last executing test programs: 8m21.166188911s ago: executing program 32 (id=27): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5551, &(0x7f00000004c0)="$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") r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x6, 0x9e, 0xd, 0xffffffffffffffff, 0x2, 0x3, 0x9, 0x2ca, 0x38, 0x425e, 0xc, 0xfffb, 0x20, 0x2, 0xfff8, 0x41e, 0x200}, [{0x5, 0x4, 0x7, 0x3, 0x9, 0x8, 0x101}, {0x6474e551, 0x6, 0x0, 0x0, 0x7fc, 0xe, 0x4, 0x100004c0}]}, 0x78) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 7m15.084982703s ago: executing program 33 (id=486): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m18.919602628s ago: executing program 34 (id=772): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_ROPEN(r1, &(0x7f0000000040)={0x18, 0x71, 0x2, {{0x1, 0x3, 0x1}, 0x5ee4}}, 0x18) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="cb", 0x1) r3 = accept4(r2, 0x0, 0x0, 0x800) splice(r0, 0x0, r3, 0x0, 0x1e8640, 0x0) 6m18.328253969s ago: executing program 6 (id=878): socket$nl_xfrm(0x10, 0x3, 0x6) setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x4c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "21beb61e47fb11ca0398fdaa6f1fc878"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5d}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 6m18.089263043s ago: executing program 6 (id=879): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) close(r0) 6m17.394894694s ago: executing program 6 (id=885): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r3, 0x2}, &(0x7f0000000300)=0x8) 6m17.074625757s ago: executing program 6 (id=888): syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x12140c5, &(0x7f0000000740)={[{@fat=@quiet}, {@shortname_mixed}, {@fat=@sys_immutable}, {@utf8no}, {@fat=@nfs}, {@utf8}, {@shortname_win95}, {@utf8no}, {}, {@utf8}, {@numtail}, {@numtail}, {@utf8no}]}, 0x0, 0x2c4, &(0x7f0000000800)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000b40)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000c80)='.\x00', &(0x7f0000000cc0)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020) 6m16.632489192s ago: executing program 6 (id=890): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x1, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x4, 0x54, 0x4, 0x75}, 0x9c) 6m15.869136761s ago: executing program 6 (id=898): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000840)={0x2020}, 0x2020) 6m15.219151218s ago: executing program 35 (id=898): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000840)={0x2020}, 0x2020) 4m37.480673751s ago: executing program 8 (id=1660): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x80080, 0x0) lseek(r2, 0x1, 0x0) getdents64(r2, 0x0, 0x22) 4m37.294951529s ago: executing program 8 (id=1662): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB="5ad2a94d55"], 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, &(0x7f00000000c0)) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 4m37.164257323s ago: executing program 8 (id=1665): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setuid(0xee00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) sendmmsg$unix(r0, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)='+', 0x1}], 0x1, &(0x7f0000000880)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}}], 0x1, 0x0) 4m37.074620142s ago: executing program 8 (id=1667): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000002040)='./bus\x00', 0x0, 0x321001, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='./file2\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) 4m36.444073306s ago: executing program 8 (id=1684): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b02, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x5b03, 0x0) syz_usb_disconnect(r0) 4m36.080750183s ago: executing program 8 (id=1676): socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r2, @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x2000800) 4m35.885549083s ago: executing program 36 (id=1676): socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r2, @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x2000800) 3m39.085548148s ago: executing program 3 (id=2048): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000600)=ANY=[], 0x342) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gretap0\x00', 0x0}) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x104a8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto(r0, 0x0, 0x4a, 0x468fd, &(0x7f00000004c0)=@l2={0x1f, 0x3, @none, 0x9, 0x1}, 0x80) 3m38.696483318s ago: executing program 3 (id=2050): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x80001, 0x84) socket$inet(0x2, 0x80001, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x4, 0x1, 0x0, 0x1, [{0x3}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x11}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 3m38.290401939s ago: executing program 3 (id=2040): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2703) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000280)={0x0, 0x5, 0x2, &(0x7f0000000080)={0x11, "b3d92cdddf96c20e9064264ccfc6000000fa00008c0000c87fb100000000000100"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3m35.880769725s ago: executing program 3 (id=2065): syz_mount_image$hfsplus(&(0x7f00000002c0), &(0x7f0000000180)='./bus\x00', 0xc, &(0x7f0000000d00)=ANY=[@ANYRES8=0x0, @ANYBLOB="050000006fe9bab3f0ab797f1eec2c308c47ccf9510a98013053ad64c2a1184e15", @ANYRES64=0x0, @ANYRES8, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYBLOB="9051ca6e9be95132dc27788fb65b7c8c5292366b36ad10cb7703479fc14eaad152e20ac346e9802e8b1ac8ae47addb058fe698ba3eddb4fef6c10267aeb797abd72dc85c52525f25df2a24d9be61fb56e12761ed3eca7d8ecd65f3fad66194e6906b2b933f460f0c8f6f43d1245bd80180", @ANYBLOB="5f9c36fa3b65193646fd9835c7d87c180bed25c821c5bce901fb63a3241bb1a27f9e7c33f450f8b8b454ea6765554f1fc79bcd4b63529dc5690c97f9bf9e1e90fa931d3a64f1b800000034ab4e4ea247d309cddb93373add7a92f0aa2408a97f780a372e98868a8bb2c9b8d2ba8c04a1ef8970a0b770473b97e0becb361381429b92d594d0373cfb70a5fdd780220c251107aba11d6f8a44c8810c007804e92398b45c96661c438dbcea15d3a6c4c750233608ffba88e1abea1e0d72eb3279645a70a09c", @ANYRES32=0x0], 0x1, 0x71f, &(0x7f0000000380)="$eJzs3UtsHGcdAPD/rNfrXSOlTptHQZVqNVJBWCR2LAfMhYAQ8qFCVTlwxUqcxsrGqWwXOREiboE7B06cysG3igMq90hwpqqEevWBQyWkXsrF4mI0szP78D4dP1t+v2h2vvne8995eHcVTQD/t5ZmovwskliaeWMr3d7dma+P7cxP5MX1iKhERCmi3FhFshZZ6e18ia+nmXn9pM8wSawuvvXpF7ufNTbL+ZLVTwa066XSnbWdLzEdEWP5utt4nx4/Ojh8R393+vY3qtYepgG7VgQu/nikXuHI9rtsN8s+/Gf2Oqj5Yc5b4PxJb+rpiTzW63yeipiMiGpE466/Hbeabb7Mts96AgAAAHBYtR555cFNXtiLvdiKCyc1JQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgqanv+f5I/3z9LT0dSPP+/ktVoqJzpZPvq9SDETp9MNNbPTn4yAAAAAAAAAHDiXt2LvdiKC8X2fpL95v9a/rt/6mvxbmzESqzH9diK5diMzViPuYiYauuosrW8ubk+l7WMuDSg5c34uEfLm/3nePuY9xkAAAAAAAAAzrnqkPIH491578dS6/d/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4D5KIscYqWy4V6akolSOiWtTbjvg4IipnO9tDSXplPjv9eQAAAMCRVDs3k+oIbV54GnuxFReK7f0k+8x/Jfu8XI13Yy02YzU2ox4rcTf/DJ1+6i/t7szXd3fmH6ZLd78//PxQU896jMZ3D71HfjmrUYt7sZrlXI87kcR+ppT38vLuzny6fth7Xu+lc0p+kBswm7G29N305epHWfr3nd8ilA+1i8+p1LdkKisdj3vZlzArMZvPLW1xsYhA70gMfXeKXdvuHCmP/VyUmt/8XGofpTsiHTHff1rkDhz8vckDtXp+c3MmDkbiZpSa79CVwTGP+OZfP/z5/frag/v3NmbOzy719HRojYORmG+LxNWvUCSGm80icbm5vRQ/iZ/FTHw+8Wasx2r8MpZjM1ami/Ll/HhOX6cGR+qTyfatN0edUeP61WtO09Exp5iOH2ep5Xgte08vxGok8Si7ntzK/t2MuebVoPUOXx487+ysL41wpY29/zQu4RHXvpVlNMMUtf6t/jxqJI5Heq272BbX1lE/m50HF/Ocf72fHg2tKL3YM0rFvW70+1Gb8jfyRNrDbwbeH05beySKu0Qxu5f6HS+NkP5pP33dqK89WL+//M6I472er9Pz6Hfdd4m+h8/JRyx9h1+Mar5zF7PXJL9Hp2UvNe+wnfGq5L+4FPM8WHa52a5xpv40HsXdjjP1u7EQC7GY1b6S1R7vumOlZVebPXVew9Oy9C+tcvOHnfa/tx5FvfH3EADn2+S3Jyu1f9f+Ufug9tva/dob1R9NfG/ilUqM/338++XZsddLryR/iQ/i163P/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPPbePzkwXK9vrLeO1HqXZQMbrVcbz7xbUCdjkSSPypnhMrJxuMn+0M7HJyYyKd3iFal0SJ26ETxtMa2orGI6FF5+vgG7Ur8t/E4rv1WTnX4nhYhGWGIpCvgaePnnnMxcitnfGir/fGeUT3BxPQRmpc7c4oDtq3OoY7eLFHr9X71OdjqQy4cY8dw8QHO1I3Nh+/c2Hj85DurD5ffXnl7ZW18YWFxdnHh1vyNe6v1ldnGa1uDU3n4LXAa2v+caKpExKvD2w54UCsAAAAAAAAAAABwgk7j/0J0jviLs9pVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4EtqaSbKzyKJudnrs+n27s58PV2KdKtmOSJKEZH8KiL5W8TtaCwx1dZd0m+cP6wuvvXpF7uftfoqF/VLEdt9241mO19iOiLG8vVx9XdneH+VVnKiR3HSjEwasGtF4KpHmyQc2f8CAAD//xAj9VU=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) epoll_create(0x9) prlimit64(0x0, 0xe, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) 3m35.250898869s ago: executing program 3 (id=2074): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f0000000040)=0x747, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff01c}, {0x6, 0x0, 0x4}]}, 0x10) 3m32.928557037s ago: executing program 3 (id=2085): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672ba2600fb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a310000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB='\b'], 0x90}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) 3m32.59770224s ago: executing program 37 (id=2085): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672ba2600fb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a310000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB='\b'], 0x90}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) 3m7.70076275s ago: executing program 9 (id=2275): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x160, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x1f8, 0x1f8, 0x1f8, 0xffffffff, 0x4, 0x0, {[{{@ip={@multicast1, @private=0xa010102, 0x0, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x8, 0x0, 0x2}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x40000000000021d, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 3m7.453401025s ago: executing program 9 (id=2278): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) listen(r0, 0xfffff789) 3m7.222422439s ago: executing program 9 (id=2290): r0 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400)=0x0, &(0x7f0000011000)=0x0, &(0x7f0000000000)) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, 0x0, 0x0) syz_io_uring_complete(r1, r2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0xf, 0xfffffbff) 3m5.561991089s ago: executing program 9 (id=2293): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x3c5093, 0x0) umount2(&(0x7f0000000400)='./file0/file0\x00', 0x0) 3m5.294025346s ago: executing program 9 (id=2298): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6bb74189000003c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x37}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000180)={0x1, 0x0, {[0xd, 0xfff, 0x38000000000000, 0x9, 0x38d, 0xc08, 0x8000000000000001, 0x8]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m3.363061423s ago: executing program 9 (id=2306): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x53fe0) ppoll(&(0x7f0000000240)=[{r1, 0x610a}], 0x1, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3m2.843283346s ago: executing program 38 (id=2306): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x53fe0) ppoll(&(0x7f0000000240)=[{r1, 0x610a}], 0x1, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m14.900739758s ago: executing program 5 (id=3070): setfsgid(0xee00) setregid(0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f00000000c0)='io\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 1m14.727011316s ago: executing program 5 (id=3071): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x4, 0xe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1m14.537447206s ago: executing program 5 (id=3072): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xca, r0, 0x700}, 0x38) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x38) 1m14.356384024s ago: executing program 5 (id=3073): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x12048c1, &(0x7f00000000c0)={[{@uni_xlate}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x48a}}, {@utf8no}, {@utf8}, {@shortname_lower}, {@utf8}, {@uni_xlateno}, {@uni_xlateno}, {@shortname_mixed}, {@fat=@flush}, {@shortname_winnt}, {@uni_xlate}]}, 0x0, 0x2bf, &(0x7f0000000400)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000840)='.\x00', &(0x7f0000000880)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) 1m14.048215155s ago: executing program 5 (id=3074): setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x8, 0x200, 0x200, 0x4}, 0x3c) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x2, 0x1) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x48) splice(r0, 0x0, r2, 0x0, 0x3000, 0x100000000000000d) 1m12.303259993s ago: executing program 5 (id=3080): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {0x0, 0xff}, 0x2}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 1m11.644472071s ago: executing program 39 (id=3080): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {0x0, 0xff}, 0x2}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 6.113886616s ago: executing program 1 (id=3573): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x100bf28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0xfffff805}, 0x1c) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000000c0)={0x4, {{0x2, 0x4e23, @local}}}, 0x88) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet6(r0, 0x0, 0x3d, 0x4088010, 0x0, 0x0) 3.708786902s ago: executing program 4 (id=3582): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x8e000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10020, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000400)={0x0, 0xfb89, 0x1, 0x202, 0x40000090}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 3.62812522s ago: executing program 1 (id=3583): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000001dc0)='GPL\x00', 0x4, 0x436, &(0x7f0000001e00)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001ec0), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000022c0)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="638b068c2281fdc635f76c27a66e0a24a9064e3ad582122bfead30579243af725ead3619f8276b8ec1d8878762ed567537303bb30843625bdd6f7a7d36bb182bf3f678a8cb0ffcae85a0e607ed0778b43509c880f23243bf653421724bd2caf87b9184e8cfcbc21dd45c97bee606e2254d645e041075ee3847e00d85d7bf36ededc81307bc7796e58b7d538abc0f17e613a2eccc71196a23bbe5dc12a1d70a48555c3b2651e6ae70f0eb4c04eab1a79a1c927bde438c47f38b511e1aeb55eecd0daf9889", 0xc4}, {&(0x7f0000000700)="d40c9d4ac83d24842ebe0c4fe85061c751428aa70c3bc7439f1085b33079cda812fda9d1f21c7784a35f4cdc1bd1856d0a53", 0x32}, {&(0x7f0000000740)="3a243b922924f0285ad393a04fde0b1c1b370adc6d9d", 0x16}, {&(0x7f0000000780)="5ddfcb0a376d41440ff780be43f5bda746ce5e9f8ebfb93dc331edee4885c04c905cdc397ceeb7891ffd95c5455c92ef7614aea4636a94b3bec34345450bf4bfa1f1054997b1dcd8f31e154b4d7d6ef80ea7bc76904b748c5588db494605835860934a3d8fa46e1fd9cee40938cf252497c2adb09989b4", 0x77}], 0x4}}], 0x1, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000002380)={r0}) 3.269557037s ago: executing program 0 (id=3587): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x16, 0xfc, 0x5, 0xffffffff}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.109629583s ago: executing program 1 (id=3588): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000e01000700000000000000000000ffff0000000200000000000000000000ffff"], 0x4c}, 0x1, 0x0, 0x0, 0x40040d4}, 0x0) 2.879531236s ago: executing program 0 (id=3591): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.872720467s ago: executing program 4 (id=3592): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000025c0)=@arena={0x21, 0x0, 0x0, 0x15, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) 2.84069288s ago: executing program 2 (id=3593): socket$nl_route(0x10, 0x3, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) tkill(0x0, 0x13) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 2.580776477s ago: executing program 1 (id=3594): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000300)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000500)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) 2.532764042s ago: executing program 7 (id=3604): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x4, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x9}, 0x9c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20048090) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.347207941s ago: executing program 2 (id=3595): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x62c40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000a40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002a80)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002b00)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000004b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004bc0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000006d40)='./file0\x00', 0x20c01, 0x0) ioctl$HIDIOCGRDESC(r2, 0x90044802, 0x0) 2.236661302s ago: executing program 0 (id=3596): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0xb66f) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="c962", 0x2}], 0x1}, 0x4004045) sendfile(r0, r1, 0x0, 0x7ffff006) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000700)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/169, 0xa9, 0x0, 0x0}, &(0x7f0000000800)=0x40) 2.214574574s ago: executing program 1 (id=3597): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080100000000000000400000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r4 = gettid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000000c0)=r4) 