago: executing program 0 (id=432): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r0}, 0xc) 1.830199663s ago: executing program 1 (id=433): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f00000004c0), &(0x7f0000000400)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x86, 0x0, &(0x7f0000000240)="f45ec20b6f57fec1fc1c7c66bfb29c22c7cb2584b0e4b8337c60e9d9dd3361b1c13dbdbf0ea82a33cae1b1e170e1fbaa38dd85297b6b51d513081e4ed5413ae6fec3aff51851fdae0d63b9addff5fab0c73d67d5a8d25c9ffa193e571f31f89703c6e613bf2417c58b5143d816af79d7ae5c6317ba07381674977d552da93e8bf7fede328997", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x5, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 1.79559635s ago: executing program 6 (id=434): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, 0x0, 0x4000) sendmmsg$inet(r2, &(0x7f00000003c0)=[{{&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000340)}}], 0x1, 0x800) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x84) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.750215848s ago: executing program 4 (id=435): unlink(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43451) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.749936826s ago: executing program 2 (id=436): add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) 1.579881814s ago: executing program 0 (id=437): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[], 0x50) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000140)="f4683315e7b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.566202329s ago: executing program 1 (id=438): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) fsmount(0xffffffffffffffff, 0x1, 0x8) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r4, 0xfffffffffffffffd, 0xbb) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x60, 0x1, 0xe, 0x7ffffffe}]}) socket$inet_sctp(0x2, 0x1, 0x84) accept4$rose(r0, 0x0, 0x0, 0x80800) 1.55014335s ago: executing program 4 (id=439): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 1.549322967s ago: executing program 2 (id=440): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x1a}, @ptr={0x73682a85, 0x20000000, 0x0, 0x0, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb8}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 1.297879247s ago: executing program 4 (id=441): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 1.294026394s ago: executing program 6 (id=442): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r3, 0x0, 0x0, 0x4000001, 0x0) sendfile(r2, r3, 0x0, 0x8000fb00) 1.088950511s ago: executing program 0 (id=443): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 1.07990131s ago: executing program 2 (id=444): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{r1}, &(0x7f0000000cc0), &(0x7f0000000d00)=r0}, 0x20) 1.009282986s ago: executing program 5 (id=445): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e031800dd5c980128854d4a"], 0xffdd) 876.905264ms ago: executing program 4 (id=446): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 595.294ms ago: executing program 2 (id=447): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x7, 0x9}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffff7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, r0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 301.627462ms ago: executing program 4 (id=448): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x9, 0x5, 0x41}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20) 166.971658ms ago: executing program 2 (id=449): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 0s ago: executing program 4 (id=450): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) connect$inet6(r0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}}, 0x1) sendto$inet6(r0, &(0x7f0000000040)="0ec2828dff88be5f1a5a620a778176ca5845d520251e03eec543b2ac", 0x1c, 0x20, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/152, 0x98, 0x1, 0x0}, &(0x7f0000000180)=0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.174' (ED25519) to the list of known hosts. [ 86.096897][ T29] cfg80211: failed to load regulatory.db [ 86.143363][ T5805] cgroup: Unknown subsys name 'net' [ 86.317660][ T5805] cgroup: Unknown subsys name 'cpuset' [ 86.327396][ T5805] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.984324][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.522137][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.537661][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.548675][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.559067][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.566906][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.574859][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.577936][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.582742][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.591194][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.597127][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.610964][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.614716][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.619780][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.625862][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.633305][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.639630][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.648172][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.654248][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.660310][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.668767][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.674960][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.688832][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.690612][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.706086][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.714271][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.722167][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.729483][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.737614][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.752537][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.770839][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.455406][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 91.545231][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 91.669615][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 91.882160][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 91.945020][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.952905][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.960137][ T5827] bridge_slave_0: entered allmulticast mode [ 91.969713][ T5827] bridge_slave_0: entered promiscuous mode [ 91.980158][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.988102][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.995462][ T5827] bridge_slave_1: entered allmulticast mode [ 92.003513][ T5827] bridge_slave_1: entered promiscuous mode [ 92.041961][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 92.129266][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.136637][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.144200][ T5826] bridge_slave_0: entered allmulticast mode [ 92.151877][ T5826] bridge_slave_0: entered promiscuous mode [ 92.218675][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 92.232949][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.240102][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.247761][ T5826] bridge_slave_1: entered allmulticast mode [ 92.255362][ T5826] bridge_slave_1: entered promiscuous mode [ 92.274347][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.335998][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.353308][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.360473][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.367746][ T5830] bridge_slave_0: entered allmulticast mode [ 92.375349][ T5830] bridge_slave_0: entered promiscuous mode [ 92.443120][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.450327][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.457671][ T5830] bridge_slave_1: entered allmulticast mode [ 92.465348][ T5830] bridge_slave_1: entered promiscuous mode [ 92.488854][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.505632][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.587277][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.594531][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.601720][ T5825] bridge_slave_0: entered allmulticast mode [ 92.610075][ T5825] bridge_slave_0: entered promiscuous mode [ 92.620047][ T5827] team0: Port device team_slave_0 added [ 92.676045][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.683363][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.690834][ T5825] bridge_slave_1: entered allmulticast mode [ 92.698714][ T5825] bridge_slave_1: entered promiscuous mode [ 92.707998][ T5827] team0: Port device team_slave_1 added [ 92.717482][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.726861][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.734908][ T5838] Bluetooth: hci1: command tx timeout [ 92.741143][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.742756][ T5838] Bluetooth: hci2: command tx timeout [ 92.749254][ T5829] bridge_slave_0: entered allmulticast mode [ 92.761900][ T5829] bridge_slave_0: entered promiscuous mode [ 92.779987][ T5826] team0: Port device team_slave_0 added [ 92.788608][ T5826] team0: Port device team_slave_1 added [ 92.812418][ T5838] Bluetooth: hci3: command tx timeout [ 92.812536][ T5839] Bluetooth: hci4: command tx timeout [ 92.818353][ T5842] Bluetooth: hci0: command tx timeout [ 92.824150][ T5840] Bluetooth: hci5: command tx timeout [ 92.843620][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.866282][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.873623][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.881063][ T5829] bridge_slave_1: entered allmulticast mode [ 92.888946][ T5829] bridge_slave_1: entered promiscuous mode [ 92.985589][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.992983][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.000167][ T5828] bridge_slave_0: entered allmulticast mode [ 93.008046][ T5828] bridge_slave_0: entered promiscuous mode [ 93.031665][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.042359][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.049303][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.075704][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.090669][ T5830] team0: Port device team_slave_0 added [ 93.109445][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.116673][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.124097][ T5828] bridge_slave_1: entered allmulticast mode [ 93.131593][ T5828] bridge_slave_1: entered promiscuous mode [ 93.139411][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.146482][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.172794][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.187055][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.197492][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.204541][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.230959][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.244685][ T5830] team0: Port device team_slave_1 added [ 93.263036][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.285395][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.292817][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.319043][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.373570][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.407684][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.433242][ T5825] team0: Port device team_slave_0 added [ 93.439753][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.447272][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.473926][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.514658][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.538725][ T5825] team0: Port device team_slave_1 added [ 93.551493][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.558766][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.584951][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.607426][ T5829] team0: Port device team_slave_0 added [ 93.686741][ T5826] hsr_slave_0: entered promiscuous mode [ 93.693712][ T5826] hsr_slave_1: entered promiscuous mode [ 93.702632][ T5829] team0: Port device team_slave_1 added [ 93.728217][ T5827] hsr_slave_0: entered promiscuous mode [ 93.734956][ T5827] hsr_slave_1: entered promiscuous mode [ 93.741205][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 93.747048][ T5827] Cannot create hsr debugfs directory [ 93.797300][ T5828] team0: Port device team_slave_0 added [ 93.806233][ T5828] team0: Port device team_slave_1 added [ 93.813535][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.820478][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.846869][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.926330][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.933515][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.959941][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.978441][ T5830] hsr_slave_0: entered promiscuous mode [ 93.985142][ T5830] hsr_slave_1: entered promiscuous mode [ 93.991574][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 93.997574][ T5830] Cannot create hsr debugfs directory [ 94.013201][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.020164][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.046336][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.079943][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.087171][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.113397][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.150761][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.158085][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.185051][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.210163][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.217276][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.243696][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.307024][ T5825] hsr_slave_0: entered promiscuous mode [ 94.314470][ T5825] hsr_slave_1: entered promiscuous mode [ 94.320665][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 94.326457][ T5825] Cannot create hsr debugfs directory [ 94.532532][ T5828] hsr_slave_0: entered promiscuous mode [ 94.539193][ T5828] hsr_slave_1: entered promiscuous mode [ 94.545671][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 94.551401][ T5828] Cannot create hsr debugfs directory [ 94.644519][ T5829] hsr_slave_0: entered promiscuous mode [ 94.651259][ T5829] hsr_slave_1: entered promiscuous mode [ 94.658063][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 94.663967][ T5829] Cannot create hsr debugfs directory [ 94.812873][ T5839] Bluetooth: hci1: command tx timeout [ 94.813188][ T5840] Bluetooth: hci2: command tx timeout [ 94.892458][ T5840] Bluetooth: hci4: command tx timeout [ 94.892482][ T5839] Bluetooth: hci5: command tx timeout [ 94.902905][ T5838] Bluetooth: hci0: command tx timeout [ 94.909237][ T5839] Bluetooth: hci3: command tx timeout [ 95.163377][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.176905][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.221351][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.250527][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.314667][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.340422][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.359227][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.380514][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.469471][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.487017][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.498130][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.509313][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.657492][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.681613][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.694931][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.708469][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.737433][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.807967][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.840212][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.847530][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.865189][ T5828] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.877523][ T5828] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.889896][ T5828] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.927702][ T5828] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.989735][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.996937][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.051044][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.064390][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.075289][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.119520][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.127327][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.139704][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.174156][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.210112][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.217312][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.244914][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.252066][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.303802][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.378232][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.385605][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.435565][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.451965][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.459175][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.589517][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.646644][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.653863][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.693836][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.700995][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.737022][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.798166][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.858406][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.881740][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.892671][ T5839] Bluetooth: hci2: command tx timeout [ 96.898063][ T5839] Bluetooth: hci1: command tx timeout [ 96.925781][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.932998][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.947957][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.975576][ T5839] Bluetooth: hci4: command tx timeout [ 96.982835][ T5839] Bluetooth: hci3: command tx timeout [ 96.982977][ T5838] Bluetooth: hci0: command tx timeout [ 96.988330][ T5839] Bluetooth: hci5: command tx timeout [ 97.031492][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.038753][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.084509][ T163] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.091736][ T163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.140662][ T163] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.147880][ T163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.288473][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.641172][ T5827] veth0_vlan: entered promiscuous mode [ 97.719750][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.784959][ T5827] veth1_vlan: entered promiscuous mode [ 97.860269][ T5826] veth0_vlan: entered promiscuous mode [ 97.948925][ T5826] veth1_vlan: entered promiscuous mode [ 97.988104][ T5827] veth0_macvtap: entered promiscuous mode [ 98.001173][ T5827] veth1_macvtap: entered promiscuous mode [ 98.075505][ T5825] veth0_vlan: entered promiscuous mode [ 98.107251][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.121421][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.151389][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.180777][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.204454][ T5825] veth1_vlan: entered promiscuous mode [ 98.228752][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.249300][ T5826] veth0_macvtap: entered promiscuous mode [ 98.260236][ T144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.283401][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.334089][ T5826] veth1_macvtap: entered promiscuous mode [ 98.341399][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.351983][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.476169][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.504590][ T5830] veth0_vlan: entered promiscuous mode [ 98.517021][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.636358][ T5829] veth0_vlan: entered promiscuous mode [ 98.655046][ T5830] veth1_vlan: entered promiscuous mode [ 98.665301][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.676146][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.694562][ T5825] veth0_macvtap: entered promiscuous mode [ 98.712625][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.720677][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.730970][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.758203][ T5829] veth1_vlan: entered promiscuous mode [ 98.786707][ T5825] veth1_macvtap: entered promiscuous mode [ 98.806607][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.912061][ T5830] veth0_macvtap: entered promiscuous mode [ 98.925234][ T1323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.940616][ T1323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.964886][ T5830] veth1_macvtap: entered promiscuous mode [ 98.974070][ T5839] Bluetooth: hci1: command tx timeout [ 98.974206][ T5838] Bluetooth: hci2: command tx timeout [ 98.998179][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.009441][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.047309][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.055388][ T5838] Bluetooth: hci0: command tx timeout [ 99.055715][ T5839] Bluetooth: hci3: command tx timeout [ 99.065300][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.068755][ T5839] Bluetooth: hci5: command tx timeout [ 99.081022][ T5838] Bluetooth: hci4: command tx timeout [ 99.088757][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.136162][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.145173][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.153043][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.235381][ T5829] veth0_macvtap: entered promiscuous mode [ 99.256543][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.287365][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.338997][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.371504][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.433314][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.468168][ T5829] veth1_macvtap: entered promiscuous mode [ 99.492820][ T5828] veth0_vlan: entered promiscuous mode [ 99.545743][ T1323] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.556914][ T1323] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.620642][ T1323] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.636636][ T1323] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.655043][ T5828] veth1_vlan: entered promiscuous mode [ 99.751040][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.756230][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.786386][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.805345][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.826070][ T1323] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.858440][ T1323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.886908][ T1323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.983907][ T1323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.008013][ T1323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.020085][ T1323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.100604][ T5967] kexec: Could not allocate control_code_buffer [ 101.115411][ T5828] veth0_macvtap: entered promiscuous mode [ 101.147338][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.168901][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.184583][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 101.202814][ T5828] veth1_macvtap: entered promiscuous mode [ 101.263995][ T1323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.282130][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.291416][ T1323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.300933][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.352399][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 101.360545][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.376549][ T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 101.396047][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.408288][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.437796][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.451288][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.477666][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.497461][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.500669][ T9] usb 5-1: Product: syz [ 101.519556][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.528296][ T9] usb 5-1: Manufacturer: syz [ 101.528329][ T9] usb 5-1: SerialNumber: syz [ 101.551030][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.583057][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.591828][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.627265][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.982873][ T163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.991743][ T9] usb 5-1: 0:2 : does not exist [ 102.021802][ T163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.068129][ T5984] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 102.118779][ T5984] overlayfs: conflicting options: userxattr,redirect_dir=on [ 102.209724][ T163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.233171][ T163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.582069][ T5994] loop0: detected capacity change from 0 to 512 [ 102.680268][ T5994] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.15: inode has both inline data and extents flags [ 102.758625][ T5994] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 102.762388][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 102.778663][ C1] EXT4-fs (loop0): initial error at time 1775827380: ext4_orphan_get:1397: inode 15 [ 102.783956][ T5994] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.15: couldn't read orphan inode 15 (err -117) [ 102.788132][ C1] EXT4-fs (loop0): last error at time 1775827380: ext4_orphan_get:1397: inode 15 [ 102.821181][ T5994] loop0: lost filesystem error report for type 5 error -117 [ 102.835828][ T5994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 103.329685][ T9] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 103.933650][ T9] usb 5-1: USB disconnect, device number 2 [ 104.524756][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.385384][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 105.432449][ T30] audit: type=1326 audit(1775827382.857:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.2.26" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd1d59c819 code=0x0 [ 107.399686][ T6076] loop1: detected capacity change from 0 to 512 [ 107.457305][ T6079] batadv_slave_0: entered promiscuous mode [ 107.465659][ T6080] random: crng reseeded on system resumption [ 107.474691][ T6078] batadv_slave_0: left promiscuous mode [ 107.518664][ T6076] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.46: inode has both inline data and extents flags [ 107.602328][ T6076] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 107.602996][ T6076] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.46: couldn't read orphan inode 15 (err -117) [ 107.612239][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 107.612269][ C1] EXT4-fs (loop1): initial error at time 1775827385: ext4_orphan_get:1397: inode 15 [ 107.612320][ C1] EXT4-fs (loop1): last error at time 1775827385: ext4_orphan_get:1397: inode 15 [ 107.732319][ T6076] loop1: lost filesystem error report for type 5 error -117 [ 107.744632][ T6076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 108.461059][ T6095] loop0: detected capacity change from 0 to 512 [ 108.498584][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 108.550265][ T6095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.684655][ T6095] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.805998][ T30] audit: type=1326 audit(1775827386.247:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273239c819 code=0x7ffc0000 [ 108.899248][ T30] audit: type=1326 audit(1775827386.297:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273239c819 code=0x7ffc0000 [ 109.035376][ T30] audit: type=1326 audit(1775827386.307:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273239c819 code=0x7ffc0000 [ 109.042616][ T6095] EXT4-fs error (device loop0): ext4_get_first_dir_block:3527: inode #12: comm syz.0.52: Directory hole found for htree leaf block 0 [ 109.145084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 109.182454][ T30] audit: type=1326 audit(1775827386.307:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273239c819 code=0x7ffc0000 [ 109.204950][ T30] audit: type=1326 audit(1775827386.307:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f273239c819 code=0x7ffc0000 [ 109.230138][ T30] audit: type=1326 audit(1775827386.307:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273239c819 code=0x7ffc0000 [ 110.133120][ T30] audit: type=1326 audit(1775827386.307:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273239c819 code=0x7ffc0000 [ 110.209734][ T30] audit: type=1326 audit(1775827386.307:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f273239c819 code=0x7ffc0000 [ 110.220222][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.302415][ T30] audit: type=1326 audit(1775827386.307:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f273239c819 code=0x7ffc0000 [ 111.581677][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.63'. [ 111.614551][ T6126] loop2: detected capacity change from 0 to 128 [ 111.939760][ T6131] loop0: detected capacity change from 0 to 512 [ 112.018112][ T6131] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.66: inode has both inline data and extents flags [ 112.046423][ T6131] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 112.049419][ T6131] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.66: couldn't read orphan inode 15 (err -117) [ 112.058681][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 112.058712][ C1] EXT4-fs (loop0): initial error at time 1775827389: ext4_orphan_get:1397: inode 15 [ 112.058761][ C1] EXT4-fs (loop0): last error at time 1775827389: ext4_orphan_get:1397: inode 15 [ 112.078987][ T6139] loop1: detected capacity change from 0 to 1764 [ 112.428002][ T6131] loop0: lost filesystem error report for type 5 error -117 [ 112.432452][ T6131] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 112.794281][ T6135] loop4: detected capacity change from 0 to 4096 [ 113.200971][ T6135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.251015][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 113.579151][ T6135] EXT4-fs error (device loop4): ext4_get_first_dir_block:3546: inode #12: block 80: comm syz.4.65: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 113.641472][ T6156] netlink: 'syz.3.69': attribute type 4 has an invalid length. [ 113.757419][ T6135] EXT4-fs error (device loop4): ext4_get_first_dir_block:3550: inode #12: comm syz.4.65: directory missing '..' [ 113.801501][ T6157] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.69'. [ 113.837906][ T6150] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.845946][ T6150] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.333015][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.472816][ T6150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.509923][ T6150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.354498][ T144] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.382551][ T144] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.480336][ T144] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.764951][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.099289][ T6189] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.337055][ T6183] tipc: Started in network mode [ 117.390355][ T6183] tipc: Node identity d2b253072735, cluster identity 4711 [ 117.565793][ T6183] tipc: Enabled bearer , priority 0 [ 118.365014][ T6188] syzkaller0: entered promiscuous mode [ 118.398153][ T6188] syzkaller0: entered allmulticast mode [ 118.487274][ T6188] tipc: Resetting bearer [ 118.792864][ T6181] tipc: Resetting bearer [ 123.112289][ T6265] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 123.865121][ T6269] loop3: detected capacity change from 0 to 128 [ 123.955205][ T6270] loop4: detected capacity change from 0 to 512 [ 123.985340][ T6269] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.050622][ T6269] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 124.303666][ T5829] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.167206][ T6286] loop0: detected capacity change from 0 to 4096 [ 125.257411][ T6286] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.283411][ T6286] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.396731][ T6300] Zero length message leads to an empty skb [ 126.709366][ T6181] tipc: Disabling bearer [ 126.723287][ T10] tipc: Node number set to 4119286535 [ 126.794540][ T6300] bridge_slave_0: left allmulticast mode [ 126.811618][ T6300] bridge_slave_0: left promiscuous mode [ 126.860570][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.966200][ T6300] bridge_slave_1: left allmulticast mode [ 126.971889][ T6300] bridge_slave_1: left promiscuous mode [ 127.020069][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.096891][ T6300] bond0: (slave bond_slave_0): Releasing backup interface [ 127.136915][ T6300] bond0: (slave bond_slave_1): Releasing backup interface [ 127.171372][ T6300] team0: Port device team_slave_0 removed [ 127.254550][ T6300] team0: Port device team_slave_1 removed [ 127.280195][ T6300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.288467][ T6300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.309598][ T6300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.318398][ T6300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.331700][ T6300] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 127.442381][ T2148] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 127.466582][ T6310] bond1: entered allmulticast mode [ 127.604462][ T2148] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.616400][ T2148] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.626924][ T2148] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.641708][ T2148] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.697839][ T2148] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.783058][ T2148] usb 6-1: config 0 descriptor?? [ 128.451526][ T2148] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 128.868307][ T6331] loop4: detected capacity change from 0 to 1024 [ 128.901248][ T6331] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.038801][ T6331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.194287][ T6338] loop0: detected capacity change from 0 to 512 [ 129.549079][ T6338] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 129.589902][ T6338] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 129.745704][ T6338] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 130.099524][ T6338] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4221: comm syz.0.118: Allocating blocks 41-42 which overlap fs metadata [ 130.123137][ T6338] loop0: lost filesystem error report for type 5 error -117 [ 130.132228][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 130.146120][ C1] EXT4-fs (loop0): initial error at time 1775827407: ext4_mb_mark_diskspace_used:4221 [ 130.155715][ C1] EXT4-fs (loop0): last error at time 1775827407: ext4_mb_mark_diskspace_used:4221 [ 130.211949][ T6338] Quota error (device loop0): write_blk: dquota write failed [ 130.239397][ T6338] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 130.306987][ T6338] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4221: comm syz.0.118: Allocating blocks 41-42 which overlap fs metadata [ 130.370017][ T6338] loop0: lost filesystem error report for type 5 error -117 [ 130.370154][ T6350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.122'. [ 130.396272][ T6338] Quota error (device loop0): write_blk: dquota write failed [ 130.400864][ T6350] vlan2: entered promiscuous mode [ 130.408779][ T6350] gretap0: entered promiscuous mode [ 130.455243][ T6338] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 130.485952][ T6338] EXT4-fs error (device loop0): ext4_acquire_dquot:7024: comm syz.0.118: Failed to acquire dquot type 1 [ 130.506184][ T6338] loop0: lost filesystem error report for type 5 error -117 [ 130.552798][ T6338] EXT4-fs error (device loop0): mb_free_blocks:2046: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 130.652654][ T6338] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #12: comm syz.0.118: corrupted inode contents [ 130.741802][ T6338] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 130.747349][ T6338] EXT4-fs error (device loop0): ext4_dirty_inode:6495: inode #12: comm syz.0.118: mark_inode_dirty error [ 130.777067][ T6338] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 130.777659][ T6338] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #12: comm syz.0.118: corrupted inode contents [ 130.837346][ T792] usb 6-1: USB disconnect, device number 2 [ 130.866328][ T6338] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 130.866946][ T6338] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #12: comm syz.0.118: mark_inode_dirty error [ 130.899764][ T6358] loop1: detected capacity change from 0 to 128 [ 130.926710][ T6338] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 130.951014][ T6358] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 130.980371][ T6338] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #12: comm syz.0.118: corrupted inode contents [ 131.058612][ T6338] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 131.063480][ T6338] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 131.167481][ T6338] loop0: lost filesystem error report for type 5 error -117 [ 131.169832][ T6338] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #12: comm syz.0.118: corrupted inode contents [ 131.201369][ T6338] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 131.223062][ T6358] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 131.252000][ T6338] EXT4-fs error (device loop0): ext4_truncate:4602: inode #12: comm syz.0.118: mark_inode_dirty error [ 131.265992][ T6338] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 131.266472][ T6338] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 131.316311][ T6358] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 131.332345][ T6338] loop0: lost filesystem error report for type 5 error -117 [ 131.333143][ T6338] EXT4-fs (loop0): 1 truncate cleaned up [ 131.390210][ T6358] FAT-fs (loop1): Filesystem has been set read-only [ 131.428902][ T6338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.454325][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.602456][ T6338] EXT4-fs (loop0): shut down requested (2) [ 131.614225][ T6338] ======================================================= [ 131.614225][ T6338] WARNING: The mand mount option has been deprecated and [ 131.614225][ T6338] and is ignored by this kernel. Remove the mand [ 131.614225][ T6338] option from the mount to silence this warning. [ 131.614225][ T6338] ======================================================= [ 131.672697][ T6368] loop1: detected capacity change from 0 to 512 [ 131.706413][ T6368] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 222 vs 220 free clusters [ 131.722315][ C0] EXT4-fs (loop1): initial error at time 1775827409: ext4_mb_generate_buddy:1314 [ 131.731466][ C0] EXT4-fs (loop1): last error at time 1775827409: ext4_mb_generate_buddy:1314 [ 131.768886][ T6368] EXT4-fs (loop1): Remounting filesystem read-only [ 131.813430][ T6368] EXT4-fs warning (device loop1): ext4_xattr_inode_lookup_create:1607: inode #18: comm syz.1.131: cleanup dec ref error -28 [ 131.828811][ T792] IPVS: starting estimator thread 0... [ 131.865839][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.882661][ T6368] EXT4-fs warning (device loop1): ext4_evict_inode:267: couldn't mark inode dirty (err -30) [ 131.931088][ T6368] EXT4-fs (loop1): 1 orphan inode deleted [ 131.932812][ T6375] IPVS: using max 22 ests per chain, 52800 per kthread [ 131.987019][ T6368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.181757][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.188649][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.251953][ T6388] netlink: 20 bytes leftover after parsing attributes in process `syz.4.137'. [ 132.258498][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.019422][ T6399] loop4: detected capacity change from 0 to 128 [ 133.026723][ T6399] vfat: Unknown parameter '184467440737095516150177777777777777777777718446744073709551615%ciuH+Msu [2&HwjW%(NfjCKNM0ig|hg&.Mr7LGIjgeVJo^@uP*gHlu"#' [ 133.191221][ T5810] udevd[5810]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 134.039588][ T6412] loop4: detected capacity change from 0 to 1024 [ 134.088209][ T6412] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.171690][ T6412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.243676][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.391157][ T6451] loop5: detected capacity change from 0 to 512 [ 135.436071][ T6451] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 135.552321][ T6451] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 135.688882][ T6451] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 135.712503][ C0] EXT4-fs (loop5): initial error at time 1775827413: ext4_mb_generate_buddy:1314 [ 135.721746][ C0] EXT4-fs (loop5): last error at time 1775827413: ext4_mb_generate_buddy:1314 [ 135.782044][ T6463] Bluetooth: MGMT ver 1.23 [ 135.808140][ T6451] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 135.931557][ T6451] EXT4-fs (loop5): 1 truncate cleaned up [ 136.004292][ T6451] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.590673][ T6470] loop4: detected capacity change from 0 to 128 [ 136.606828][ T6470] vfat: Unknown parameter '184467440737095516150177777777777777777777718446744073709551615%ciuH+Msu [2&HwjW%(NfjCKNM0ig|hg&.Mr7LGIjgeVJo^@uP*gHlu"#' [ 137.284765][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.372711][ T2148] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 137.562807][ T6482] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 137.582432][ T2148] usb 5-1: Using ep0 maxpacket: 16 [ 137.609151][ T2148] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 137.662347][ T2148] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.722333][ T2148] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 137.735162][ T2148] usb 5-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 137.765666][ T2148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.802559][ T2148] usb 5-1: Product: syz [ 137.806826][ T2148] usb 5-1: Manufacturer: syz [ 137.811442][ T2148] usb 5-1: SerialNumber: syz [ 137.895538][ T6487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.163'. [ 138.246178][ T5838] Bluetooth: hci3: SCO packet too small [ 138.297903][ T6492] netlink: 'syz.1.165': attribute type 4 has an invalid length. [ 138.668203][ T6498] loop5: detected capacity change from 0 to 1024 [ 138.723337][ T6498] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.769145][ T6503] loop2: detected capacity change from 0 to 512 [ 138.795972][ T6498] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.826098][ T6503] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.168: inode has both inline data and extents flags [ 138.916767][ T6503] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 138.919076][ T6503] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.168: couldn't read orphan inode 15 (err -117) [ 138.928437][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 138.928469][ C0] EXT4-fs (loop2): initial error at time 1775827416: ext4_orphan_get:1397: inode 15 [ 138.928562][ C0] EXT4-fs (loop2): last error at time 1775827416: ext4_orphan_get:1397: inode 15 [ 139.803808][ T6503] loop2: lost filesystem error report for type 5 error -117 [ 139.822331][ T10] usb 5-1: USB disconnect, device number 3 [ 139.911087][ T6503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 139.943293][ T6514] loop4: detected capacity change from 0 to 128 [ 139.985845][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.004904][ T6514] vfat: Unknown parameter '184467440737095516150177777777777777777777718446744073709551615%ciuH+Msu [2&HwjW%(NfjCKNM0ig|hg&.Mr7LGIjgeVJo^@uP*gHlu"#' [ 142.497074][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 142.703675][ T6526] loop5: detected capacity change from 0 to 1764 [ 142.802645][ T5911] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 143.242325][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 143.261107][ T5911] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 143.291993][ T5911] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.412389][ T5911] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 143.458564][ T5911] usb 5-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 143.492293][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.541413][ T5911] usb 5-1: Product: syz [ 143.572286][ T5911] usb 5-1: Manufacturer: syz [ 143.576931][ T5911] usb 5-1: SerialNumber: syz [ 143.642440][ T5911] usb 5-1: can't set config #1, error -71 [ 143.718764][ T5911] usb 5-1: USB disconnect, device number 4 [ 143.786565][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'. [ 143.928539][ T6433] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.387377][ T6561] netlink: 156 bytes leftover after parsing attributes in process `syz.4.182'. [ 144.681619][ T6563] netlink: 'syz.1.184': attribute type 4 has an invalid length. [ 144.895275][ T6573] loop4: detected capacity change from 0 to 512 [ 144.965980][ T6573] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.186: inode has both inline data and extents flags [ 145.032296][ T6573] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 145.032659][ T6573] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.186: couldn't read orphan inode 15 (err -117) [ 145.053569][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 145.053602][ C0] EXT4-fs (loop4): initial error at time 1775827422: ext4_orphan_get:1397: inode 15 [ 145.053660][ C0] EXT4-fs (loop4): last error at time 1775827422: ext4_orphan_get:1397: inode 15 [ 145.172282][ T5911] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 145.179986][ T6573] loop4: lost filesystem error report for type 5 error -117 [ 145.190652][ T6573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 145.645722][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.770200][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.790641][ T5911] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 146.813451][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.722548][ T5911] usb 1-1: config 0 descriptor?? [ 147.894662][ T5911] usbhid 1-1:0.0: can't add hid device: -71 [ 147.979505][ T5911] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 148.000039][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 148.043675][ T5911] usb 1-1: USB disconnect, device number 2 [ 148.169957][ T5838] Bluetooth: hci0: Malformed Event: 0x02 [ 148.370875][ T6602] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 151.379456][ T6625] syz.0.199 uses obsolete (PF_INET,SOCK_PACKET) [ 152.297376][ T6627] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 152.345105][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'. [ 152.831945][ T5916] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 153.056252][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 153.093417][ T5916] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 153.101699][ T5916] usb 3-1: config 0 has no interface number 0 [ 153.132068][ T5916] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 153.147561][ T6656] syz_tun: entered allmulticast mode [ 153.169417][ T5916] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 153.219540][ T6658] netlink: 44 bytes leftover after parsing attributes in process `syz.0.209'. [ 153.260374][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.343398][ T5916] usb 3-1: config 0 descriptor?? [ 153.348759][ T6661] netlink: 'syz.0.209': attribute type 10 has an invalid length. [ 153.412508][ T5916] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 153.430747][ T6661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.485437][ T6661] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 153.606353][ T5916] usb 3-1: USB disconnect, device number 2 [ 154.062041][ T6672] macsec0: entered promiscuous mode [ 154.076790][ T6672] macsec0: entered allmulticast mode [ 154.092523][ T6672] veth1_macvtap: entered allmulticast mode [ 155.029420][ T6685] binder: 6683:6685 ioctl c0306201 200000000080 returned -14 [ 155.048702][ T6685] binder: 6683:6685 ioctl c0306201 2000000003c0 returned -14 [ 155.366154][ T6691] xt_hashlimit: size too large, truncated to 1048576 [ 158.357319][ T6548] Set syz1 is full, maxelem 65536 reached [ 158.675026][ T6735] binder: 6731:6735 ioctl c0306201 200000000080 returned -14 [ 158.708316][ T6736] binder: 6731:6736 ioctl c0306201 2000000003c0 returned -14 [ 159.901197][ T6750] input: syz0 as /devices/virtual/input/input5 [ 159.962499][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 159.971125][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 159.980189][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 159.995558][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 160.006993][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 160.143432][ T6754] loop4: detected capacity change from 0 to 1764 [ 162.129244][ T5840] Bluetooth: hci6: command tx timeout [ 162.430070][ T6788] netlink: 'syz.4.253': attribute type 1 has an invalid length. [ 162.558684][ T6788] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.642770][ T149] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.648540][ T6794] binder: 6793:6794 ioctl c0306201 200000000080 returned -14 [ 162.708096][ T6790] bond1: (slave geneve2): making interface the new active one [ 162.749159][ T6790] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 162.784691][ T6796] binder: 6793:6796 ioctl c0306201 2000000003c0 returned -14 [ 163.080611][ T149] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.230904][ T6751] chnl_net:caif_netlink_parms(): no params data found [ 163.384586][ T149] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.747051][ T6810] xt_hashlimit: size too large, truncated to 1048576 [ 164.167115][ T6751] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.182310][ T5840] Bluetooth: hci6: command tx timeout [ 164.219963][ T6751] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.282082][ T6751] bridge_slave_0: entered allmulticast mode [ 164.471673][ T6751] bridge_slave_0: entered promiscuous mode [ 164.541526][ T6751] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.559749][ T6751] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.579439][ T6751] bridge_slave_1: entered allmulticast mode [ 164.621221][ T6751] bridge_slave_1: entered promiscuous mode [ 166.076729][ T6751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.206556][ T6751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.249137][ T149] bridge_slave_1: left allmulticast mode [ 166.255312][ T149] bridge_slave_1: left promiscuous mode [ 166.265373][ T5840] Bluetooth: hci6: command tx timeout [ 166.271775][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.349276][ T149] bridge_slave_0: left allmulticast mode [ 166.365486][ T149] bridge_slave_0: left promiscuous mode [ 166.384166][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.538868][ T6836] binder: 6835:6836 ioctl c0306201 200000000080 returned -14 [ 167.126596][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.168372][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.236554][ T149] bond0 (unregistering): Released all slaves [ 167.636769][ T6846] syzkaller0: entered promiscuous mode [ 167.666920][ T6846] syzkaller0: entered allmulticast mode [ 167.724885][ T5840] Bluetooth: hci3: hcon ffff888035580000 sent 1 < count 10 [ 167.744581][ T6869] 9pnet_virtio: no channels available for device syz [ 167.745780][ T6866] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 167.757899][ T6866] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 167.772854][ T6871] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 167.779399][ T6871] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 167.790954][ T6871] vhci_hcd vhci_hcd.0: Device attached [ 167.838095][ T6866] vhci_hcd vhci_hcd.0: Device attached [ 167.966436][ T9] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 168.052439][ T9] usb 33-2: new full-speed USB device number 2 using vhci_hcd [ 168.062319][ T6867] vhci_hcd: cannot find a urb of seqnum 4 max seqnum 0 [ 168.098716][ T134] vhci_hcd vhci_hcd.0: stop threads [ 168.129276][ T134] vhci_hcd vhci_hcd.0: release socket [ 168.153899][ T134] vhci_hcd vhci_hcd.0: disconnect device [ 168.333208][ T5840] Bluetooth: hci6: command tx timeout [ 168.429985][ T6890] binder: 6889:6890 ioctl c0306201 200000000080 returned -14 [ 168.639511][ T6872] vhci_hcd: connection reset by peer [ 168.649176][ T6438] vhci_hcd vhci_hcd.0: stop threads [ 168.650141][ T6857] veth1_macvtap: left allmulticast mode [ 168.660032][ T6438] vhci_hcd vhci_hcd.0: release socket [ 168.679883][ T6438] vhci_hcd vhci_hcd.0: disconnect device [ 170.674903][ T6751] team0: Port device team_slave_0 added [ 170.736173][ T6438] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.774994][ T6751] team0: Port device team_slave_1 added [ 170.929030][ T6438] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.952690][ T6438] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.961618][ T6438] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.013365][ T6751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.028405][ T6751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.109120][ T6751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.143792][ T6751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.150848][ T6751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.182227][ T6751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.300983][ T6934] binder: 6933:6934 ioctl c0306201 200000000080 returned -14 [ 171.316582][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'. [ 171.638901][ T149] hsr_slave_0: left promiscuous mode [ 171.667675][ T149] hsr_slave_1: left promiscuous mode [ 171.683806][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.702994][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.731149][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.763316][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.811681][ T6947] netlink: 'syz.4.302': attribute type 1 has an invalid length. [ 171.826405][ T149] veth1_macvtap: left promiscuous mode [ 171.836803][ T149] veth0_macvtap: left promiscuous mode [ 171.842816][ T149] veth1_vlan: left promiscuous mode [ 171.848699][ T149] veth0_vlan: left promiscuous mode [ 172.449120][ T149] team0 (unregistering): Port device team_slave_1 removed [ 172.546787][ T149] team0 (unregistering): Port device team_slave_0 removed [ 172.988144][ T6751] hsr_slave_0: entered promiscuous mode [ 173.005840][ T6751] hsr_slave_1: entered promiscuous mode [ 173.025319][ T6976] binder: 6975:6976 ioctl c0306201 200000000080 returned -14 [ 173.034117][ T6751] debugfs: 'hsr0' already exists in 'hsr' [ 173.039891][ T6751] Cannot create hsr debugfs directory [ 173.048741][ T6976] binder: 6975:6976 ioctl c0306201 2000000003c0 returned -14 [ 173.061736][ T6947] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 173.202358][ T9] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 173.218661][ T6956] syzkaller0: entered promiscuous mode [ 173.242814][ T6956] syzkaller0: entered allmulticast mode [ 173.273012][ T6981] syz.4.312 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 173.735290][ T6991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.350927][ T7010] binder: 7008:7010 ioctl c0306201 200000000080 returned -14 [ 175.379019][ T7010] binder: 7008:7010 ioctl c0306201 2000000003c0 returned -14 [ 176.531779][ T7040] binder: 7039:7040 ioctl c0306201 200000000080 returned -14 [ 176.573953][ T7040] binder: 7039:7040 ioctl c0306201 2000000003c0 returned -14 [ 178.460524][ T7073] binder: 7072:7073 ioctl c0306201 200000000080 returned -14 [ 178.475960][ T7073] binder: 7072:7073 ioctl c0306201 2000000003c0 returned -14 [ 178.504774][ T7073] binder_alloc: 7072: binder_alloc_buf, no vma [ 179.395100][ T7086] lo speed is unknown, defaulting to 1000 [ 179.401112][ T7086] lo speed is unknown, defaulting to 1000 [ 179.410794][ T7086] lo speed is unknown, defaulting to 1000 [ 179.421932][ T7086] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 179.438849][ T7086] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 179.617552][ T7086] lo speed is unknown, defaulting to 1000 [ 179.626226][ T7086] lo speed is unknown, defaulting to 1000 [ 179.634288][ T7086] lo speed is unknown, defaulting to 1000 [ 179.642252][ T7086] lo speed is unknown, defaulting to 1000 [ 179.650048][ T7086] lo speed is unknown, defaulting to 1000 [ 179.658029][ T7086] lo speed is unknown, defaulting to 1000 [ 179.872997][ T6751] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 180.002286][ T6751] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 180.121384][ T6751] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 180.219706][ T6751] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 180.425918][ T7105] syzkaller0: entered promiscuous mode [ 180.431444][ T7105] syzkaller0: entered allmulticast mode [ 181.448642][ T7130] binder: 7129:7130 ioctl c0306201 200000000080 returned -14 [ 181.474225][ T7130] binder: BINDER_SET_CONTEXT_MGR already set [ 181.543175][ T7130] binder: 7129:7130 ioctl 4018620d 200000000040 returned -16 [ 181.543929][ T7133] binder: 7129:7133 ioctl c0306201 2000000003c0 returned -14 [ 181.819613][ T6751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.972984][ T6751] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.027523][ T6432] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.034937][ T6432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.150638][ T6432] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.157867][ T6432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.482434][ T7177] binder: 7176:7177 ioctl c0306201 200000000080 returned -14 [ 183.522719][ T7177] binder: 7176:7177 ioctl c0306201 2000000003c0 returned -14 [ 183.642531][ T7177] binder_alloc: 7176: binder_alloc_buf, no vma [ 184.374871][ T6751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.402354][ T5911] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 184.604873][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.646883][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.675450][ T5911] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 184.717148][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.755977][ T5911] usb 3-1: config 0 descriptor?? [ 185.181964][ T5911] usbhid 3-1:0.0: can't add hid device: -71 [ 185.415572][ T5911] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 185.430550][ T5911] usb 3-1: USB disconnect, device number 3 [ 185.936593][ T6751] veth0_vlan: entered promiscuous mode [ 185.990101][ T6751] veth1_vlan: entered promiscuous mode [ 186.070230][ T7240] binder: 7239:7240 ioctl c0306201 200000000080 returned -14 [ 186.113199][ T7240] binder: 7239:7240 ioctl c0306201 2000000003c0 returned -14 [ 186.138889][ T6751] veth0_macvtap: entered promiscuous mode [ 186.184577][ T6751] veth1_macvtap: entered promiscuous mode [ 186.297162][ T6751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.378416][ T6751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.473068][ T6425] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.512765][ T6425] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.556340][ T6425] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.604518][ T6425] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.046296][ T6425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.086386][ T6425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.599048][ T7260] !7: renamed from bond_slave_0 (while UP) [ 187.866903][ T6432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.905415][ T6432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.512996][ T5840] Bluetooth: hci6: unexpected event 0x17 length: 3 < 6 [ 188.661649][ T7285] binder: 7284:7285 ioctl c0306201 200000000080 returned -14 [ 188.702780][ T7285] binder: 7284:7285 ioctl c0306201 2000000003c0 returned -14 [ 190.694247][ T5911] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 191.085305][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.114707][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.147824][ T5911] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 191.174813][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.200512][ T5911] usb 5-1: config 0 descriptor?? [ 191.626071][ T5911] usbhid 5-1:0.0: can't add hid device: -71 [ 191.643754][ T5911] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 191.707431][ T5911] usb 5-1: USB disconnect, device number 5 [ 191.949207][ T7340] binder: 7339:7340 ioctl c0306201 200000000080 returned -14 [ 191.975677][ T7340] binder: 7339:7340 ioctl c0306201 2000000003c0 returned -14 [ 192.656841][ T7361] netlink: 'syz.6.434': attribute type 1 has an invalid length. [ 193.059706][ T7374] binder: 7373:7374 ioctl c0306201 200000000080 returned -14 [ 193.138865][ T7374] binder: BINDER_SET_CONTEXT_MGR already set [ 193.158781][ T7374] binder: 7373:7374 ioctl 4018620d 200000000040 returned -16 [ 193.182946][ T7374] binder: 7373:7374 ioctl c0306201 2000000003c0 returned -14 [ 193.572556][ T5958] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 193.619178][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.625786][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.735013][ T5958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.746182][ T5958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.826647][ T5958] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 193.845318][ T5958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.886532][ T5958] usb 1-1: config 0 descriptor?? [ 194.391095][ T5958] usbhid 1-1:0.0: can't add hid device: -71 [ 194.397568][ T5958] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 194.454425][ T5958] usb 1-1: USB disconnect, device number 3 [ 194.465945][ T7399] [ 194.468454][ T7399] ============================= [ 194.473532][ T7399] WARNING: suspicious RCU usage [ 194.478436][ T7399] syzkaller #0 Not tainted [ 194.482938][ T7399] ----------------------------- [ 194.487786][ T7399] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 194.496359][ T7399] [ 194.496359][ T7399] other info that might help us debug this: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 194.496359][ T7399] [ 194.506734][ T7399] [ 194.506734][ T7399] rcu_scheduler_active = 2, debug_locks = 1 [ 194.514912][ T7399] 1 lock held by syz.2.449/7399: [ 194.519956][ T7399] #0: ffffffff8e7e6b18 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: bpf_prog_test_run_syscall+0x301/0xad0 [ 194.532958][ T7399] [ 194.532958][ T7399] stack backtrace: [ 194.538966][ T7399] CPU: 1 UID: 0 PID: 7399 Comm: syz.2.449 Not tainted syzkaller #0 PREEMPT(full) [ 194.539010][ T7399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 194.539030][ T7399] Call Trace: [ 194.539043][ T7399] [ 194.539063][ T7399] dump_stack_lvl+0x100/0x190 [ 194.539123][ T7399] lockdep_rcu_suspicious.cold+0x4f/0xb1 [ 194.539189][ T7399] get_callchain_entry+0x278/0x3f0 [ 194.539256][ T7399] get_perf_callchain+0x2d6/0x9c0 [ 194.539289][ T7399] ? __entry_text_end+0x1020b5/0x1020b9 [ 194.539336][ T7399] ? __pfx_get_perf_callchain+0x10/0x10 [ 194.539371][ T7399] ? __schedule+0x1000/0x6120 [ 194.539408][ T7399] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.539452][ T7399] ? __lock_acquire+0x4a5/0x2630 [ 194.539522][ T7399] __bpf_get_stack+0x531/0xa90 [ 194.539594][ T7399] ? __pfx___bpf_get_stack+0x10/0x10 [ 194.539664][ T7399] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.539717][ T7399] bpf_get_stack+0x32/0x40 [ 194.539776][ T7399] bpf_get_stack_raw_tp+0x1dd/0x280 [ 194.539837][ T7399] bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 194.539870][ T7399] bpf_prog_test_run_syscall+0x4b1/0xad0 [ 194.539916][ T7399] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 194.539957][ T7399] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.540001][ T7399] ? fput+0x79/0x100 [ 194.540033][ T7399] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.540081][ T7399] ? __bpf_prog_get+0x97/0x2a0 [ 194.540124][ T7399] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 194.540164][ T7399] __sys_bpf+0x1725/0x4b90 [ 194.540218][ T7399] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.540270][ T7399] ? __pfx___sys_bpf+0x10/0x10 [ 194.540326][ T7399] ? __pfx_futex_wait+0x10/0x10 [ 194.540381][ T7399] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.540425][ T7399] ? rcu_is_watching+0x12/0xc0 [ 194.540466][ T7399] ? trace_sched_exit_tp+0x13a/0x180 [ 194.540524][ T7399] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.540567][ T7399] ? do_futex+0x192/0x350 [ 194.540617][ T7399] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.540681][ T7399] ? xfd_validate_state+0x129/0x190 [ 194.540740][ T7399] __x64_sys_bpf+0x7b/0xc0 [ 194.540787][ T7399] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.540823][ T7399] ? lockdep_hardirqs_on+0x78/0x100 [ 194.540856][ T7399] do_syscall_64+0x106/0xf80 [ 194.540889][ T7399] ? irqentry_exit+0x138/0x670 [ 194.540925][ T7399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.540956][ T7399] RIP: 0033:0x7efd1d59c819 [ 194.540980][ T7399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.541009][ T7399] RSP: 002b:00007efd1e53d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 194.541036][ T7399] RAX: ffffffffffffffda RBX: 00007efd1d815fa0 RCX: 00007efd1d59c819 [ 194.541056][ T7399] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 194.541074][ T7399] RBP: 00007efd1d632c91 R08: 0000000000000000 R09: 0000000000000000 [ 194.541093][ T7399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.541111][ T7399] R13: 00007efd1d816038 R14: 00007efd1d815fa0 R15: 00007fffaafcc098 [ 194.541151][ T7399] [ 197.707663][ T6673] syz_tun (unregistering): left allmulticast mode [ 197.888727][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.064720][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.196236][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.294945][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.552380][ T12] bridge_slave_1: left allmulticast mode [ 198.558173][ T12] bridge_slave_1: left promiscuous mode [ 198.564482][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.577066][ T12] bridge_slave_0: left allmulticast mode [ 198.587946][ T12] bridge_slave_0: left promiscuous mode [ 198.596986][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.779558][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.790778][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.801937][ T12] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 198.817026][ T12] bond0 (unregistering): Released all slaves [ 198.830314][ T12] bond1 (unregistering): Released all slaves [ 199.205282][ T12] hsr_slave_0: left promiscuous mode [ 199.229632][ T12] hsr_slave_1: left promiscuous mode [ 199.243129][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.250535][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.283483][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.290913][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.341861][ T12] veth1_macvtap: left promiscuous mode [ 199.352403][ T12] veth0_macvtap: left promiscuous mode [ 199.357982][ T12] veth1_vlan: left promiscuous mode [ 199.372877][ T12] veth0_vlan: left promiscuous mode [ 199.749139][ T12] team0 (unregistering): Port device team_slave_1 removed [ 199.766329][ T12] team0 (unregistering): Port device team_slave_0 removed [ 200.321230][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.386286][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.469505][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.533933][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.737410][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.846248][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.914512][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.982890][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.218425][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.322801][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.421946][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.519685][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.700622][ T12] bridge_slave_1: left allmulticast mode [ 201.707685][ T12] bridge_slave_1: left promiscuous mode [ 201.713992][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.726656][ T12] bridge_slave_0: left allmulticast mode [ 201.732764][ T12] bridge_slave_0: left promiscuous mode [ 201.739340][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.751241][ T12] bridge_slave_1: left allmulticast mode [ 201.757141][ T12] bridge_slave_1: left promiscuous mode [ 201.763228][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.775799][ T12] bridge_slave_0: left allmulticast mode [ 201.781457][ T12] bridge_slave_0: left promiscuous mode [ 201.787273][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.799727][ T12] bridge_slave_1: left allmulticast mode [ 201.805620][ T12] bridge_slave_1: left promiscuous mode [ 201.811377][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.821358][ T12] bridge_slave_0: left allmulticast mode [ 201.827496][ T12] bridge_slave_0: left promiscuous mode [ 201.833429][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.071856][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.085154][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.096049][ T12] bond0 (unregistering): Released all slaves [ 202.205091][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.216630][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.227136][ T12] bond0 (unregistering): Released all slaves [ 202.389156][ T12] bond0 (unregistering): (slave 1!7): Releasing backup interface [ 202.400135][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.411873][ T12] bond0 (unregistering): Released all slaves [ 202.592598][ T12] tipc: Left network mode [ 203.211159][ T12] hsr_slave_0: left promiscuous mode [ 203.217857][ T12] hsr_slave_1: left promiscuous mode [ 203.226948][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.234690][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.247960][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.255739][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.268975][ T12] hsr_slave_0: left promiscuous mode [ 203.275560][ T12] hsr_slave_1: left promiscuous mode [ 203.281762][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.293510][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.301817][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.309714][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.323657][ T12] hsr_slave_0: left promiscuous mode [ 203.331374][ T12] hsr_slave_1: left promiscuous mode [ 203.341869][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.349588][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.361006][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.368702][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.399720][ T12] veth1_macvtap: left promiscuous mode [ 203.406656][ T12] veth0_macvtap: left promiscuous mode [ 203.412367][ T12] veth1_vlan: left promiscuous mode [ 203.417805][ T12] veth0_vlan: left promiscuous mode [ 203.424873][ T12] veth1_macvtap: left promiscuous mode [ 203.430390][ T12] veth0_macvtap: left promiscuous mode [ 203.437627][ T12] veth1_vlan: left promiscuous mode [ 203.443085][ T12] veth0_vlan: left promiscuous mode [ 203.468896][ T12] veth1_macvtap: left promiscuous mode [ 203.474479][ T12] veth0_macvtap: left promiscuous mode [ 203.481108][ T12] veth1_vlan: left promiscuous mode [ 203.486583][ T12] veth0_vlan: left promiscuous mode [ 203.999100][ T12] team0 (unregistering): Port device team_slave_1 removed [ 204.033107][ T12] team0 (unregistering): Port device team_slave_0 removed [ 204.362140][ T12] team0 (unregistering): Port device team_slave_1 removed [ 204.381495][ T12] team0 (unregistering): Port device team_slave_0 removed