2.208963184s ago: executing program 7 (id=3598): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0xd}, 0x8) 1.955810001s ago: executing program 2 (id=3599): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x4000000, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x200000, 0x2, 0x0, 0x0, 0x4620, 0x3}, 0x20) ftruncate(r1, 0x2007ff9) ioctl$KVM_RESET_DIRTY_RINGS(r0, 0xaec7) sendfile(r0, r0, 0x0, 0x7a680000) 1.930737933s ago: executing program 7 (id=3600): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x0) r4 = fanotify_init(0x0, 0x0) fanotify_mark(r4, 0x1, 0x48001013, r3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) 1.920810434s ago: executing program 0 (id=3601): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 1.687404938s ago: executing program 7 (id=3602): mlock2(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) r0 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1}, 0x50) capset(&(0x7f0000a31000)={0x19980330, r0}, &(0x7f0000000080)={0x0, 0x7ff, 0x2, 0x0, 0x9, 0x8000}) r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r1, &(0x7f0000000fc0)=""/224, 0xe0) mlock2(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x1) 1.509164886s ago: executing program 2 (id=3603): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r0}, 0xc) 1.440727493s ago: executing program 7 (id=3605): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) fsopen(0x0, 0x1) sync_file_range(0xffffffffffffffff, 0xc7ef, 0x1, 0x5) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x25}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80) 1.212877066s ago: executing program 4 (id=3606): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0xea60}, 0x12, 0x2002}], 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) 1.107252377s ago: executing program 2 (id=3607): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r1 = fanotify_init(0x1a, 0x800) fanotify_mark(r1, 0x541, 0x40001019, r0, 0x0) r2 = fanotify_init(0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r2, 0x455, 0x8000003, r3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 948.888193ms ago: executing program 1 (id=3608): r0 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xa) 784.70591ms ago: executing program 0 (id=3609): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x18e) ftruncate(r0, 0x200000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0xe7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0xe7) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 775.816241ms ago: executing program 2 (id=3610): r0 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, r0) ptrace(0x4208, r0) ptrace(0x4207, r0) syz_open_dev$tty1(0xc, 0x4, 0x1) 754.733903ms ago: executing program 7 (id=3611): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468a957ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2233f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) rt_tgsigqueueinfo(0x0, 0x0, 0x1, &(0x7f0000000000)={0x5, 0x100, 0x6}) 418.431847ms ago: executing program 4 (id=3612): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x8c) fchdir(r1) setreuid(0xee01, 0x0) r2 = getuid() setresuid(r2, r2, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) 368.720383ms ago: executing program 0 (id=3613): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f000026f000/0x6000)=nil, 0x6000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f0000000080)=""/172, 0xdc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000731000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3000}) 241.860886ms ago: executing program 4 (id=3614): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@wrmsr={0x65, 0x20, {0x40000004, 0x3}}], 0x20}) syz_open_procfs(0x0, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x6, 0x0, 0x31237648, 0x6, 0x2, 0xc0}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2f}) 0s ago: executing program 4 (id=3615): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="040000000000", 0x6) write(r0, &(0x7f0000000180)="3000000002000000", 0x8) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04080400c80002"], 0x7) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c8200b000700070001030021100202"], 0x10) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c8201500110007000801010101010101010101010101010101"], 0x1a) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c8200b00070007000900aaaaaaaaaa10"], 0x10) kernel console output (not intermixed with test programs): id=0 ses=4294967295 subj=unconfined pid=12503 comm="syz.7.2309" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b08b9f559 code=0x7fc00000 [ 415.529942][ T26] audit: type=1326 audit(1792747512.478:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12503 comm="syz.7.2309" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b08b9f559 code=0x7fc00000 [ 415.599604][ T26] audit: type=1326 audit(1792747512.478:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12503 comm="syz.7.2309" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b08b9f559 code=0x7fc00000 [ 415.676932][ T26] audit: type=1326 audit(1792747512.478:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12503 comm="syz.7.2309" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b08b9f559 code=0x7fc00000 [ 415.740641][ T4282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 415.763100][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 415.770186][ T26] audit: type=1326 audit(1792747512.478:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12503 comm="syz.7.2309" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b08b9f559 code=0x7fc00000 [ 415.770227][ T26] audit: type=1326 audit(1792747512.478:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12503 comm="syz.7.2309" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b08b9f559 code=0x7fc00000 [ 415.822208][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 415.833322][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 415.844306][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 415.851652][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 415.917473][T12517] rxe_eth0 speed is unknown, defaulting to 1000 [ 416.088034][ T26] audit: type=1326 audit(1792747512.478:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12503 comm="syz.7.2309" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b08b9f559 code=0x7fc00000 [ 416.154915][ T26] audit: type=1326 audit(1792747512.478:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12503 comm="syz.7.2309" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b08b9f559 code=0x7fc00000 [ 416.321815][T12517] dummy0 speed is unknown, defaulting to 1000 [ 416.674972][ T4280] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 416.684653][ T4280] Bluetooth: hci5: Injecting HCI hardware error event [ 416.698332][ T4278] Bluetooth: hci5: hardware error 0x00 [ 416.844307][T12517] chnl_net:caif_netlink_parms(): no params data found [ 417.032079][T12556] loop4: detected capacity change from 0 to 128 [ 417.080337][T12556] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 417.092039][T12556] ext4 filesystem being mounted at /483/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 417.103657][T12517] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.113327][T12517] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.129928][T12556] syz.4.2322 (pid 12556) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 417.142950][T12517] device bridge_slave_0 entered promiscuous mode [ 417.152728][T12517] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.181373][T12517] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.214284][T12517] device bridge_slave_1 entered promiscuous mode [ 417.293735][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 417.293769][T12517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.394453][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2324'. [ 417.522313][T12517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.542119][T12570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2324'. [ 417.623759][T12570] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 417.677879][T12571] bridge0: port 1(vlan3) entered blocking state [ 417.684551][T12571] bridge0: port 1(vlan3) entered disabled state [ 417.772840][T12517] team0: Port device team_slave_0 added [ 417.829131][T12517] team0: Port device team_slave_1 added [ 417.876294][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 417.902095][T12517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.921222][T12517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.050297][T12517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.087083][T12517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.104365][T12517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.214390][T12517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.346365][T12517] device hsr_slave_0 entered promiscuous mode [ 418.406028][T12517] device hsr_slave_1 entered promiscuous mode [ 418.435889][T12517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 418.455352][T12517] Cannot create hsr debugfs directory [ 418.755308][ T4278] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 419.955026][ T4278] Bluetooth: hci0: command 0x041b tx timeout [ 420.461193][T12517] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 420.502294][T12517] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 420.523726][T12517] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 420.568335][T12517] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 420.765316][T12517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.806929][ T9057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 420.823525][ T9057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 420.853623][T12517] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.907239][T10570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 420.933709][T10570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 420.960061][T10570] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.967329][T10570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.992932][T10570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 421.028538][T10570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 421.046731][T10570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 421.065730][T10570] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.072928][T10570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.114094][ T9057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 421.171282][T10683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 421.180898][T10683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 421.239716][T10683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 421.286373][T10683] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 421.313536][T10683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 421.337723][T10683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 421.353575][T10683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 421.362717][T10683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 421.383605][T12678] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2356'. [ 421.395746][T12517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.426307][ T128] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 421.434073][T12517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 421.448171][T10683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 421.466344][T10683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 421.615484][ T128] usb 1-1: Using ep0 maxpacket: 32 [ 421.624248][ T128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.664604][ T128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.701168][ T128] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 421.728503][ T128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.764588][ T128] usb 1-1: config 0 descriptor?? [ 422.035991][ T4278] Bluetooth: hci0: command 0x040f tx timeout [ 422.226668][T12696] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2359'. [ 422.239504][ T128] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 422.274993][ T128] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 422.295348][T12696] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2359'. [ 422.305674][ T128] ft260 0003:0403:6030.0008: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 422.323551][T12696] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2359'. [ 422.343299][T12696] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2359'. [ 422.370297][T10684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 422.413703][T10684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 422.437351][ T128] ft260 0003:0403:6030.0008: chip code: 0000 0000 [ 422.439223][T12517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.839943][ T128] ft260 0003:0403:6030.0008: failed to retrieve status: -32, no wakeup [ 423.057075][ T128] ft260 0003:0403:6030.0008: failed to reset I2C controller: -71 [ 423.131427][ T128] usb 1-1: USB disconnect, device number 4 [ 423.227752][T12716] rxe_eth0 speed is unknown, defaulting to 1000 [ 423.471611][T12720] fido_id[12720]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 423.557197][T12716] dummy0 speed is unknown, defaulting to 1000 [ 423.846147][ T7128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 423.869800][ T7128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 423.995954][ T9057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 424.004374][ T9057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 424.054517][ T9057] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 424.085761][ T9057] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 424.115224][ T4278] Bluetooth: hci0: command 0x0419 tx timeout [ 424.142932][T12517] device veth0_vlan entered promiscuous mode [ 424.307340][T12517] device veth1_vlan entered promiscuous mode [ 424.421837][ T7128] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 424.446136][ T7128] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 424.495240][ T7128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 424.519162][ T7128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 424.560820][T12517] device veth0_macvtap entered promiscuous mode [ 424.615485][T12517] device veth1_macvtap entered promiscuous mode [ 424.703377][T12517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.731817][T12517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.773153][T12517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.814645][T12517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.835526][T12517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.863284][T12517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.887894][T12517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.910024][T12517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.931116][T12517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.943311][T12517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.959798][T12772] loop2: detected capacity change from 0 to 2048 [ 424.995500][T12517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.026491][ T9056] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 425.038057][ T9056] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 425.057316][ T9056] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 425.059103][T12772] Alternate GPT is invalid, using primary GPT. [ 425.081537][ T9056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 425.094976][T12772] loop2: p1 p2 p3 [ 425.098772][T12772] loop2: partition table partially beyond EOD, truncated [ 425.112077][T12517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.133310][T12517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.162166][T12517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.200442][T12517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.229995][T12517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.267445][T12517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.327741][T12517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.378952][T12517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.433274][T12517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.481828][T12517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.565073][T12517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.604698][T10684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 425.638998][T10684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 425.727931][T12517] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.758286][T12517] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.833051][T12517] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.874895][T12517] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.205061][T10684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.242380][T10684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.267521][T10683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 426.387223][ T7128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.425473][ T7128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.466449][ T9056] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 426.580044][T12806] xt_hashlimit: size too large, truncated to 1048576 [ 427.652827][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 427.652841][ T26] audit: type=1326 audit(1792747524.788:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.5.2393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12099f559 code=0x7ffc0000 [ 427.781556][ T26] audit: type=1326 audit(1792747524.808:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.5.2393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12099f559 code=0x7ffc0000 [ 427.860249][ T26] audit: type=1326 audit(1792747524.808:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.5.2393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12099f559 code=0x7ffc0000 [ 427.903843][ T26] audit: type=1326 audit(1792747524.828:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.5.2393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd12099f559 code=0x7ffc0000 [ 427.953236][ T26] audit: type=1326 audit(1792747524.828:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.5.2393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12099f559 code=0x7ffc0000 [ 428.063071][ T26] audit: type=1326 audit(1792747524.828:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.5.2393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12099f559 code=0x7ffc0000 [ 428.131448][T12845] rdma_rxe: rxe_register_device failed with error -23 [ 428.173225][T12845] rdma_rxe: failed to add veth0_vlan [ 428.188559][ T26] audit: type=1326 audit(1792747524.838:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.5.2393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12099f559 code=0x7ffc0000 [ 428.302765][ T26] audit: type=1326 audit(1792747524.838:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.5.2393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd12099f559 code=0x7ffc0000 [ 428.416546][ T26] audit: type=1326 audit(1792747524.838:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.5.2393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12099f559 code=0x7ffc0000 [ 428.532431][ T26] audit: type=1326 audit(1792747524.838:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.5.2393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12099f559 code=0x7ffc0000 [ 430.565382][T12895] loop6: detected capacity change from 0 to 8 [ 430.685645][T12897] loop6: detected capacity change from 8 to 7 [ 430.739816][T12897] Dev loop6: unable to read RDB block 7 [ 430.794284][T12897] loop6: unable to read partition table [ 430.856876][T12897] loop6: partition table beyond EOD, truncated [ 430.908723][T12897] loop_reread_partitions: partition scan of loop6 (uG ܱ.:0 [ 430.908723][T12897] 咁 [ 431.268099][T12911] dump_stack_lvl+0x188/0x24e [ 431.272821][T12911] ? show_regs_print_info+0x12/0x12 [ 431.278154][T12911] ? load_image+0x410/0x410 [ 431.282721][T12911] ? __might_sleep+0xd0/0xd0 [ 431.287367][T12911] ? __lock_acquire+0x7ea0/0x7ea0 [ 431.292480][T12911] should_fail_ex+0x390/0x4c0 [ 431.297227][T12911] should_failslab+0x5/0x20 [ 431.301766][T12911] slab_pre_alloc_hook+0x59/0x300 [ 431.306836][T12911] ? file_end_write+0x156/0x250 [ 431.311833][T12911] kmem_cache_alloc+0x56/0x2f0 [ 431.316642][T12911] ? prepare_creds+0x3c/0x610 [ 431.321423][T12911] prepare_creds+0x3c/0x610 [ 431.325986][T12911] cap_task_prctl+0x92a/0xc00 [ 431.330715][T12911] security_task_prctl+0x75/0x100 [ 431.335808][T12911] __se_sys_prctl+0xc2/0x1100 [ 431.340614][T12911] ? __x64_sys_prctl+0xc0/0xc0 [ 431.345448][T12911] ? lockdep_hardirqs_on+0x94/0x140 [ 431.350694][T12911] ? __x64_sys_prctl+0x1c/0xc0 [ 431.355513][T12911] do_syscall_64+0x4c/0xa0 [ 431.359989][T12911] ? clear_bhb_loop+0x60/0xb0 [ 431.364698][T12911] ? clear_bhb_loop+0x60/0xb0 [ 431.369426][T12911] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 431.375364][T12911] RIP: 0033:0x7fd12099f559 [ 431.379809][T12911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.399447][T12911] RSP: 002b:00007fd121929028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 431.407910][T12911] RAX: ffffffffffffffda RBX: 00007fd120c25fa0 RCX: 00007fd12099f559 [ 431.415921][T12911] RDX: 0000000000000000 RSI: 000000000000001d RDI: 000000000000001c [ 431.424017][T12911] RBP: 00007fd120a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 431.432052][T12911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.440053][T12911] R13: 00007fd120c26038 R14: 00007fd120c25fa0 R15: 00007ffe2ab11eb8 [ 431.448074][T12911] [ 431.872352][ T128] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 432.067842][ T128] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 432.106856][ T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.376988][ T128] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 432.663099][ T5160] usb 5-1: USB disconnect, device number 12 [ 434.887526][T12962] loop2: detected capacity change from 0 to 32768 [ 434.934691][T12962] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2426 (12962) [ 434.972858][T12962] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 435.008612][T12962] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 435.051452][T12962] BTRFS info (device loop2): setting nodatasum [ 435.074528][T12962] BTRFS info (device loop2): force zlib compression, level 3 [ 435.104875][T12962] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 435.143529][T12962] BTRFS info (device loop2): use lzo compression, level 0 [ 435.199941][T12962] BTRFS info (device loop2): turning on flush-on-commit [ 435.212097][T12962] BTRFS info (device loop2): enabling auto defrag [ 435.244824][T12962] BTRFS info (device loop2): max_inline at 4096 [ 435.251218][T12962] BTRFS info (device loop2): using free space tree [ 435.345299][T12976] loop4: detected capacity change from 0 to 40427 [ 435.415103][T12976] F2FS-fs (loop4): invalid crc value [ 435.448164][T12976] F2FS-fs (loop4): Found nat_bits in checkpoint [ 435.914986][T12962] BTRFS info (device loop2): enabling ssd optimizations [ 435.936512][T12976] F2FS-fs (loop4): Start checkpoint disabled! [ 436.035144][T12976] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 436.104316][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 436.104332][ T26] audit: type=1800 audit(1792747533.238:846): pid=12962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2426" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 436.233826][ T26] audit: type=1800 audit(1792747533.278:847): pid=12962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2426" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 436.775937][T10683] kworker/u4:20: attempt to access beyond end of device [ 436.775937][T10683] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 437.517773][ T4286] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 437.934442][T13063] batman_adv: batadv0: Adding interface: syzkaller0 [ 437.974505][T13063] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.161896][T13063] batman_adv: batadv0: Interface activated: syzkaller0 [ 438.235488][T13062] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 438.412160][T13062] batman_adv: batadv0: Removing interface: syzkaller0 [ 438.737524][T13102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2458'. [ 438.870045][T13108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2461'. [ 438.904242][T13108] netlink: 'syz.2.2461': attribute type 11 has an invalid length. [ 438.940876][T13108] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.949737][T13108] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.958642][T13108] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.967459][T13108] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.069629][T13108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2461'. [ 439.099814][T13108] netlink: 'syz.2.2461': attribute type 11 has an invalid length. [ 439.402473][T13125] loop4: detected capacity change from 0 to 256 [ 440.105002][ T4365] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 440.121690][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.128079][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.296779][ T4365] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.319720][ T4365] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.339893][ T4365] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 440.360198][ T4365] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.397971][ T4365] usb 6-1: config 0 descriptor?? [ 440.831744][ T4365] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0 [ 440.856918][ T4365] hid-steam 0003:28DE:1142.0009: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 440.904439][ T4365] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x0 [ 440.961682][ T4365] hid-steam 0003:28DE:1142.000A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 441.075051][ T4365] hid-steam 0003:28DE:1142.0009: Steam wireless receiver connected [ 441.125075][ T4365] usb 6-1: USB disconnect, device number 4 [ 441.196127][ T4365] hid-steam 0003:28DE:1142.0009: Steam wireless receiver disconnected [ 441.410087][T13186] fido_id[13186]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 441.870907][T13205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2484'. [ 441.939520][T13209] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2484'. [ 441.981452][T13208] loop4: detected capacity change from 0 to 2048 [ 442.137797][T13208] Alternate GPT is invalid, using primary GPT. [ 442.162453][T13208] loop4: p2 p3 p7 [ 442.278604][T13208] loop2: detected capacity change from 0 to 7 [ 442.343813][T13208] loop2: [ 442.365405][T13208] loop2: partition table partially beyond EOD, truncated [ 442.780196][T13235] FAULT_INJECTION: forcing a failure. [ 442.780196][T13235] name failslab, interval 1, probability 0, space 0, times 0 [ 442.821705][T13235] CPU: 0 PID: 13235 Comm: syz.0.2491 Not tainted syzkaller #0 [ 442.829255][T13235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 442.839446][T13235] Call Trace: [ 442.842764][T13235] [ 442.845735][T13235] dump_stack_lvl+0x188/0x24e [ 442.850486][T13235] ? show_regs_print_info+0x12/0x12 [ 442.855747][T13235] ? load_image+0x410/0x410 [ 442.860336][T13235] ? __might_sleep+0xd0/0xd0 [ 442.864978][T13235] ? __lock_acquire+0x7ea0/0x7ea0 [ 442.870072][T13235] should_fail_ex+0x390/0x4c0 [ 442.874832][T13235] should_failslab+0x5/0x20 [ 442.879385][T13235] slab_pre_alloc_hook+0x59/0x300 [ 442.884462][T13235] ? __mutex_trylock_common+0x15c/0x260 [ 442.890072][T13235] ? start_sync_thread+0x9a1/0x2890 [ 442.895425][T13235] __kmem_cache_alloc_node+0x4f/0x270 [ 442.900867][T13235] ? start_sync_thread+0x9a1/0x2890 [ 442.906158][T13235] __kmalloc+0xa3/0x240 [ 442.910378][T13235] start_sync_thread+0x9a1/0x2890 [ 442.915485][T13235] ? sync_thread_master+0x10d0/0x10d0 [ 442.920961][T13235] ? sb_queue_tail+0x3e0/0x3e0 [ 442.925782][T13235] ? __might_fault+0xa6/0x120 [ 442.930509][T13235] ? __lock_acquire+0x7ea0/0x7ea0 [ 442.935597][T13235] ? mark_lock+0x94/0x320 [ 442.940047][T13235] ? __might_fault+0xa6/0x120 [ 442.944783][T13235] ? __might_fault+0xc2/0x120 [ 442.949501][T13235] ? __might_fault+0xa6/0x120 [ 442.954228][T13235] do_ip_vs_set_ctl+0x499/0xb40 [ 442.959153][T13235] ? update_defense_level+0xe20/0xe20 [ 442.964585][T13235] ? trace_contention_end+0x5f/0x170 [ 442.969943][T13235] ? mutex_unlock+0x10/0x10 [ 442.974507][T13235] ? mutex_lock_nested+0x10/0x10 [ 442.979593][T13235] nf_setsockopt+0x25f/0x280 [ 442.984318][T13235] ? sock_common_recvmsg+0x190/0x190 [ 442.989713][T13235] smc_setsockopt+0x219/0xb80 [ 442.994531][T13235] ? smc_shutdown+0x9a0/0x9a0 [ 442.999270][T13235] ? aa_sock_opt_perm+0x74/0x100 [ 443.004347][T13235] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 443.010003][T13235] ? security_socket_setsockopt+0x7a/0xa0 [ 443.015809][T13235] ? smc_shutdown+0x9a0/0x9a0 [ 443.020663][T13235] __sys_setsockopt+0x2bf/0x3d0 [ 443.025631][T13235] __x64_sys_setsockopt+0xb1/0xc0 [ 443.030723][T13235] do_syscall_64+0x4c/0xa0 [ 443.035209][T13235] ? clear_bhb_loop+0x60/0xb0 [ 443.039934][T13235] ? clear_bhb_loop+0x60/0xb0 [ 443.044683][T13235] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.050645][T13235] RIP: 0033:0x7f046979f559 [ 443.055116][T13235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.074855][T13235] RSP: 002b:00007f046a755028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 443.083322][T13235] RAX: ffffffffffffffda RBX: 00007f0469a25fa0 RCX: 00007f046979f559 [ 443.091346][T13235] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 443.099369][T13235] RBP: 00007f0469836b20 R08: 0000000000000018 R09: 0000000000000000 [ 443.107422][T13235] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000000 [ 443.115454][T13235] R13: 00007f0469a26038 R14: 00007f0469a25fa0 R15: 00007ffd4a2d9988 [ 443.123515][T13235] [ 443.330220][T13247] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2493'. [ 443.619385][T13258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2497'. [ 443.712127][T13258] device macvtap1 entered promiscuous mode [ 443.780781][T13262] device macvtap1 left promiscuous mode [ 444.118383][T13280] loop4: detected capacity change from 0 to 512 [ 444.157396][T13280] EXT4-fs: inline encryption not supported [ 444.214016][T13280] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 444.263671][T13280] EXT4-fs (loop4): orphan cleanup on readonly fs [ 444.290659][T13280] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.2504: inode #15: comm syz.4.2504: iget: illegal inode # [ 444.304480][T13280] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.2504: couldn't read orphan inode 15 (err -117) [ 444.318099][T13280] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 444.390063][T13283] loop2: detected capacity change from 0 to 8192 [ 444.436131][T13283] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 444.480526][T13283] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 444.501082][T13283] REISERFS (device loop2): using ordered data mode [ 444.508859][T13073] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 444.519904][T13283] reiserfs: using flush barriers [ 444.526341][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 444.618982][T13283] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 444.705083][T13073] usb 1-1: Using ep0 maxpacket: 8 [ 444.711824][T13073] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 444.723552][T13283] REISERFS (device loop2): checking transaction log (loop2) [ 444.745080][T13073] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 444.794845][T13073] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 444.825656][T13073] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 444.875849][T13073] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 444.919450][T13073] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 444.949799][T13073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.102145][T13283] REISERFS (device loop2): Using tea hash to sort names [ 445.154203][T13283] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 445.230223][T13073] usb 1-1: usb_control_msg returned -32 [ 445.237076][T13073] usbtmc 1-1:16.0: can't read capabilities [ 446.132056][T13329] overlayfs: failed to clone upperpath [ 446.390684][T13348] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2521'. [ 446.435777][T13346] usbtmc 1-1:16.0: CHECK_CLEAR_STATUS returned 14 [ 446.641256][ T4365] usb 1-1: USB disconnect, device number 5 [ 446.679201][T13358] overlayfs: failed to clone upperpath [ 446.748691][T13360] netlink: 'syz.4.2525': attribute type 1 has an invalid length. [ 446.854084][T13362] bond5: (slave gretap0): making interface the new active one [ 446.876385][T13362] bond5: (slave gretap0): Enslaving as an active interface with an up link [ 447.559581][T13384] loop5: detected capacity change from 0 to 512 [ 447.629107][T13384] EXT4-fs (loop5): orphan cleanup on readonly fs [ 447.665090][T13384] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #11: comm syz.5.2533: ea_inode with extended attributes [ 447.698476][T13384] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.2533: error while reading EA inode 11 err=-117 [ 447.705678][T13073] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 447.732331][T13389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2534'. [ 447.820589][T13384] EXT4-fs (loop5): 1 orphan inode deleted [ 447.844927][T13384] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 447.915467][T13073] usb 1-1: Using ep0 maxpacket: 16 [ 447.922765][T13073] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 448.007046][T13073] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 448.048785][T13073] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.077634][T13073] usb 1-1: Product: syz [ 448.092111][T13073] usb 1-1: Manufacturer: syz [ 448.114991][T13073] usb 1-1: SerialNumber: syz [ 448.152832][T13073] usb 1-1: config 0 descriptor?? [ 448.159116][T12517] EXT4-fs (loop5): unmounting filesystem. [ 448.204360][T13073] hub 1-1:0.0: bad descriptor, ignoring hub [ 448.230931][T13073] hub: probe of 1-1:0.0 failed with error -5 [ 448.455247][T13402] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2535'. [ 448.575957][ T4365] usb 1-1: USB disconnect, device number 6 [ 448.958711][ T77] Bluetooth: hci3: Frame reassembly failed (-84) [ 449.003480][T13419] netlink: 'syz.4.2539': attribute type 1 has an invalid length. [ 449.051918][T13421] overlayfs: failed to clone upperpath [ 449.086160][T13419] 8021q: adding VLAN 0 to HW filter on device bond6 [ 449.646257][T13445] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2549'. [ 449.721819][T13445] device team1 entered promiscuous mode [ 449.743663][T13445] 8021q: adding VLAN 0 to HW filter on device team1 [ 449.791526][T13449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2551'. [ 449.860888][T13452] loop2: detected capacity change from 0 to 128 [ 449.960238][T13452] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 450.001642][T13452] ext4 filesystem being mounted at /540/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 450.026575][T13451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2551'. [ 450.131935][T13451] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 450.224121][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 450.995459][ T4280] Bluetooth: hci3: command 0x1003 tx timeout [ 451.002142][ T4278] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 451.365986][T13497] loop4: detected capacity change from 0 to 2048 [ 451.433457][T13497] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 453.468635][T13073] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 453.544975][ T4365] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 453.666872][T13073] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 453.700236][T13073] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 453.733735][T13073] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 453.743239][ T4365] usb 5-1: Using ep0 maxpacket: 16 [ 453.750665][ T4365] usb 5-1: unable to get BOS descriptor or descriptor too short [ 453.771568][T13073] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.783050][ T4365] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 453.803691][T13073] usb 3-1: Product: syz [ 453.812833][T13073] usb 3-1: Manufacturer: syz [ 453.820626][ T4365] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 453.837113][T13073] usb 3-1: SerialNumber: syz [ 453.846303][ T4365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.872794][T13073] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 453.888502][ T4365] usb 5-1: Product: syz [ 453.902087][ T4365] usb 5-1: Manufacturer: syz [ 453.915580][T13073] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 453.928385][ T4365] usb 5-1: SerialNumber: syz [ 453.955382][ T47] wlan1: Trigger new scan to find an IBSS to join [ 453.975387][T13073] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 454.267225][T13579] loop5: detected capacity change from 0 to 512 [ 454.309886][T13579] EXT4-fs: Ignoring removed bh option [ 454.327419][T13579] ext4: Unknown parameter 'uid<00000000000000000000' [ 454.709482][ T4365] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 454.736823][ T4365] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 454.770150][ T4365] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 454.901289][ T4365] usb 5-1: USB disconnect, device number 13 [ 455.163497][T13595] loop4: detected capacity change from 0 to 8192 [ 455.228851][T13595] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 455.265035][T13595] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 455.303093][T13595] REISERFS (device loop4): using ordered data mode [ 455.328481][T13595] reiserfs: using flush barriers [ 455.355416][T13595] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 455.387276][T13608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2591'. [ 455.403151][T13608] device gretap0 entered promiscuous mode [ 455.410183][T13608] device macvtap1 entered promiscuous mode [ 455.435438][T13595] REISERFS (device loop4): checking transaction log (loop4) [ 455.448288][T13608] device gretap0 left promiscuous mode [ 455.511118][T13608] device macvtap1 left promiscuous mode [ 455.635259][T13546] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 455.714282][ T4365] usb 3-1: USB disconnect, device number 16 [ 455.775524][ T4365] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 455.852638][T13595] REISERFS (device loop4): Using tea hash to sort names [ 455.860035][ T4365] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 455.895331][ T4365] ti_usb_3410_5052 3-1:2.0: device disconnected [ 455.903388][T13595] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 456.409185][ T4365] kernel write not supported for file [eventfd] (pid: 4365 comm: kworker/1:6) [ 456.854398][T13641] netlink: 'syz.7.2601': attribute type 1 has an invalid length. [ 457.046271][T13641] 8021q: adding VLAN 0 to HW filter on device bond2 [ 457.218599][T13648] device wlan1 entered promiscuous mode [ 457.299660][T13648] bond2: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 457.671871][T13669] overlayfs: failed to clone upperpath [ 457.955284][ T77] wlan1: Trigger new scan to find an IBSS to join [ 458.594059][T13704] 9pnet_fd: Insufficient options for proto=fd [ 458.838212][T13712] overlayfs: upper fs does not support file handles, falling back to index=off. [ 458.959426][T13716] loop4: detected capacity change from 0 to 1024 [ 459.076650][T13716] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 459.409449][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 459.958189][ T47] wlan1: Creating new IBSS network, BSSID 82:aa:37:2b:ea:e0 [ 461.673990][T13804] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 462.814012][T13832] loop5: detected capacity change from 0 to 8 [ 462.992666][T13832] SQUASHFS error: lzo decompression failed, data probably corrupt [ 463.053631][T13832] SQUASHFS error: Failed to read block 0x91: -5 [ 463.094805][T13832] SQUASHFS error: Unable to read metadata cache entry [8f] [ 463.114955][T13832] SQUASHFS error: Unable to read inode 0x11f [ 463.493220][T13844] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 463.493220][T13844] The task syz.4.2660 (13844) triggered the difference, watch for misbehavior. [ 464.039377][T13865] netlink: 'syz.7.2659': attribute type 1 has an invalid length. [ 464.120238][T13868] bond3: (slave gretap1): making interface the new active one [ 464.129264][T13868] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 467.035451][T13940] ip_tables: iptables: counters copy to user failed while replacing table [ 467.105746][T13940] raw_sendmsg: syz.0.2685 forgot to set AF_INET. Fix it! [ 467.485198][ T128] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 467.694873][ T128] usb 3-1: Using ep0 maxpacket: 32 [ 467.715477][ T128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.764833][ T128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.807572][ T128] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 467.853283][ T128] usb 3-1: New USB device found, idVendor=056a, idProduct=0200, bcdDevice= 0.00 [ 467.895043][ T128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.931960][ T128] usb 3-1: config 0 descriptor?? [ 468.369850][ T128] wacom 0003:056A:0200.000B: unbalanced collection at end of report description [ 468.411008][ T128] wacom 0003:056A:0200.000B: parse failed [ 468.430812][ T128] wacom: probe of 0003:056A:0200.000B failed with error -22 [ 468.589020][ T128] usb 3-1: USB disconnect, device number 17 [ 468.751079][T13987] loop5: detected capacity change from 0 to 512 [ 468.800080][T13987] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 468.903234][T13987] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5 [ 468.942195][T13987] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 468.951944][T13987] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.2699: Failed to acquire dquot type 1 [ 469.031871][T13994] syz.7.2700[13994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.032157][T13994] syz.7.2700[13994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.050402][T13987] EXT4-fs (loop5): 1 truncate cleaned up [ 469.108017][T13987] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 469.363806][T12517] EXT4-fs (loop5): unmounting filesystem. [ 469.839400][T14019] ip_tables: iptables: counters copy to user failed while replacing table [ 469.864226][T14020] overlayfs: failed to clone upperpath [ 470.490679][T14040] xt_hashlimit: max too large, truncated to 1048576 [ 470.506815][T14039] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2715'. [ 471.134956][T13070] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 471.334387][T13070] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.355813][T13070] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 471.381918][T13070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.395182][ T5160] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 471.404532][T13070] usb 5-1: config 0 descriptor?? [ 471.603792][ T5160] usb 6-1: config 0 has no interfaces? [ 471.617700][ T5160] usb 6-1: New USB device found, idVendor=045e, idProduct=02ae, bcdDevice=55.0c [ 471.649808][ T5160] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.653980][T13070] usbhid 5-1:0.0: can't add hid device: -71 [ 471.685118][T13070] usbhid: probe of 5-1:0.0 failed with error -71 [ 471.690551][ T5160] usb 6-1: Product: syz [ 471.713184][ T5160] usb 6-1: Manufacturer: syz [ 471.728077][ T5160] usb 6-1: SerialNumber: syz [ 471.736583][T13070] usb 5-1: USB disconnect, device number 14 [ 471.776231][ T5160] usb 6-1: config 0 descriptor?? [ 472.218342][ T5160] usb 6-1: USB disconnect, device number 5 [ 472.234825][T13070] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 472.447771][T13070] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.474835][T13070] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 472.511637][T13070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.563376][T13070] usb 5-1: config 0 descriptor?? [ 473.295677][ T26] audit: type=1800 audit(1792747570.438:848): pid=14128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2744" name=8006 dev="sda1" ino=2061 res=0 errno=0 [ 473.405749][T13070] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 473.421899][T13070] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 473.764792][ T4371] usb 5-1: USB disconnect, device number 15 [ 473.764846][ C1] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 474.961450][T14181] overlayfs: failed to clone upperpath [ 475.459132][T14203] loop2: detected capacity change from 0 to 164 [ 475.702980][T10570] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.855996][T14208] loop4: detected capacity change from 0 to 7 [ 475.889655][T14208] loop4: [ 475.900954][T14208] loop4: partition table partially beyond EOD, truncated [ 475.989459][T10570] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.202926][T10570] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.473760][T10570] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.518963][T14280] loop4: detected capacity change from 0 to 1024 [ 478.922565][ T47] hfsplus: b-tree write err: -5, ino 25 [ 478.935125][ T47] hfsplus: b-tree write err: -5, ino 4 [ 478.971354][ T47] hfsplus: b-tree write err: -5, ino 2 [ 478.991446][ T47] hfsplus: b-tree write err: -5, ino 26 [ 479.160668][T14294] netlink: 'syz.7.2787': attribute type 1 has an invalid length. [ 479.183876][T14294] netlink: 64399 bytes leftover after parsing attributes in process `syz.7.2787'. [ 479.295447][T14299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2789'. [ 479.441490][T14304] loop4: detected capacity change from 0 to 512 [ 479.506686][T14304] FAT-fs (loop4): Unrecognized mount option "01777777777777777777777" or missing value [ 479.726257][T14314] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2794'. [ 479.982135][T14322] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2794'. [ 480.451811][T14340] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2798'. [ 480.672023][T14348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2799'. [ 480.695780][T10570] device hsr_slave_0 left promiscuous mode [ 480.934510][T10570] device hsr_slave_1 left promiscuous mode [ 480.952562][T10570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.000925][T10570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.015107][T10570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.033132][T10570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.053230][T10570] device veth0 left promiscuous mode [ 481.063603][T10570] bridge0: port 3(veth0) entered disabled state [ 481.088054][T10570] device bridge_slave_1 left promiscuous mode [ 481.105130][T10570] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.130884][T10570] device bridge_slave_0 left promiscuous mode [ 481.143926][T10570] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.211705][T10570] device veth1_macvtap left promiscuous mode [ 481.217944][T10570] device veth0_macvtap left promiscuous mode [ 481.244809][T10570] device veth1_vlan left promiscuous mode [ 481.257405][T10570] device veth0_vlan left promiscuous mode [ 481.539772][T14362] loop5: detected capacity change from 0 to 512 [ 481.591731][T14362] EXT4-fs (loop5): orphan cleanup on readonly fs [ 481.668640][T14362] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 481.784262][T14362] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 481.815448][T14362] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #13: comm syz.5.2804: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 481.867460][T14362] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.2804: couldn't read orphan inode 13 (err -117) [ 481.911914][T14362] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 481.980186][T14362] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 482.066753][T14362] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 482.171222][T14362] EXT4-fs (loop5): shut down requested (2) [ 482.342913][T12517] EXT4-fs (loop5): unmounting filesystem. [ 482.734681][T14381] loop4: detected capacity change from 0 to 1024 [ 482.925301][ T4365] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 483.130739][ T4365] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.153058][ T4365] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 483.179937][ T4365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.209331][ T4365] usb 3-1: Product: syz [ 483.213566][ T4365] usb 3-1: Manufacturer: syz [ 483.233402][ T4365] usb 3-1: SerialNumber: syz [ 483.259187][ T4365] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 483.612770][T10570] team0 (unregistering): Port device team_slave_1 removed [ 483.788734][T10570] team0 (unregistering): Port device team_slave_0 removed [ 483.874644][ T4365] gspca_mr97310a: reg write [21] error -71 [ 483.881593][ T4365] mr97310a: probe of 3-1:1.0 failed with error -71 [ 483.924602][ T4365] usb 3-1: USB disconnect, device number 18 [ 484.020243][T10570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.180192][T10570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.621248][T14400] clocksource: Switched to clocksource kvm-clock [ 485.447154][T10570] bond0 (unregistering): Released all slaves [ 485.612021][T14352] (unnamed net_device) (uninitialized): down delay (8) is not a multiple of miimon (5), value rounded to 5 ms [ 485.656269][T14353] (unnamed net_device) (uninitialized): down delay (8) is not a multiple of miimon (5), value rounded to 5 ms [ 487.071263][T14421] loop5: detected capacity change from 0 to 32768 [ 491.090934][T14443] netlink: 'syz.7.2832': attribute type 15 has an invalid length. [ 491.111459][T14477] smc: net device team0 applied user defined pnetid SYZ2 [ 491.337539][T14479] smc: removing net device team0 with user defined pnetid SYZ2 [ 491.433335][T14479] team0 (unregistering): Port device team_slave_0 removed [ 491.484141][T14479] team0 (unregistering): Port device team_slave_1 removed [ 491.613919][T14515] netlink: 264 bytes leftover after parsing attributes in process `syz.0.2840'. [ 494.004890][ T4381] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 494.207331][ T4381] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 494.247125][ T4381] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 494.284895][ T4381] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 494.294056][ T4381] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.356137][ T4381] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 494.395908][ T4381] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 494.404021][ T4381] usb 5-1: Product: syz [ 494.434944][ T4381] usb 5-1: Manufacturer: syz [ 494.486849][ T4381] cdc_wdm 5-1:1.0: skipping garbage [ 494.492260][ T4381] cdc_wdm 5-1:1.0: skipping garbage [ 494.531188][ T4381] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 494.572846][ T4381] cdc_wdm 5-1:1.0: Unknown control protocol [ 494.717489][ T4381] usb 5-1: USB disconnect, device number 16 [ 495.310585][ T4381] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 495.397758][T14643] block device autoloading is deprecated and will be removed. [ 495.506889][ T4381] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 495.522727][ T4381] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.554015][ T4381] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 495.575156][ T4381] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.615358][ T4381] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 495.645014][ T4381] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 495.666827][ T4381] usb 5-1: Product: syz [ 495.684697][ T4381] usb 5-1: Manufacturer: syz [ 495.728894][ T4381] cdc_wdm 5-1:1.0: skipping garbage [ 495.736677][ T4381] cdc_wdm 5-1:1.0: skipping garbage [ 495.763384][ T4381] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 495.779482][ T4381] cdc_wdm 5-1:1.0: Unknown control protocol [ 495.952378][T14658] overlayfs: failed to clone upperpath [ 496.301436][ C0] cdc_wdm 5-1:1.0: unknown notification 72 received: index 13556 len 60644 [ 496.310676][ C0] cdc_wdm 5-1:1.0: unknown notification 180 received: index 50839 len 14243 [ 496.319992][ C0] cdc_wdm 5-1:1.0: unknown notification 7 received: index 20479 len 56425 [ 496.328751][ C0] cdc_wdm 5-1:1.0: unknown notification 188 received: index 32154 len 65185 [ 496.357032][ C0] cdc_wdm 5-1:1.0: unknown notification 188 received: index 24877 len 21782 [ 496.367841][ C0] cdc_wdm 5-1:1.0: unknown notification 177 received: index 4597 len 64986 [ 496.390629][ C0] cdc_wdm 5-1:1.0: unknown notification 230 received: index 17747 len 50404 [ 496.620134][ T128] usb 5-1: USB disconnect, device number 17 [ 497.634776][T14709] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2897'. [ 497.670873][T14709] unsupported nlmsg_type 40 [ 497.972262][T14716] FAULT_INJECTION: forcing a failure. [ 497.972262][T14716] name fail_futex, interval 1, probability 0, space 0, times 1 [ 498.036677][T14716] CPU: 0 PID: 14716 Comm: syz.2.2902 Not tainted syzkaller #0 [ 498.044237][T14716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 498.054336][T14716] Call Trace: [ 498.057673][T14716] [ 498.060644][T14716] dump_stack_lvl+0x188/0x24e [ 498.065378][T14716] ? show_regs_print_info+0x12/0x12 [ 498.070639][T14716] ? load_image+0x410/0x410 [ 498.075198][T14716] ? cgroup_rstat_updated+0xce/0x350 [ 498.080601][T14716] ? rcu_read_lock_sched_held+0x86/0x110 [ 498.086282][T14716] should_fail_ex+0x390/0x4c0 [ 498.091029][T14716] get_futex_key+0x1b1/0x1000 [ 498.095772][T14716] ? futex_setup_timer+0xc0/0xc0 [ 498.100733][T14716] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 498.106746][T14716] ? __lock_acquire+0x7ea0/0x7ea0 [ 498.111804][T14716] ? lock_chain_count+0x20/0x20 [ 498.116699][T14716] futex_wait_setup+0xb8/0x270 [ 498.121641][T14716] ? futex_wait_multiple+0x920/0x920 [ 498.126975][T14716] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 498.132903][T14716] ? _raw_spin_unlock+0x40/0x40 [ 498.137815][T14716] futex_wait+0x1b8/0x5c0 [ 498.142201][T14716] ? futex_wait_setup+0x270/0x270 [ 498.147357][T14716] ? file_end_write+0x156/0x250 [ 498.152262][T14716] ? vfs_write+0x777/0x9a0 [ 498.156720][T14716] do_futex+0x310/0x320 [ 498.160897][T14716] ? __ia32_sys_get_robust_list+0x100/0x100 [ 498.166825][T14716] __se_sys_futex+0x381/0x410 [ 498.171535][T14716] ? __x64_sys_futex+0xf0/0xf0 [ 498.176342][T14716] ? __x64_sys_futex+0x1d/0xf0 [ 498.181132][T14716] do_syscall_64+0x4c/0xa0 [ 498.185589][T14716] ? clear_bhb_loop+0x60/0xb0 [ 498.190297][T14716] ? clear_bhb_loop+0x60/0xb0 [ 498.195001][T14716] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 498.200936][T14716] RIP: 0033:0x7fe27d99f559 [ 498.205382][T14716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.225015][T14716] RSP: 002b:00007fe27bbf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 498.233543][T14716] RAX: ffffffffffffffda RBX: 00007fe27dc25fa8 RCX: 00007fe27d99f559 [ 498.241537][T14716] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe27dc25fa8 [ 498.249548][T14716] RBP: 00007fe27dc25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 498.257538][T14716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.265623][T14716] R13: 00007fe27dc26038 R14: 00007ffce2f55170 R15: 00007ffce2f55258 [ 498.273641][T14716] [ 498.593560][T14728] binder: 14727:14728 ioctl 4018620d 0 returned -22 [ 498.714252][T14734] binder: 14727:14734 ioctl c018620b 0 returned -14 [ 499.520408][T14761] sctp: [Deprecated]: syz.7.2912 (pid 14761) Use of int in max_burst socket option. [ 499.520408][T14761] Use struct sctp_assoc_value instead [ 499.590217][T14764] loop2: detected capacity change from 0 to 7 [ 499.614006][T14620] Dev loop2: unable to read RDB block 7 [ 499.639008][T14620] loop2: AHDI p1 p2 p3 [ 499.655333][T14620] loop2: partition table partially beyond EOD, truncated [ 499.700968][T14620] loop2: p1 start 1818582900 is beyond EOD, truncated [ 499.716751][ T128] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 499.721183][T14620] loop2: p3 start 335544320 is beyond EOD, truncated [ 499.771275][T14764] Dev loop2: unable to read RDB block 7 [ 499.779582][T14764] loop2: AHDI p1 p2 p3 [ 499.795588][T14764] loop2: partition table partially beyond EOD, truncated [ 499.821471][ T128] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 499.839775][T14764] loop2: p1 start 1818582900 is beyond EOD, truncated [ 499.876683][T14764] loop2: p3 start 335544320 is beyond EOD, truncated [ 501.558518][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.565083][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.537057][T14917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2958'. [ 508.667483][T14918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2958'. [ 508.700569][T14918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2958'. [ 508.765261][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 509.020564][T14957] loop5: detected capacity change from 0 to 128 [ 509.067865][T14957] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 509.383295][T14970] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2976'. [ 510.675726][T15003] loop5: detected capacity change from 0 to 1024 [ 510.705980][T15003] ext4: Unknown parameter 'noacl' [ 512.053429][ T47] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.124850][ T47] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.157046][T15035] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 512.377461][ T47] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.452091][ T47] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.560895][T15043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.644830][T15043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.712026][T15043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.770719][T15044] loop5: detected capacity change from 0 to 1024 [ 512.790418][T15043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.850398][T15043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.881410][T15052] ip_tables: iptables: counters copy to user failed while replacing table [ 512.893762][T15043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.925193][T15043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.974392][T15043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.016469][T15043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.048045][T15043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.085762][T15043] device batadv_slave_1 entered promiscuous mode [ 513.220645][ T47] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.267304][ T47] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.481264][ T47] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.517816][ T47] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.993866][ T47] tipc: Left network mode [ 514.503107][T15096] mmap: syz.7.3007 (15096) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 515.205315][ T47] device erspan0 left promiscuous mode [ 515.406127][ T47] device gretap0 left promiscuous mode [ 516.873918][T15155] loop5: detected capacity change from 0 to 1024 [ 517.076939][T15155] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 517.135067][T15155] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.184968][T15165] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 517.258914][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 517.301808][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 517.360560][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 517.462687][T12517] EXT4-fs (loop5): unmounting filesystem. [ 517.585013][ T4380] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 517.693878][T15175] netlink: 'syz.7.3029': attribute type 1 has an invalid length. [ 517.857074][ T4380] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 517.895017][ T4380] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 517.912266][T15175] 8021q: adding VLAN 0 to HW filter on device bond4 [ 517.944875][ T4380] usb 1-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 517.953996][ T4380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.051965][T15178] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 518.260650][T15180] device bond4 entered promiscuous mode [ 518.334143][ T47] device hsr_slave_0 left promiscuous mode [ 518.383083][ T47] device hsr_slave_1 left promiscuous mode [ 518.405262][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.443249][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.503660][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.515863][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.923326][ T47] device veth1_macvtap left promiscuous mode [ 518.944093][ T47] device veth0_macvtap left promiscuous mode [ 518.985884][ T47] device veth1_vlan left promiscuous mode [ 519.026915][ T47] device veth0_vlan left promiscuous mode [ 519.613718][ T47] bond2 (unregistering): (slave bond0): Releasing backup interface [ 519.640648][ T47] bond2 (unregistering): Released all slaves [ 519.783143][ T4380] pegasus 1-1:1.0: can't reset MAC [ 519.791990][ T4380] pegasus: probe of 1-1:1.0 failed with error -5 [ 519.822561][ T4380] usb 1-1: USB disconnect, device number 7 [ 520.620317][ T47] bond1 (unregistering): (slave macvlan0): Removing an active aggregator [ 520.641478][ T47] bond1 (unregistering): (slave macvlan0): Releasing backup interface [ 520.666043][ T47] bond1 (unregistering): Released all slaves [ 522.958379][ T47] team0 (unregistering): Port device team_slave_1 removed [ 523.165119][ T47] team0 (unregistering): Port device team_slave_0 removed [ 523.293161][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.294647][T15299] loop5: detected capacity change from 0 to 128 [ 523.433438][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.530743][T12517] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 523.545843][T12517] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 524.427334][ T47] bond0 (unregistering): Released all slaves [ 524.595137][ T128] infiniband syz0: ib_query_port failed (-19) [ 524.608264][T15276] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 524.630240][T15276] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 524.763145][T15276] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 524.795949][T15276] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 524.820760][T15276] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 524.860935][T15276] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 525.208382][T15308] loop4: detected capacity change from 0 to 1024 [ 525.292838][T15308] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 525.370015][T15308] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 525.458673][T15308] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 525.508237][T15308] System zones: 0-1, 3-36 [ 525.556576][T15308] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 525.759890][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 526.508545][ T26] audit: type=1326 audit(1792747623.650:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15350 comm="syz.4.3091" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f289ed9f559 code=0x0 [ 526.827965][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 526.840866][ T4278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 526.849693][ T4278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 526.863130][ T4278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 526.873637][ T4278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 526.881325][ T4278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 526.935047][T15358] rxe_eth0 speed is unknown, defaulting to 1000 [ 527.332919][T15358] chnl_net:caif_netlink_parms(): no params data found [ 527.735336][T15358] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.752886][ T26] audit: type=1326 audit(1792747624.890:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15385 comm="syz.0.3098" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f046979f559 code=0x0 [ 527.761131][T15358] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.821387][T15358] device bridge_slave_0 entered promiscuous mode [ 527.845900][T15358] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.870450][T15358] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.895936][T15358] device bridge_slave_1 entered promiscuous mode [ 527.983985][T15358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.030913][T15358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.180158][T15358] team0: Port device team_slave_0 added [ 528.209717][T15358] team0: Port device team_slave_1 added [ 528.307318][T15358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.314340][T15358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.381840][T15358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.476254][T15405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3100'. [ 528.496469][T15358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.503623][T15358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.592722][T15358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.777082][T15358] device hsr_slave_0 entered promiscuous mode [ 528.800269][T15358] device hsr_slave_1 entered promiscuous mode [ 528.915135][ T4278] Bluetooth: hci0: command 0x0409 tx timeout [ 530.414558][T15445] rxe_eth0 speed is unknown, defaulting to 1000 [ 530.665501][ T4365] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 530.714055][T15358] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 530.723949][ T4365] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 530.782811][T15358] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 530.819246][T15358] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 530.864246][T15358] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 531.005300][ T4278] Bluetooth: hci0: command 0x041b tx timeout [ 531.273832][T15358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.351549][ T7128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 531.374191][ T7128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 531.417917][T15358] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.522967][T14257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 531.546304][T14257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 531.585301][T14257] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.592515][T14257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.617495][T14257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 531.636227][T14257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 531.654094][T14257] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.661360][T14257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.690041][T14257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 531.720579][T14257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 531.759561][T14257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 531.799161][T14257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 531.839495][T14257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 531.870782][T14257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 531.904486][T14257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 531.928791][T14257] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 531.977154][T14257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 531.992403][T14257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 532.018417][T14257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 532.051928][T14257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 532.095874][T15358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 532.961134][T15492] netlink: 'syz.0.3130': attribute type 1 has an invalid length. [ 533.055037][T15492] 8021q: adding VLAN 0 to HW filter on device bond1 [ 533.075323][ T4278] Bluetooth: hci0: command 0x040f tx timeout [ 533.149590][T15495] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 533.167827][T10568] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 533.212683][T15492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3130'. [ 533.290289][T14261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 533.300638][T14261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 533.322244][T15358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.377908][T14257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 533.406953][T14257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 533.476077][T14257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 533.486974][T14257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 533.496878][T14257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 533.511276][T14257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 533.522735][T15358] device veth0_vlan entered promiscuous mode [ 533.569981][T15358] device veth1_vlan entered promiscuous mode [ 533.662240][T10570] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 533.678589][T10570] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 533.713578][T10570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 533.739466][T10570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 533.770266][T15358] device veth0_macvtap entered promiscuous mode [ 533.805490][T15358] device veth1_macvtap entered promiscuous mode [ 533.877475][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.912913][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.942353][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.980567][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.007838][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.030308][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.050935][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.089902][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.116958][T15358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.138386][ T7128] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 534.155724][ T7128] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 534.185695][ T7128] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 534.222134][ T7128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 534.260015][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.301144][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.324482][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.362177][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.392842][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.421823][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.458229][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.489313][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.547287][T15358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.575643][ T7128] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 534.617216][ T7128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 534.658568][T15358] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.690470][T15358] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.725671][T15358] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.756283][T15358] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.979553][T10568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.006803][T10568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.033389][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 535.106881][ T7128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.127712][ T7128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.156614][ T4278] Bluetooth: hci0: command 0x0419 tx timeout [ 535.172128][T14257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 535.486470][T15534] loop2: detected capacity change from 0 to 256 [ 535.524255][T15534] exfat: Deprecated parameter 'utf8' [ 535.545055][T15534] exfat: Deprecated parameter 'utf8' [ 535.613203][T15534] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 536.725172][ T4365] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 536.915645][ T4365] usb 1-1: Using ep0 maxpacket: 8 [ 536.923072][ T4365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 536.963002][ T4365] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 536.988022][ T4365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.023446][ T4365] usb 1-1: config 0 descriptor?? [ 537.243631][ T4365] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 537.304595][T15582] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.312195][T15582] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.371990][T15582] device bridge_slave_1 left promiscuous mode [ 537.393530][T15582] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.437338][T15582] device bridge_slave_0 left promiscuous mode [ 537.449191][T15582] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.786898][ T4346] usb 1-1: USB disconnect, device number 8 [ 539.334064][ T26] audit: type=1326 audit(1792747636.470:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15648 comm="syz.0.3170" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046979f559 code=0x7ffc0000 [ 539.449749][ T26] audit: type=1326 audit(1792747636.500:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15648 comm="syz.0.3170" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046979f559 code=0x7ffc0000 [ 539.614174][ T26] audit: type=1326 audit(1792747636.500:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15648 comm="syz.0.3170" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046979f559 code=0x7ffc0000 [ 539.732344][T15658] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3172'. [ 539.754472][ T26] audit: type=1326 audit(1792747636.500:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15648 comm="syz.0.3170" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f046979f559 code=0x7ffc0000 [ 539.893403][ T26] audit: type=1326 audit(1792747636.500:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15648 comm="syz.0.3170" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046979f559 code=0x7ffc0000 [ 540.011269][ T26] audit: type=1326 audit(1792747636.500:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15648 comm="syz.0.3170" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046979f559 code=0x7ffc0000 [ 540.119405][ T26] audit: type=1326 audit(1792747636.500:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15648 comm="syz.0.3170" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046979f559 code=0x7ffc0000 [ 540.246553][ T26] audit: type=1326 audit(1792747636.510:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15648 comm="syz.0.3170" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046979f559 code=0x7ffc0000 [ 540.361708][ T26] audit: type=1326 audit(1792747636.510:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15648 comm="syz.0.3170" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f046979f559 code=0x7ffc0000 [ 540.512193][ T26] audit: type=1326 audit(1792747636.510:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15648 comm="syz.0.3170" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046979f559 code=0x7ffc0000 [ 540.745072][ T4346] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 540.797549][ T128] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 540.951601][ T4346] usb 2-1: Using ep0 maxpacket: 32 [ 540.962971][ T4346] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.987611][ T128] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 541.009048][ T4346] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.019719][ T128] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 541.048980][ T4346] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 541.055114][ T128] usb 5-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 541.081923][ T4346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.098216][ T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.126045][ T4346] usb 2-1: config 0 descriptor?? [ 541.241482][T15698] tipc: Started in network mode [ 541.280211][T15698] tipc: Node identity 4, cluster identity 4711 [ 541.306453][T15698] tipc: Node number set to 4 [ 541.353206][T15702] tipc: Enabled bearer , priority 0 [ 541.597079][ T4346] savu 0003:1E7D:2D5A.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 541.830541][ T4652] usb 2-1: USB disconnect, device number 8 [ 541.943786][T15706] fido_id[15706]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 542.794502][ T128] pegasus 5-1:1.0: setup Pegasus II specific registers [ 542.937883][ T128] pegasus 5-1:1.0: can't locate MII phy, using default [ 543.045541][ T128] pegasus 5-1:1.0: eth9, 3Com USB Ethernet 3C460B, 66:32:33:58:ae:4a [ 543.060240][T15749] bridge0: port 3(veth0) entered blocking state [ 543.066730][T15749] bridge0: port 3(veth0) entered listening state [ 543.073372][T15749] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.080580][T15749] bridge0: port 2(bridge_slave_1) entered listening state [ 543.088049][T15749] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.095266][T15749] bridge0: port 1(bridge_slave_0) entered listening state [ 543.141178][ T128] usb 5-1: USB disconnect, device number 18 [ 544.645647][T15805] 9pnet: p9_errstr2errno: server reported unknown error @c [ 544.730130][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 544.730148][ T26] audit: type=1804 audit(1792747641.850:891): pid=15808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3212" name="file1" dev="ramfs" ino=76411 res=1 errno=0 [ 545.152334][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 546.534250][T15868] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 546.635609][T15874] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 547.096406][T15885] device syzkaller0 entered promiscuous mode [ 548.009347][ T4278] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:200' [ 548.019765][ T4278] CPU: 0 PID: 4278 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 548.027373][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 548.037499][ T4278] Workqueue: hci0 hci_rx_work [ 548.042352][ T4278] Call Trace: [ 548.045695][ T4278] [ 548.048653][ T4278] dump_stack_lvl+0x188/0x24e [ 548.053383][ T4278] ? show_regs_print_info+0x12/0x12 [ 548.058606][ T4278] ? load_image+0x410/0x410 [ 548.063165][ T4278] sysfs_create_dir_ns+0x26a/0x290 [ 548.068352][ T4278] ? __lock_acquire+0x7ea0/0x7ea0 [ 548.073416][ T4278] ? sysfs_warn_dup+0xa0/0xa0 [ 548.078136][ T4278] ? do_raw_spin_unlock+0x11d/0x230 [ 548.083361][ T4278] kobject_add_internal+0x617/0xca0 [ 548.088596][ T4278] kobject_add+0x160/0x230 [ 548.093051][ T4278] ? kobject_init+0x1c0/0x1c0 [ 548.097757][ T4278] ? __raw_spin_lock_init+0x41/0x100 [ 548.103056][ T4278] ? klist_children_get+0x50/0x50 [ 548.108182][ T4278] ? get_device_parent+0x121/0x3e0 [ 548.113418][ T4278] device_add+0x470/0x1050 [ 548.117865][ T4278] hci_conn_add_sysfs+0xd1/0x1e0 [ 548.122901][ T4278] hci_sync_conn_complete_evt+0x707/0xab0 [ 548.128664][ T4278] ? hci_remote_ext_features_evt+0xb50/0xb50 [ 548.134676][ T4278] hci_event_packet+0x806/0x1290 [ 548.139652][ T4278] ? lock_chain_count+0x20/0x20 [ 548.144537][ T4278] ? bis_list+0x280/0x280 [ 548.148890][ T4278] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 548.154995][ T4278] ? kcov_remote_start+0x50f/0x810 [ 548.160163][ T4278] ? lockdep_hardirqs_on+0x94/0x140 [ 548.165438][ T4278] ? hci_send_to_monitor+0x9c/0x4a0 [ 548.170686][ T4278] hci_rx_work+0x3eb/0xd40 [ 548.175135][ T4278] ? _raw_spin_unlock+0x40/0x40 [ 548.180030][ T4278] ? process_one_work+0x7b4/0x1160 [ 548.185198][ T4278] process_one_work+0x8ab/0x1160 [ 548.190224][ T4278] ? worker_detach_from_pool+0x240/0x240 [ 548.195893][ T4278] ? _raw_spin_lock_irq+0xb7/0xf0 [ 548.200957][ T4278] ? _raw_spin_lock_irqsave+0x100/0x100 [ 548.206640][ T4278] ? wq_worker_running+0x97/0x190 [ 548.211692][ T4278] worker_thread+0xaf5/0x12a0 [ 548.216423][ T4278] kthread+0x29d/0x330 [ 548.220517][ T4278] ? worker_clr_flags+0x1a0/0x1a0 [ 548.225567][ T4278] ? kthread_blkcg+0xd0/0xd0 [ 548.230182][ T4278] ret_from_fork+0x1f/0x30 [ 548.234671][ T4278] [ 548.242290][ T4278] kobject_add_internal failed for hci0:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 548.256231][ T4278] Bluetooth: hci0: failed to register connection device [ 550.034941][ T4278] Bluetooth: hci0: command 0x0409 tx timeout [ 552.124953][ T4278] Bluetooth: hci0: command 0x0406 tx timeout [ 553.225276][T15998] tipc: Failed to remove unknown binding: 66,1,1/0:1810511902/1810511904 [ 553.239064][T15998] tipc: Failed to remove unknown binding: 66,1,1/0:1810511902/1810511904 [ 553.501050][T15937] netlink: 'syz.0.3247': attribute type 10 has an invalid length. [ 553.515381][T15937] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.533280][T15937] device bridge_slave_1 left promiscuous mode [ 553.540036][T15937] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.572552][T15961] device vlan2 entered promiscuous mode [ 553.585128][T15961] device bridge0 entered promiscuous mode [ 553.605351][T15965] bridge0: port 4(vlan3) entered blocking state [ 553.611758][T15965] bridge0: port 4(vlan3) entered disabled state [ 553.633960][T15965] device vlan3 entered promiscuous mode [ 553.640231][T15965] bridge0: mtu less than device minimum [ 553.646880][T15990] netlink: 'syz.2.3268': attribute type 4 has an invalid length. [ 553.667800][ T5160] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 553.876949][ T5160] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.890566][ T5160] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 553.905783][ T5160] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 553.915429][ T5160] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.923898][ T5160] usb 2-1: Product: syz [ 553.928665][ T5160] usb 2-1: Manufacturer: syz [ 553.933394][ T5160] usb 2-1: SerialNumber: syz [ 554.158293][ T5160] usb 2-1: 0:2 : does not exist [ 554.163272][ T5160] usb 2-1: unit 9 not found! [ 554.186856][ T5160] usb 2-1: 4:0: cannot get min/max values for control 2 (id 4) [ 554.206731][ T5160] usb 2-1: 4:0: cannot get min/max values for control 3 (id 4) [ 554.232561][ T5160] usb 2-1: 4:0: cannot get min/max values for control 4 (id 4) [ 554.300033][ T5160] usb 2-1: USB disconnect, device number 9 [ 554.430266][T16029] tipc: Failed to remove unknown binding: 66,1,1/0:2598215461/2598215463 [ 554.482260][T16029] tipc: Failed to remove unknown binding: 66,1,1/0:2598215461/2598215463 [ 554.663464][T16040] overlayfs: failed to clone upperpath [ 555.115674][T16064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.183833][T16067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.173092][T16109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3306'. [ 556.853245][T16130] bond5: (slave macvlan2): Opening slave failed [ 557.611039][T16163] overlayfs: failed to clone upperpath [ 557.633324][T16163] overlayfs: failed to clone lowerpath [ 558.274907][ T4371] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 558.381758][ T26] audit: type=1400 audit(1792747655.520:892): apparmor="STATUS" operation="profile_replace" info="not policy admin" error=-13 profile="unconfined" pid=16187 comm="syz.0.3332" [ 558.467332][ T4371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.493686][ T4371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.534109][ T4371] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 558.562476][ T4371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.583396][ T4371] usb 2-1: config 0 descriptor?? [ 558.895062][T16206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3338'. [ 559.013363][ T4371] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 559.033023][ T4371] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 559.054052][ T4371] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 559.077551][ T4371] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 559.100475][ T4371] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 559.123564][ T4371] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 559.164067][ T4371] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 559.183866][ T4371] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 559.276511][ T4371] cp2112 0003:10C4:EA90.000F: Part Number: 0x00 Device Version: 0x00 [ 559.881415][T16178] cp2112 0003:10C4:EA90.000F: Unsupported transaction 0 [ 559.903013][ T4371] cp2112 0003:10C4:EA90.000F: error reading lock byte: -71 [ 559.918240][ T4371] usb 2-1: USB disconnect, device number 10 [ 560.254380][T16246] fido_id[16246]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 561.336172][T16288] FAULT_INJECTION: forcing a failure. [ 561.336172][T16288] name failslab, interval 1, probability 0, space 0, times 0 [ 561.390104][T16288] CPU: 0 PID: 16288 Comm: syz.1.3361 Not tainted syzkaller #0 [ 561.397654][T16288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 561.407765][T16288] Call Trace: [ 561.411973][T16288] [ 561.414951][T16288] dump_stack_lvl+0x188/0x24e [ 561.419686][T16288] ? show_regs_print_info+0x12/0x12 [ 561.424943][T16288] ? load_image+0x410/0x410 [ 561.429547][T16288] ? __lock_acquire+0x7ea0/0x7ea0 [ 561.434657][T16288] should_fail_ex+0x390/0x4c0 [ 561.439410][T16288] should_failslab+0x5/0x20 [ 561.444017][T16288] slab_pre_alloc_hook+0x59/0x300 [ 561.449115][T16288] kmem_cache_alloc+0x56/0x2f0 [ 561.453938][T16288] ? sk_prot_alloc+0x57/0x210 [ 561.458673][T16288] sk_prot_alloc+0x57/0x210 [ 561.463258][T16288] ? sk_alloc+0x20/0x330 [ 561.467557][T16288] sk_alloc+0x36/0x330 [ 561.471702][T16288] inet_create+0x759/0xf60 [ 561.476215][T16288] ? inet_create+0x9e/0xf60 [ 561.480802][T16288] __sock_create+0x49a/0x940 [ 561.485462][T16288] start_sync_thread+0xdc8/0x2890 [ 561.490569][T16288] ? sync_thread_master+0x10d0/0x10d0 [ 561.496051][T16288] ? sb_queue_tail+0x3e0/0x3e0 [ 561.500894][T16288] ? __lock_acquire+0x7ea0/0x7ea0 [ 561.505977][T16288] ? mark_lock+0x94/0x320 [ 561.510382][T16288] ? __might_fault+0xa6/0x120 [ 561.515126][T16288] ? __might_fault+0xc2/0x120 [ 561.519850][T16288] ? __might_fault+0xa6/0x120 [ 561.524589][T16288] do_ip_vs_set_ctl+0x499/0xb40 [ 561.529504][T16288] ? update_defense_level+0xe20/0xe20 [ 561.534942][T16288] ? trace_contention_end+0x5f/0x170 [ 561.540307][T16288] ? mutex_unlock+0x10/0x10 [ 561.544879][T16288] ? mutex_lock_nested+0x10/0x10 [ 561.549893][T16288] nf_setsockopt+0x25f/0x280 [ 561.554570][T16288] ? sock_common_recvmsg+0x190/0x190 [ 561.559928][T16288] smc_setsockopt+0x219/0xb80 [ 561.564673][T16288] ? smc_shutdown+0x9a0/0x9a0 [ 561.569412][T16288] ? aa_sock_opt_perm+0x74/0x100 [ 561.574429][T16288] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 561.580030][T16288] ? security_socket_setsockopt+0x7a/0xa0 [ 561.585842][T16288] ? smc_shutdown+0x9a0/0x9a0 [ 561.590586][T16288] __sys_setsockopt+0x2bf/0x3d0 [ 561.595508][T16288] __x64_sys_setsockopt+0xb1/0xc0 [ 561.600594][T16288] do_syscall_64+0x4c/0xa0 [ 561.605057][T16288] ? clear_bhb_loop+0x60/0xb0 [ 561.609823][T16288] ? clear_bhb_loop+0x60/0xb0 [ 561.614557][T16288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 561.620519][T16288] RIP: 0033:0x7f9bac59f559 [ 561.624989][T16288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.644655][T16288] RSP: 002b:00007f9baa7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 561.653130][T16288] RAX: ffffffffffffffda RBX: 00007f9bac826090 RCX: 00007f9bac59f559 [ 561.661149][T16288] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000004 [ 561.669169][T16288] RBP: 00007f9bac636b20 R08: 0000000000000018 R09: 0000000000000000 [ 561.677199][T16288] R10: 0000200000001f40 R11: 0000000000000246 R12: 0000000000000000 [ 561.685246][T16288] R13: 00007f9bac826128 R14: 00007f9bac826090 R15: 00007fff5e54f2e8 [ 561.693301][T16288] [ 561.711369][T16256] loop2: detected capacity change from 0 to 40427 [ 561.748721][T16256] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 561.788306][T16256] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 561.847451][T16256] F2FS-fs (loop2): invalid crc value [ 561.889158][T16256] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 561.958273][T16256] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 562.175516][T16288] IPVS: Error during creation of socket; terminating [ 562.219216][T16256] F2FS-fs (loop2): recover fsync data on readonly fs [ 562.266011][T16256] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 562.273314][T16256] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 563.003884][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.010786][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.745233][T16298] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.754184][T16298] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.764320][T16298] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.773673][T16298] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.938625][T16298] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.947819][T16298] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.956812][T16298] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.965847][T16298] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.322499][T16316] netlink: 'syz.1.3366': attribute type 10 has an invalid length. [ 565.389553][T16342] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3376'. [ 565.625755][T16361] loop4: detected capacity change from 0 to 512 [ 565.661456][T16366] netlink: 'syz.2.3381': attribute type 4 has an invalid length. [ 565.692069][T16366] netlink: 'syz.2.3381': attribute type 4 has an invalid length. [ 565.710081][T16361] EXT4-fs: Ignoring removed nobh option [ 565.808583][T16361] EXT4-fs (loop4): 1 truncate cleaned up [ 565.814313][T16361] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 565.957822][T16376] EXT4-fs (loop4): shut down requested (2) [ 566.091259][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 566.595524][T13078] libceph: connect (1)[c::]:6789 error -101 [ 566.601834][T13078] libceph: mon0 (1)[c::]:6789 connect error [ 566.620562][T13078] libceph: connect (1)[c::]:6789 error -101 [ 566.628221][T13078] libceph: mon0 (1)[c::]:6789 connect error [ 566.680746][T16392] ceph: No mds server is up or the cluster is laggy [ 567.122115][T16404] device macvlan0 entered promiscuous mode [ 567.152734][T16404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3391'. [ 567.321015][T16384] loop4: detected capacity change from 0 to 40427 [ 567.353724][T16384] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 567.377044][T16384] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 567.403699][T16404] device macvlan0 left promiscuous mode [ 567.412354][T16384] F2FS-fs (loop4): invalid crc value [ 567.434112][T16384] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 567.714773][T16384] F2FS-fs (loop4): Start checkpoint disabled! [ 567.809396][T16384] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 567.826732][T16384] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 568.165683][T10568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.175654][T16355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.377324][T10570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.422259][ T7970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.755862][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.136918][T13078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.201352][T13073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.284865][T16355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.294618][ T7970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.303260][T13078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.685518][T16461] netlink: 'syz.1.3409': attribute type 4 has an invalid length. [ 569.727122][T16461] netlink: 'syz.1.3409': attribute type 4 has an invalid length. [ 569.896194][T16468] netlink: 'syz.4.3404': attribute type 1 has an invalid length. [ 569.913552][T16466] CIFS: Attempting to mount \\127.0.0.1\share [ 570.086756][T16478] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 0 [ 570.105494][T16478] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 570.151658][T16466] CIFS: VFS: cifs_mount failed w/return code = -112 [ 570.163868][T16471] bond7: (slave macvlan1): Enslaving as an active interface with a down link [ 570.260565][T16475] bond7 (unregistering): (slave macvlan1): Releasing active interface [ 570.324422][T16475] bond7 (unregistering): Released all slaves [ 570.467374][T16477] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.515103][T16477] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.272802][T16479] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.341563][T16479] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.821119][T16479] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.871674][T16479] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.011201][T16511] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 572.019028][T16511] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 572.052930][T16515] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 572.059523][T16515] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 572.093001][T16479] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.105159][T16511] vhci_hcd vhci_hcd.0: Device attached [ 572.129290][T16479] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.159820][T16515] vhci_hcd vhci_hcd.0: Device attached [ 572.185884][T16520] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(9) [ 572.192474][T16520] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 572.260553][T16511] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(5) [ 572.267155][T16511] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 572.351591][T16520] vhci_hcd vhci_hcd.0: Device attached [ 572.355579][T16511] vhci_hcd vhci_hcd.0: Device attached [ 572.377104][T13078] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 572.412261][T16526] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(8) [ 572.418851][T16526] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 572.444956][T16515] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(11) [ 572.451667][T16515] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 572.487088][T16526] vhci_hcd vhci_hcd.0: Device attached [ 572.524209][T16515] vhci_hcd vhci_hcd.0: Device attached [ 572.565845][T16520] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(20) [ 572.572533][T16520] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 572.604522][T16479] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.611029][T16511] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(13) [ 572.620162][T16511] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 572.665010][T16479] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.679496][T16520] vhci_hcd vhci_hcd.0: Device attached [ 572.717672][T16479] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.726636][T16511] vhci_hcd vhci_hcd.0: Device attached [ 572.735853][T16540] fuse: Bad value for 'fd' [ 572.755078][T16479] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.764675][T16530] vhci_hcd: connection closed [ 572.771610][ T6462] vhci_hcd: stop threads [ 572.774601][T16527] vhci_hcd: connection closed [ 572.783275][ T6462] vhci_hcd: release socket [ 572.791636][T16521] vhci_hcd: connection closed [ 572.792968][T16524] vhci_hcd: connection closed [ 572.805088][T16516] vhci_hcd: connection closed [ 572.810108][T16512] vhci_hcd: connection reset by peer [ 572.835109][ T7970] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 572.844382][T16535] vhci_hcd: connection closed [ 572.874418][ T6462] vhci_hcd: disconnect device [ 572.885594][T16479] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.893827][T16479] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.903087][ T6462] vhci_hcd: stop threads [ 572.906430][T16534] vhci_hcd: connection closed [ 572.912461][ T6462] vhci_hcd: release socket [ 572.934831][ T6462] vhci_hcd: disconnect device [ 572.951111][ T6462] vhci_hcd: stop threads [ 572.955751][ T6462] vhci_hcd: release socket [ 572.975106][ T6462] vhci_hcd: disconnect device [ 572.988547][T16479] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.990833][ T6462] vhci_hcd: stop threads [ 573.019594][ T6462] vhci_hcd: release socket [ 573.023243][T16479] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.034544][ T6462] vhci_hcd: disconnect device [ 573.044602][ T6462] vhci_hcd: stop threads [ 573.049611][ T6462] vhci_hcd: release socket [ 573.057939][ T7970] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 573.082916][ T7970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.091901][ T6462] vhci_hcd: disconnect device [ 573.107102][ T6462] vhci_hcd: stop threads [ 573.118344][ T7970] usb 2-1: Product: syz [ 573.126477][ T6462] vhci_hcd: release socket [ 573.137815][ T7970] usb 2-1: Manufacturer: syz [ 573.146252][ T6462] vhci_hcd: disconnect device [ 573.157823][ T7970] usb 2-1: SerialNumber: syz [ 573.167140][ T6462] vhci_hcd: stop threads [ 573.180770][ T7970] usb 2-1: config 0 descriptor?? [ 573.186313][ T6462] vhci_hcd: release socket [ 573.200052][ T6462] vhci_hcd: disconnect device [ 573.214319][ T6462] vhci_hcd: stop threads [ 573.235454][ T6462] vhci_hcd: release socket [ 573.248609][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 573.257470][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 573.264666][ C0] bridge0: port 3(veth0) entered learning state [ 573.282233][ T6462] vhci_hcd: disconnect device [ 573.414368][ T7970] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 573.486599][T13070] net_ratelimit: 12 callbacks suppressed [ 573.486702][T13070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.885605][ T6462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.893805][ T6462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.911258][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.920261][T13070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.929591][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.963435][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.174396][T10570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.183614][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.345850][ T26] audit: type=1326 audit(1792747671.480:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16577 comm="syz.0.3436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046979f559 code=0x7fc00000 [ 574.422303][ T26] audit: type=1326 audit(1792747671.520:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16577 comm="syz.0.3436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046979f559 code=0x7fc00000 [ 574.454884][ T7970] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 574.473302][ T7970] usb 2-1: USB disconnect, device number 11 [ 574.504999][ T4365] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 575.330817][ T7126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.003430][ T26] audit: type=1326 audit(1792747673.140:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16577 comm="syz.0.3436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f04697992d7 code=0x7fc00000 [ 576.030141][ T4365] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 576.039604][ T4365] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 576.088324][ T4365] usb 5-1: Product: syz [ 576.092565][ T4365] usb 5-1: Manufacturer: syz [ 576.104329][ T4365] usb 5-1: SerialNumber: syz [ 576.137699][ T4365] usb 5-1: config 0 descriptor?? [ 576.162214][ T26] audit: type=1326 audit(1792747673.140:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16577 comm="syz.0.3436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f04697408d9 code=0x7fc00000 [ 576.181222][ T4365] ch341 5-1:0.0: ch341-uart converter detected [ 576.281774][ T26] audit: type=1326 audit(1792747673.140:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16577 comm="syz.0.3436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f046974099d code=0x7fc00000 [ 576.380758][ T26] audit: type=1326 audit(1792747673.140:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16577 comm="syz.0.3436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f046979f559 code=0x7fc00000 [ 576.919257][T16630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3449'. [ 576.979338][ T4365] usb 5-1: failed to send control message: -71 [ 576.998298][ T4365] ch341-uart: probe of ttyUSB0 failed with error -71 [ 577.042887][ T4365] usb 5-1: USB disconnect, device number 19 [ 577.071903][ T4365] ch341 5-1:0.0: device disconnected [ 577.377783][ T26] audit: type=1326 audit(1792747674.520:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16646 comm="syz.2.3456" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27d99f559 code=0x7ffc0000 [ 577.469362][ T26] audit: type=1326 audit(1792747674.540:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16646 comm="syz.2.3456" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27d99f559 code=0x7ffc0000 [ 577.560954][T13078] vhci_hcd: vhci_device speed not set [ 577.586553][ T26] audit: type=1326 audit(1792747674.550:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16646 comm="syz.2.3456" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27d99f559 code=0x7ffc0000 [ 577.682658][ T26] audit: type=1326 audit(1792747674.550:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16646 comm="syz.2.3456" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27d99f559 code=0x7ffc0000 [ 578.285104][ T7970] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 578.494818][ T7970] usb 2-1: Using ep0 maxpacket: 16 [ 578.502606][ T7970] usb 2-1: unable to get BOS descriptor or descriptor too short [ 578.536632][ T7970] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 578.603856][ T7970] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 578.659017][ T7970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.687659][ T7970] usb 2-1: Product: syz [ 578.700058][ T7970] usb 2-1: Manufacturer: syz [ 578.705578][ T7970] usb 2-1: SerialNumber: syz [ 578.960627][ T7970] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 578.976770][ T7970] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 579.316895][ T4365] net_ratelimit: 8 callbacks suppressed [ 579.316912][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.371587][ T7970] usb 2-1: 2:1 : can't get Cluster Descriptor [ 579.388362][T16708] rxe_eth0 speed is unknown, defaulting to 1000 [ 579.635170][ T6462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.646362][ T7970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.655918][T16355] usb 2-1: USB disconnect, device number 12 [ 579.680895][T13070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.739871][T13070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.338373][T16724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3476'. [ 580.755202][T13078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.115884][T14261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.124364][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.288414][T13078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.758905][ T7970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.875050][T16781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3495'. [ 583.422550][T16806] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 584.355537][T13078] net_ratelimit: 3 callbacks suppressed [ 584.355555][T13078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.717255][T16857] ip_tables: iptables: counters copy to user failed while replacing table [ 585.296849][T16869] device hsr0 entered promiscuous mode [ 585.315344][T16869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3521'. [ 585.396091][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.405260][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.534760][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.553801][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.795067][ T7970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.881300][T16868] device hsr0 left promiscuous mode [ 586.111990][T16893] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3527'. [ 586.122240][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 586.122254][ T26] audit: type=1326 audit(1792747683.260:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16890 comm="syz.0.3525" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f046979f559 code=0x0 [ 586.260803][T16893] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3527'. [ 586.604418][T13073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.263019][T16948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3541'. [ 587.302662][T16948] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.311930][T16948] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.321078][T16948] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.329956][T16948] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.391746][T16948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3541'. [ 587.555126][ T4365] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 587.655294][T13073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.766681][ T4365] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 587.797582][ T4365] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 587.821526][ T4365] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 587.861953][ T4365] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 587.896723][ T4365] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 587.923915][ T4365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.432917][T16982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.054583][ T4365] [drm] Initialized gud 1.0.0 20200422 for 2-1:1.0 on minor 2 [ 589.118613][T17003] tipc: Enabling of bearer rejected, failed to enable media [ 589.731961][ T4365] gud 2-1:1.0: [drm] fb1: guddrmfb frame buffer device [ 589.782053][ T4365] usb 2-1: USB disconnect, device number 13 [ 589.844360][T13078] net_ratelimit: 5 callbacks suppressed [ 589.844377][T13078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.915301][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.037568][ T26] audit: type=1326 audit(1792747688.180:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17054 comm="syz.1.3571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bac59f559 code=0x7ffc0000 [ 591.100740][ T26] audit: type=1326 audit(1792747688.210:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17054 comm="syz.1.3571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bac59f559 code=0x7ffc0000 [ 591.158154][ T6032] rpcbind: server 127.0.0.1 not responding, timed out [ 591.203431][ T26] audit: type=1326 audit(1792747688.210:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17054 comm="syz.1.3571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bac59f559 code=0x7ffc0000 [ 591.274392][ T26] audit: type=1326 audit(1792747688.210:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17054 comm="syz.1.3571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9bac59f559 code=0x7ffc0000 [ 591.365645][ T26] audit: type=1326 audit(1792747688.270:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17054 comm="syz.1.3571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bac59f559 code=0x7ffc0000 [ 591.461506][ T26] audit: type=1326 audit(1792747688.270:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17054 comm="syz.1.3571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9bac59f2c2 code=0x7ffc0000 [ 591.553572][ T26] audit: type=1326 audit(1792747688.270:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17054 comm="syz.1.3571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9bac59f357 code=0x7ffc0000 [ 591.667549][ T26] audit: type=1326 audit(1792747688.270:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17054 comm="syz.1.3571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9bac55c251 code=0x7ffc0000 [ 591.745129][T17065] netlink: 'syz.1.3573': attribute type 4 has an invalid length. [ 591.755169][ T26] audit: type=1326 audit(1792747688.270:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17054 comm="syz.1.3571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f9bac5a0349 code=0x7ffc0000 [ 591.844251][ T26] audit: type=1326 audit(1792747688.270:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17054 comm="syz.1.3571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9bac55c2bb code=0x7ffc0000 [ 591.875022][ T7970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.934287][ T26] audit: type=1326 audit(1792747688.280:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17054 comm="syz.1.3571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bac59f559 code=0x7ffc0000 [ 591.986428][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.026455][ T26] audit: type=1326 audit(1792747688.280:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17054 comm="syz.1.3571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bac59f559 code=0x7ffc0000 [ 593.004288][T13078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.075561][ T7970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.043066][T13070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.915213][T16355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.093250][T13078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.456374][T17160] sctp: [Deprecated]: syz.7.3598 (pid 17160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 595.456374][T17160] Use struct sctp_sack_info instead [ 596.123091][T13070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.739843][T17192] handle_userfault: 30 callbacks suppressed [ 596.739861][T17192] FAULT_FLAG_ALLOW_RETRY missing 801 [ 596.797338][T17192] CPU: 0 PID: 17192 Comm: syz.1.3608 Not tainted syzkaller #0 [ 596.804890][T17192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 596.815029][T17192] Call Trace: [ 596.818349][T17192] [ 596.821336][T17192] dump_stack_lvl+0x188/0x24e [ 596.826127][T17192] ? show_regs_print_info+0x12/0x12 [ 596.831381][T17192] ? load_image+0x410/0x410 [ 596.835961][T17192] handle_userfault+0x108f/0x12d0 [ 596.841108][T17192] ? free_unref_page+0x193/0x3f0 [ 596.846172][T17192] ? do_raw_spin_trylock+0xae/0x190 [ 596.851424][T17192] ? do_eventfd+0x2d0/0x2d0 [ 596.855994][T17192] ? free_unref_page+0x19d/0x3f0 [ 596.861006][T17192] handle_mm_fault+0x343a/0x3d40 [ 596.866022][T17192] ? numa_migrate_prep+0x250/0x250 [ 596.871214][T17192] __get_user_pages+0x40d/0xec0 [ 596.876151][T17192] ? populate_vma_page_range+0x2b0/0x2b0 [ 596.881874][T17192] ? tlb_remove_table_rcu+0xf0/0xf0 [ 596.887143][T17192] populate_vma_page_range+0x214/0x2b0 [ 596.892679][T17192] mprotect_fixup+0x788/0x840 [ 596.897431][T17192] ? change_protection+0x3980/0x3980 [ 596.902776][T17192] ? apparmor_file_mprotect+0xf4/0x110 [ 596.908302][T17192] ? bpf_lsm_file_mprotect+0x5/0x10 [ 596.913619][T17192] ? security_file_mprotect+0x7e/0xb0 [ 596.919049][T17192] do_mprotect_pkey+0x7ff/0xba0 [ 596.923970][T17192] ? do_futex+0x310/0x320 [ 596.928349][T17192] ? prot_none_test+0x10/0x10 [ 596.933113][T17192] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 596.939186][T17192] __x64_sys_mprotect+0x7c/0x90 [ 596.944122][T17192] do_syscall_64+0x4c/0xa0 [ 596.948597][T17192] ? clear_bhb_loop+0x60/0xb0 [ 596.953319][T17192] ? clear_bhb_loop+0x60/0xb0 [ 596.958068][T17192] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 596.964028][T17192] RIP: 0033:0x7f9bac59f559 [ 596.968496][T17192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.988265][T17192] RSP: 002b:00007f9baa7d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 596.996743][T17192] RAX: ffffffffffffffda RBX: 00007f9bac826090 RCX: 00007f9bac59f559 [ 597.004783][T17192] RDX: 000000000000000a RSI: 0000000000c00000 RDI: 0000200000400000 [ 597.012806][T17192] RBP: 00007f9bac636b20 R08: 0000000000000000 R09: 0000000000000000 [ 597.020821][T17192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.028859][T17192] R13: 00007f9bac826128 R14: 00007f9bac826090 R15: 00007fff5e54f2e8 [ 597.036898][T17192] [ 597.155238][T13078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.265148][ T26] audit: type=1326 audit(1792747694.410:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17196 comm="syz.2.3610" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe27d99f559 code=0x0 [ 597.688767][T17218] Bluetooth: MGMT ver 1.22 [ 597.722885][ T4278] [ 597.725294][ T4278] ====================================================== [ 597.732406][ T4278] WARNING: possible circular locking dependency detected [ 597.739493][ T4278] syzkaller #0 Not tainted [ 597.743939][ T4278] ------------------------------------------------------ [ 597.750989][ T4278] kworker/u5:2/4278 is trying to acquire lock: [ 597.757175][ T4278] ffffffff8eef7828 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_security_cfm+0x95/0x780 [ 597.766650][ T4278] [ 597.766650][ T4278] but task is already holding lock: [ 597.774053][ T4278] ffffffff8eed5128 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_encrypt_cfm+0x2fe/0x4d0 [ 597.783439][ T4278] [ 597.783439][ T4278] which lock already depends on the new lock. [ 597.783439][ T4278] [ 597.793876][ T4278] [ 597.793876][ T4278] the existing dependency chain (in reverse order) is: [ 597.802921][ T4278] [ 597.802921][ T4278] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 597.810707][ T4278] __mutex_lock+0x12d/0xae0 [ 597.815789][ T4278] hci_remote_features_evt+0x464/0xa10 [ 597.821806][ T4278] hci_event_packet+0x806/0x1290 [ 597.827309][ T4278] hci_rx_work+0x3eb/0xd40 [ 597.832324][ T4278] process_one_work+0x8ab/0x1160 [ 597.837838][ T4278] worker_thread+0xaf5/0x12a0 [ 597.843083][ T4278] kthread+0x29d/0x330 [ 597.847723][ T4278] ret_from_fork+0x1f/0x30 [ 597.852720][ T4278] [ 597.852720][ T4278] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 597.860073][ T4278] __mutex_lock+0x12d/0xae0 [ 597.865146][ T4278] l2cap_chan_connect+0xfb/0xe20 [ 597.870652][ T4278] l2cap_sock_connect+0x576/0x750 [ 597.876271][ T4278] kernel_connect+0x13e/0x1c0 [ 597.881558][ T4278] rfcomm_dlc_open+0x600/0x10c0 [ 597.887085][ T4278] rfcomm_sock_connect+0x2e9/0x600 [ 597.892758][ T4278] __sys_connect+0x3cb/0x450 [ 597.897915][ T4278] __x64_sys_connect+0x76/0x80 [ 597.903270][ T4278] do_syscall_64+0x4c/0xa0 [ 597.908254][ T4278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.914729][ T4278] [ 597.914729][ T4278] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 597.922189][ T4278] __lock_acquire+0x3a03/0x7ea0 [ 597.927615][ T4278] lock_acquire+0x1bc/0x4a0 [ 597.932701][ T4278] __mutex_lock+0x12d/0xae0 [ 597.937776][ T4278] rfcomm_security_cfm+0x95/0x780 [ 597.943397][ T4278] hci_encrypt_cfm+0x363/0x4d0 [ 597.948733][ T4278] hci_encrypt_change_evt+0x961/0xd30 [ 597.954681][ T4278] hci_event_packet+0x806/0x1290 [ 597.960180][ T4278] hci_rx_work+0x3eb/0xd40 [ 597.965165][ T4278] process_one_work+0x8ab/0x1160 [ 597.970703][ T4278] worker_thread+0xaf5/0x12a0 [ 597.975953][ T4278] kthread+0x29d/0x330 [ 597.980581][ T4278] ret_from_fork+0x1f/0x30 [ 597.985584][ T4278] [ 597.985584][ T4278] other info that might help us debug this: [ 597.985584][ T4278] [ 597.995844][ T4278] Chain exists of: [ 597.995844][ T4278] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 597.995844][ T4278] [ 598.008449][ T4278] Possible unsafe locking scenario: [ 598.008449][ T4278] [ 598.016066][ T4278] CPU0 CPU1 [ 598.021463][ T4278] ---- ---- [ 598.026868][ T4278] lock(hci_cb_list_lock); [ 598.031415][ T4278] lock(&hdev->lock); [ 598.038042][ T4278] lock(hci_cb_list_lock); [ 598.045200][ T4278] lock(rfcomm_mutex); [ 598.049400][ T4278] [ 598.049400][ T4278] *** DEADLOCK *** [ 598.049400][ T4278] [ 598.057578][ T4278] 4 locks held by kworker/u5:2/4278: [ 598.062894][ T4278] #0: ffff88802066c938 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 598.073327][ T4278] #1: ffffc900041b7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 598.084791][ T4278] #2: ffff88807897c428 (&hdev->lock){+.+.}-{3:3}, at: hci_encrypt_change_evt+0x92/0xd30 [ 598.094695][ T4278] #3: ffffffff8eed5128 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_encrypt_cfm+0x2fe/0x4d0 [ 598.104596][ T4278] [ 598.104596][ T4278] stack backtrace: [ 598.110524][ T4278] CPU: 0 PID: 4278 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 598.118113][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 598.128296][ T4278] Workqueue: hci2 hci_rx_work [ 598.133033][ T4278] Call Trace: [ 598.136345][ T4278] [ 598.139321][ T4278] dump_stack_lvl+0x188/0x24e [ 598.144050][ T4278] ? load_image+0x410/0x410 [ 598.148614][ T4278] ? show_regs_print_info+0x12/0x12 [ 598.153872][ T4278] ? print_circular_bug+0x12b/0x1a0 [ 598.159128][ T4278] check_noncircular+0x2f8/0x400 [ 598.164126][ T4278] ? print_deadlock_bug+0x5d0/0x5d0 [ 598.169389][ T4278] ? lockdep_lock+0xf1/0x1f0 [ 598.174036][ T4278] ? _find_first_zero_bit+0xd2/0x100 [ 598.179394][ T4278] __lock_acquire+0x3a03/0x7ea0 [ 598.184313][ T4278] ? verify_lock_unused+0x140/0x140 [ 598.189579][ T4278] lock_acquire+0x1bc/0x4a0 [ 598.194164][ T4278] ? rfcomm_security_cfm+0x95/0x780 [ 598.199413][ T4278] ? trace_contention_end+0x5f/0x170 [ 598.204744][ T4278] ? __mutex_lock+0x1ab/0xae0 [ 598.207848][T13078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.209472][ T4278] ? __might_sleep+0xd0/0xd0 [ 598.209496][ T4278] ? read_lock_is_recursive+0x10/0x10 [ 598.227579][ T4278] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 598.233273][ T4278] ? mutex_unlock+0x10/0x10 [ 598.237833][ T4278] __mutex_lock+0x12d/0xae0 [ 598.242385][ T4278] ? rfcomm_security_cfm+0x95/0x780 [ 598.247632][ T4278] ? rfcomm_security_cfm+0x95/0x780 [ 598.252898][ T4278] ? mutex_lock_nested+0x10/0x10 [ 598.257888][ T4278] ? trace_contention_end+0x5f/0x170 [ 598.263234][ T4278] ? __mutex_lock+0x1ab/0xae0 [ 598.267967][ T4278] ? l2cap_disconn_cfm+0xc0/0xc0 [ 598.272957][ T4278] rfcomm_security_cfm+0x95/0x780 [ 598.278039][ T4278] ? mutex_lock_nested+0x10/0x10 [ 598.283021][ T4278] ? __lock_acquire+0x7ea0/0x7ea0 [ 598.288101][ T4278] ? rfcomm_send_msc+0x350/0x350 [ 598.293081][ T4278] ? trace_contention_end+0x5f/0x170 [ 598.298420][ T4278] ? hci_conn_hash_lookup_handle+0x20/0x240 [ 598.304365][ T4278] ? rfcomm_send_msc+0x350/0x350 [ 598.309369][ T4278] hci_encrypt_cfm+0x363/0x4d0 [ 598.314176][ T4278] hci_encrypt_change_evt+0x961/0xd30 [ 598.319601][ T4278] ? hci_remote_name_evt+0x610/0x610 [ 598.324947][ T4278] ? skb_pull_data+0xec/0x1f0 [ 598.329734][ T4278] ? hci_remote_name_evt+0x610/0x610 [ 598.335058][ T4278] hci_event_packet+0x806/0x1290 [ 598.340047][ T4278] ? lock_chain_count+0x20/0x20 [ 598.344949][ T4278] ? bis_list+0x280/0x280 [ 598.349320][ T4278] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 598.355296][ T4278] ? kcov_remote_start+0x50f/0x810 [ 598.360459][ T4278] ? lockdep_hardirqs_on+0x94/0x140 [ 598.365706][ T4278] ? hci_send_to_monitor+0x9c/0x4a0 [ 598.370959][ T4278] hci_rx_work+0x3eb/0xd40 [ 598.375440][ T4278] ? _raw_spin_unlock+0x40/0x40 [ 598.380670][ T4278] ? process_one_work+0x7b4/0x1160 [ 598.385847][ T4278] process_one_work+0x8ab/0x1160 [ 598.390850][ T4278] ? worker_detach_from_pool+0x240/0x240 [ 598.396985][ T4278] ? _raw_spin_lock_irq+0xb7/0xf0 [ 598.402065][ T4278] ? _raw_spin_lock_irqsave+0x100/0x100 [ 598.407693][ T4278] ? wq_worker_running+0x97/0x190 [ 598.412824][ T4278] worker_thread+0xaf5/0x12a0 [ 598.417561][ T4278] kthread+0x29d/0x330 [ 598.421678][ T4278] ? worker_clr_flags+0x1a0/0x1a0 [ 598.426751][ T4278] ? kthread_blkcg+0xd0/0xd0 [ 598.431383][ T4278] ret_from_fork+0x1f/0x30 [ 598.435858][ T4278] [ 598.440121][ T7970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.241519][T13070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.276676][T13078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.317976][T13070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.474970][T16355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.358082][T13078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.675323][T16355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.314811][ C0] bridge0: port 3(veth0) entered forwarding state [ 603.321294][ C0] bridge0: topology change detected, propagating [ 603.327816][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.329514][T14262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 603.335057][ C0] bridge0: topology change detected, propagating [ 603.335162][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.335178][ C0] bridge0: topology change detected, propagating [ 603.366806][T14262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 603.395022][T13078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.439624][T13078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.514915][T16355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.477730][T13070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.515026][T13078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.555021][T16355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.563189][T16355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog