last executing test programs: 16.071272134s ago: executing program 5 (id=349): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000406a0584000000000000010902240001000000000904000001030000000921000000012205000905810300000000003f8295d27a1f4a5629eaf08691e8e6362c9756f6c7aac8d78cce2661f7b676b93085b56bf0c3861a0520f3e844e59b41927690b07e231a0272402883a6e49b1aff03b256a069b6b7bfee69"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x0, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a2002b00010100000057fc5ad90200fb6a880000d6c9db0000db15d088bd8b7002300e00d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c805bbf9315033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23ded2aa000000", 0xb8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet6(r5, 0x0, 0x0) sendmsg$sock(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@timestamping={{0x14, 0x1, 0x2}}], 0x18}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="64000000000101041900000000000000020000002400018014005536018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c00028005000b0000000000280007400000002c9966cccca64a08c973c41ade5f00f59bd4818de50bfa59801387d4af259fb80bd39043da6f28e97ef482958d6f082c3a81f1694c088d2353e7d7a3b1e9959928a866ecdc90eb04f15d2afd9a0d17888f38baa0ec552739610efc21860290ba7d5b99df152e31ec7094fe1a1be07922"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x2, 0x1, 0x301}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fsi_master_aspeed_opb_read\x00', r2}, 0x10) 15.714586834s ago: executing program 4 (id=354): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) r2 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) sendfile(r1, r2, 0x0, 0x40000000000004) 15.487427514s ago: executing program 4 (id=356): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20048004, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x9c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r9, 0x1}, 0x14}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f00000002c0)=0x3f, 0x4) r10 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r10, 0x40046109, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x1c, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xa00000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x1}, @exit, @ldst={0x3, 0x2, 0x2, 0x0, 0x7, 0xfffffffffffffffa, 0xfffffffffffffffc}, @ldst={0x3, 0x3, 0x6, 0x7, 0x9, 0x20}, @generic={0x2, 0x4, 0x0, 0xff}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xf00b}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) 11.984376s ago: executing program 2 (id=362): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) 10.608709124s ago: executing program 1 (id=363): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='rxrpc_peer\x00', r0}, 0x10) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0xfffd}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 10.569075638s ago: executing program 4 (id=364): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x4a9, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2dec, 0x0, 0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1a3513070000", 0x0, 0x0, 0x0, 0x0, 0x0}) 10.495294918s ago: executing program 5 (id=365): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}], 0x20) 10.398672019s ago: executing program 2 (id=366): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f0000000400)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000100)='GPL\x00'}, 0x90) 10.353072891s ago: executing program 0 (id=367): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x64) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x0, 0x0}) io_uring_enter(r2, 0x5b43, 0x0, 0x0, 0x0, 0x0) 10.164167078s ago: executing program 5 (id=368): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_gettime(r2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) r3 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlink(&(0x7f0000000180)='./cgroup\x00') r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r7) close(r7) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x5d0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x500, 0x20a, 0x278, 0x500, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0x2d8, 0x340, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x1500, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x7}, 0x48) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_SECURITY(r8, 0x12, 0x2, 0x0, 0x20000000) 10.150080713s ago: executing program 4 (id=369): io_setup(0x5, &(0x7f0000000000)=0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x3, "420600753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a0400", 0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000040)={0x3fb}, 0x0, 0x0) io_submit(r0, 0x19, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 10.053145787s ago: executing program 1 (id=370): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) close(r0) 10.05188206s ago: executing program 2 (id=371): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f800000010000100a35aa3857422890000000000", @ANYRES32=r1, @ANYBLOB="4010020000000000d0001680cc000180280001"], 0xf8}}, 0x0) 9.976302204s ago: executing program 0 (id=372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000953b000206030000000000000000000000000005000100070000000900020073797a3000001e00050005000000000005000400000000000d000300686173683a6e65740000"], 0x48}}, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000640)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) epoll_create1(0x0) r5 = fsopen(&(0x7f0000000080)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x4, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000002280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000300)={r6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000004c0)={0x0}) r8 = socket$key(0xf, 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000000)={r7, 0x3, r8}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x4c00000000000000}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_emit_ethernet(0x8c, &(0x7f0000000380)=ANY=[@ANYRES64=r2], &(0x7f00000005c0)={0x3, 0x3, [0xe43, 0xda1, 0x25b, 0x1448]}) r10 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r10, &(0x7f0000000340)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r10, &(0x7f0000005240), 0x4000095, 0x0) getsockname$packet(r10, 0x0, &(0x7f0000000040)) newfstatat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f0000000700), 0x4d00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000061107d0000000000950000070000000041487e43875e8eca75d0c4b673701a6cc9ab78b202a7e6935bfeab0b4a79a9eb66f6fc53722f6eeaca55a4c148db0f15f7ea84926bc4c830d1b2c45d4aeeab35e62fdb2029c3c6939f466e65ef3cde918ab4874c9616b5c9731b24a1f915edaeca0bc93b0a5b619ef5ae3ab89f13"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r9], &(0x7f0000000540)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x6}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) 8.894080824s ago: executing program 1 (id=373): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r2) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x8) add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$get_persistent(0x16, 0x0, r3) read$watch_queue(r4, &(0x7f0000000200)=""/88, 0x58) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) 8.648596548s ago: executing program 5 (id=374): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r2 = gettid() sigaltstack(&(0x7f0000000040)={&(0x7f0000001140)=""/4090, 0x0, 0xffa}, 0x0) rt_sigqueueinfo(r2, 0x21, &(0x7f0000000080)) 8.63873529s ago: executing program 4 (id=375): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1440e, &(0x7f0000000740)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}], [{@obj_role={'obj_role', 0x3d, '\x00'}}, {@measure}, {@subj_role={'subj_role', 0x3d, 'nobh'}}]}, 0x1, 0x435, &(0x7f0000000300)="$eJzs289rHFUcAPDv7Cap6Q8TS/3RtGq0isEfSZPW2oMXRcGDgqCHeoxJWmK3jTQRbAkaRepRCt7Fo+Bf4Ekvop4Er3qXQpFcWj2tzO5MsrvZTZN0k027nw9M+97MW973uzNv9828bABdazj9J4nYHxF/RsRAtVrfYLj6363lxal/lxenkiiX3/knqbS7ubw4lTfNX7cvr/REFL5I4kiTfucvXzk/WSrNXMrqYwsXPhybv3zlhdkLk+dmzs1cnDh9+uSJ8ZdOTbzYljzTvG4OfTJ39PAb7117a+rMtfd//T7J82/Io02G1zv4dLnc5u4660BNOenpYCBsSrE6TKO3Mv4HohirJ28gXv+8o8EB26pcLpcfan14qQzcw5LodARAZ+Rf9On9b77t0NRjV7jxSvUGKM37VrZVj/REIWvT23B/207DEXFm6b9v0i225zkEAECdH9P5z/PN5n+FqH0udH+2hjIYEQ9ExMGIOBURhyLiwYhK24cj4pFN9t+4SLJ2/lO4vqXENiid/72crW3Vz//y2V8MFrPagUr+vcnZ2dLM8ew9GYnePWl9fJ0+fnrtj69aHaud/6Vb2n8+F8ziuN6zp/4105MLk3eSc60bn0UM9TTLP1lZCUgi4nBEDG2xj9lnvzva6tjt819HG9aZyt9GPFM9/0vRkH8uWX99cuy+KM0cH8uvirV++/3q2636v6P82yA9/3ubXv8r+Q8mteu185vv4+pfX7a8p9nq9d+XvFu37+PJhYVL4xF9yZvVoGv3TzS0m1htn+Y/cqz5+D8Yq+/EkYhIL+JHI+KxiHg8i/2JiHgyIo6tk/8vrz71wdbz315p/tObOv+rhb5o3NO8UDz/8w91nQ5uJv/0/J+slEayPRv5/NtIXFu7mgEAAODuU4iI/ZEURlfKhcLoaPVv+A/F3kJpbn7hubNzH12crv5GYDB6C/mTroGa56Hj2W19Xp9oqJ/Inht/Xeyv1Een5krTnU4euty+FuM/9Xex09EB287vtaB7Gf/QvYx/6F7GP3SvJuO/vxNxADuv2ff/px2IA9h5DePfsh90Eff/0L2Mf+hexj90pfn+uP2P5BUU1hSisCvCqBT6Y1eEcU8VOv3JBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0B7/BwAA//90a+X5") openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x200000, &(0x7f00000001c0)=ANY=[@ANYBLOB='shortname=winnt,nonumtail=0,codepage=865,shortname=mixed,dos1xfloppy,utf8=0,shortnamiolower,rodir,utf8=0,iocharset=iso8859-9,\x00'], 0x2, 0x217, &(0x7f00000004c0)="$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") syz_mount_image$jfs(&(0x7f0000000280), &(0x7f0000000180)='./bus\x00', 0x200001a, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYBLOB="c781528778cf8d5ac7693db2794b59a0aa79366fec29572b34c9edbccf6b24cd433c5e6dbf4bc7cd26df09f56b827f19855fc31822d9e0f0e8fd6ef2bab5d0814bb3f558b26f37649e5f86513c2b798a8fd206e295dd45f0f59447e0cd9f2897ef843417ae339a1edcbbb9762a8e57a37db2fb681dbafc0fd373c3e79fd1d4b36e4bd0d20cfe6391dc85a7f14272f2db4069e0132ae41bb1d031398b077faecd8bae3d875b4584bd2c8af052b2bf2d6a3698f7a271a96420365e1246f866a6e3fc28a7d8f36d491e5d024ef62caa43d3cc644d79b549a31cb7dbf5abf9a8cb5614bbf88bf2c589afc677de419524793c9cb244582e5f60bb6e", @ANYBLOB="25a6f3d6f3b8049aff8d72b427ba7f79ae7ea1848b6965cb297b32225528dc9853f504f5eb7a5302373014bf763802b2c0965ae57605916f7fb4b51577720c6a4c4b833e2cf4a210f708b6c0dcda2d78b6415723a4046e9bdd8378d6cae11d1378d3811be49c2cfcacf2fcea82aa4351e6feda7dbc17aa93f4b731560be8ce55fe07b9fed8525326b3849a4fad298da4f62f22de211750a541fc5420299ce552071bb80044767d27b3f7a97d257746a91d6d7cfd56d5fef2", @ANYRES64=0x0, @ANYRES16], 0x5, 0x60ff, &(0x7f0000009140)="$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") mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x1c1102, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) 8.63174776s ago: executing program 2 (id=376): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff85000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x82400, 0x0, 0xfc, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000005c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84}, 0x48) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000080)='./bus\x00') chdir(&(0x7f00000002c0)='./bus\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000080)=""/43, 0x2b) getdents(r4, 0xfffffffffffffffd, 0x58) 8.21370105s ago: executing program 5 (id=377): socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) flistxattr(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000040)=0x1) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x415}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000380)={[{@acl}, {@noload}, {@auto_da_alloc}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {}, {@journal_checksum}]}, 0x6, 0x652, &(0x7f0000002580)="$eJzs3U9oHF8dAPDvzGbzS9L4SysiNigGPLQgTZNarHqxrQd7KFiwBxEPDU1SQ7d/SFKwtWACHhQURLwW6UXw7F169yZC9eZZqCIVC1q6P2Z2ttlsZrNJmuwm2c8HNjvz5m3e++7bt/NmZ99OAANrKvuTRpyOeHcriZho2TYejY1TRb7X/356O7slUa9/919JJEVaM39S3J8oVkYi4s9XIz5d2VruyuMnd+dq9YafRJxfvffw/MrjJ+eW7s3dWbizcH/2wtcuXpr5+uzF2ZaK7t2J4v7a9e98/pc//eFXF/9SO5fE5bhZ/fF8tMWxX6ZiKt4VIbamD0XEpWyh5Hk5ao5BCAOtUrweqxHx2ZiISr7WMBFLv+hr5YADVa9E1LeXdMsAHFW6Nwyq5jigeWxffhyctK3f7MHIpDdeXWkcAG2Nf6j4yGEkPzYae520HBk1Pts4uQ/lZ2W8fTry7O3TyWex6XOIN+9bZ2gfyulkbT0iPlcWf5LX7WQeaRZ/uulYP3tFzETEcFG/b31AHVpfXQfxOcx2dhN/azukEXG5uM/Sr+6x/PaPtXodPwCD6cWVYke+lq1t7P+ysUdz/BMl45/xDz8lk+v3/q/z+K+5vx/Jxz1p2zgsG7PcKP+X1faEv//82q87ld8Y/00+a96y8ptjwV54tR4x2Rb/z7Jgi/FPFn9S0v5ZlluXd1bGt1/+81qnbf2Ov/484kzp8c/GqDRb2ub85PnFpdrCTONvaRl//NMPftep/PL4PzqASMtl7T/WIf6W9k/bH5c9Jw/L/+V6e8Ifbjy/16n88a7tn/5jOGkcbw4XKT9aX11dno0YTq4XWYr0udXV5Qvbx9vI86ae38824j/7pfL+v+n13xbVaPMtcwcefu/u607b9vL6bzmZ/K6+wzp0ksU/3739t/T/LO1XOyzjv99/9IVO2zrHX82f4xJb3l8BAAAAAACAhjQ/B5uk0++X03R6ujFf9jMxltYerKx+efHBo/vzEWfz70NW00iT/CsjE431ZHGptjBbfB+2uX6hbf0rEXEqIn5TGc3Xp28/qM33O3gAAAAAAAAAAAAAAAAAAAA4JE4U8/+b16n+T6Ux/x8YEN0vMLfl+g/AMXGQF5gEDre8/2+3i/+4d3UBesv+HwbXXvv/yD7XA+g9+38YXPo/DC79HwaX/g+Da2i93zUA+sX+HwAAAACOpVNffPG3JCLWvjGa3zLDxTaTfuF4q+4qd+XA6gH0nh4Ng+v9qX+DfRg4Oxr//6/4ccCDrw7QB0lZYj44qG/f+V+UPnKDrxYDAAAAAAAAAAAAwL45c7rz/P/dzQ0GjhrT/mBwfcD8fz8dAEecn/6HweUYH+gyi7/zpf67zf8HAAAAAAAAAAAAAPbNeH5L0uliLvB4pOn0dMSnIuJkVJPFpdrCTER8HBF/rVQ/ytZn+11pAAAAAAAAAAAAAAAAAAAAOGZWHj+5O1erLSy3Lvx/S0oPF37/MqLHhTavgto9c30HebZd+Gbs8lGR9L4JRqPnTdDDhaGWlCRiLWv5Q1Gx5ZU4HNXIF/r8xgQAAAAAAAAAAAAAAAAAAAOoZe5xucnf9rhGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANB7G9f/77IwP9Z4wI4yb17od4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNH0SQAAAP//Kbg8mA==") socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) readv(r4, &(0x7f0000001c00)=[{&(0x7f0000000700)=""/100, 0x64}, {&(0x7f0000000780)=""/80, 0x50}, {&(0x7f0000000800)=""/156, 0x9c}, {&(0x7f00000008c0)=""/126, 0x7e}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/188, 0xbc}, {&(0x7f0000000240)=""/29, 0x1d}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000480)=""/16, 0x10}, {&(0x7f0000001b00)=""/226, 0xe2}], 0xa) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r5, 0xc1004110, &(0x7f0000000040)={0x0, [0x2, 0x8, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x1}, {0x11, 0x0, 0x0, 0x1}, {0x0, 0x3fffffe}], 0x20}) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000008004500005800000000000400000000000000000001248081000000000010000800000086"], 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc0109058903"], 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f0000000180)={0x0, "a4409f0df015f3185bce69aa43958c20bfc6f27e150f0cd23ede4b548367b83e0cf472bf28197b2b1a6a5fedb483902d7b642769d7de51242af43433845bfd6a", {0x10000}}) socket(0x10, 0x2, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000"], 0x0) syz_usb_control_io(r6, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000001cc0)=ANY=[@ANYBLOB="12e40f01000000102505a8a440000102030109022400010104800709040070010701030c09ff01022000090692090582021000050602312e8e335e8b16440db348dc964454e45eed29e395c0185b63291e48b1b966ac73eda74570019105f347b50e63b272c44bee59b3016d832fb7a429a38dbeacd0ac9fdb61a3818a3618e7209aafc4770fc8a7918f2335ed8c4fd2d70d14cc76c928446d2992359b9e45814c00000000000000fcf828d2e6b127028ae81dce520754b1c788cd30229c07598eafb16f9fbbad3b124242ba441776a48a21923e350115a26b5c73f22044fa5e4966c11152c991cd6ee50000000000"], &(0x7f00000006c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x300, 0x40, 0x3f, 0x7, 0x10, 0xaf}, 0x44, &(0x7f0000000600)={0x5, 0xf, 0x44, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "f6849ff51b6b63d7fe0e78d7e2c02506"}, @ss_container_id={0x14, 0x10, 0x4, 0x31, "f46543583a1bef4821bf37fdc8989adb"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "c7c2504ac93d68ee5a4e634ade92b2e6"}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1007}}, {0x28, &(0x7f0000000680)=@string={0x28, 0x3, "347cc5e7e277a869a7cda36d6388dca23b5d8fda3289e9346be2c6fb479c1c9f519fa277c757"}}]}) 7.223817383s ago: executing program 2 (id=378): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000406a0584000000000000010902240001000000000904000001030000000921000000012205000905810300000000003f8295d27a1f4a5629eaf08691e8e6362c9756f6c7aac8d78cce2661f7b676b93085b56bf0c3861a0520f3e844e59b41927690b07e231a0272402883a6e49b1aff03b256a069b6b7bfee69"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x0, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a2002b00010100000057fc5ad90200fb6a880000d6c9db0000db15d088bd8b7002300e00d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c805bbf9315033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23ded2aa000000", 0xb8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet6(r5, 0x0, 0x0) sendmsg$sock(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@timestamping={{0x14, 0x1, 0x2}}], 0x18}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="64000000000101041900000000000000020000002400018014005536018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c00028005000b0000000000280007400000002c9966cccca64a08c973c41ade5f00f59bd4818de50bfa59801387d4af259fb80bd39043da6f28e97ef482958d6f082c3a81f1694c088d2353e7d7a3b1e9959928a866ecdc90eb04f15d2afd9a0d17888f38baa0ec552739610efc21860290ba7d5b99df152e31ec7094fe1a1be07922"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x2, 0x1, 0x301}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fsi_master_aspeed_opb_read\x00', r2}, 0x10) 6.763622687s ago: executing program 1 (id=380): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32]) unshare(0x22020400) socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRES32], 0xfffffecc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) accept(r2, 0x0, &(0x7f00000001c0)) write$binfmt_elf64(r4, 0x0, 0x0) close(r4) splice(r0, 0x0, r3, 0x0, 0x7fff, 0x0) 6.571740738s ago: executing program 3 (id=381): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x4a9, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2dec, 0x0, 0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1a3513070000", 0x0, 0x0, 0x0, 0x0, 0x0}) 6.215493619s ago: executing program 3 (id=382): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='rxrpc_peer\x00', r0}, 0x10) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0xfffd}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 6.021558478s ago: executing program 0 (id=383): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000008c0)={0x0, 0x1, &(0x7f0000000580)=[r2], 0x0, 0x0, 0x0}) 5.915414998s ago: executing program 3 (id=384): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000080000003a3a9b00000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d80"], 0x40}}, 0x0) 5.726198981s ago: executing program 0 (id=385): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000010140)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcd5}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) 5.694775207s ago: executing program 3 (id=386): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_gettime(r2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) r3 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlink(&(0x7f0000000180)='./cgroup\x00') r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r7) close(r7) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x5d0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x500, 0x20a, 0x278, 0x500, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0x2d8, 0x340, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x1500, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x7}, 0x48) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_SECURITY(r8, 0x12, 0x2, 0x0, 0x20000000) 5.314327006s ago: executing program 0 (id=387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2004040, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) r4 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) r5 = socket$packet(0x11, 0x2, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$int_in(r6, 0x5452, &(0x7f0000000140)=0x9) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f0000000a40)=[{r6}], 0x1, 0x0, 0x0, 0x0) bind$packet(r5, &(0x7f0000000000)={0x11, 0xf7, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg$inet(r5, &(0x7f0000000380)=[{{0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6000}}], 0x300, 0x0) 5.26367633s ago: executing program 1 (id=388): io_setup(0x5, &(0x7f0000000000)=0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x3, "420600753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a0400", 0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000040)={0x3fb}, 0x0, 0x0) io_submit(r0, 0x19, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 4.212368194s ago: executing program 3 (id=389): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x11, &(0x7f0000000000)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x100}}, {@errors_remount}, {@nolazytime}, {@block_validity}]}, 0x0, 0x60c, &(0x7f0000001b40)="$eJzs3c9vFGUfAPDvTH/Svu/bQt68r3iQJsZAorS0gCHGRHonBH/8A5UWQiiUtDWxSEJJ9Gi8eDDx5EH8L5TEm/Hg1YMXT4aEGMNBDJE1s50p2+3u0l/bKd3PJ1k6z8x2nmeWfvt95ukzMwF0rJHsnzTicETcSCKGarZ1R75xZOV9D/+4dTF7JVGpvPt7ErduJ8u1+0ryr4P5N/89FMlPacShrvX1LizdvDo1Ozszn5fHFq/dGFtYunn8yrWpyzOXZ65PvD5x5vSp02fGT2zr+HoarPv6y8fJ+De/nE/ibDzJ25YdV/37+rZVc/aZjURlxaPa9dnnemab+94r/hwqfk6eSupXsGddyuP2XET8P4aiq+Z/cyg+ebvUxgFtVUmiyFFAx0maxP8Pk61+M/S3rT3Abin6AcW5faPz4PXSNvdKgN3wYHJlQGol9nsiooj/7pWxweivjqENPEzWjPMkEbG9kbkVWR0/fn/+4+wVTcbhgPZYvlOMctfn/6Qam8PRXy0NPEzXxv9ypZLmPYFs/TtbrH+kriz+Yfcs34mIF/L83xsbjv80j90i/t/fYv3iHwAAAAAAAHbOvcmIeK3R/L90df5Pb4P5P4MRcXYH6n/23//S+/lCsgPVATUeTEa82XD+7+oc3+GuvPTv6nyAnuTSldmZExHxn4g4Fj19WXm8br+1M4SPf3roi2b1187/y15Z/cVcwHxP97vrLsSdnlqc2u5xAxEP7kS8WJ3/eyRfs3b+T5b/kwb5P4vvGxus49Ardy802/bs+AfapfJVxNGG+f9pdztpfX+OsWp/YKzoFaz30keffdusfvEP5cny/0Dr+O9Lau/Xs7C5/fdGxMml7kqz7Vvt//cm73UV+898OLW4OD8e0ZucW79+YnNthv2qiIciXrL4P/Zy6/G/1f5/TRweiIjlDdb5vyeDvzbbJv9DebL4n26d/4fX5v/NL0zcHf6uWf0XNpT/T1Vz+rF8jfE/qLX+fhwbDdBSmgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz7k0Iv4VSTq6upymo6MRgxHx3xhIZ+cWFl+9NPfB9elsW/X5/2nxpN+hlXJSPP9/uKY8UVc+GREHI+LzrgPV8ujFudnpsg8eAAAAAAAAAAAAAAAAAAAA9ojB6jX/lb766/8zv3WV3Tqg7brzr+IdOk/3lr+z0rejDQF23dbjH3iOZef8m4j/nna2BShB8/h/9LhStavNAXaR/j90ri3Gvz8XwD4g/0On2uCYXn+72wGUQf4HAAAAAIB95eCRez8nEbH8xoHqK9ObbzPZH/a3tOwGAKUxhxc6V/dc2S0AyuIcH0hWl/5qeLF/89n/SXsaBAAAAAAAAAAAAACsc/Sw6/+hU7W+/t/cftjPWlz/3yj43S4A9pHmj/6Q+2G/c44PPCvbu/4fAAAAAAAAAAAAAPaA/ptXp2ZnZ+YXlp6/hbf2RjM2t7A8tSeasYmFyu2I1u950p7aeyJir3wI8wtZa3arruIWHCUecsm/lwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFX/BAAA//8IaCJL") landlock_create_ruleset(0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, @private=0xa010101}, @RTA_IIF={0x8}, @RTA_SRC={0x8, 0x2, @dev}]}, 0x34}}, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @random="c5f9772bb146", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}}, 0x0) pread64(r0, &(0x7f0000002100)=""/4116, 0x1014, 0x2) 4.043211266s ago: executing program 5 (id=390): sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="0104000000000000000092000000080003"], 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000002c0)=[{0x0, 0x3, 0x0, 0x9}, {0x0, 0x4, 0x0, 0x4}, {0x0, 0x2, 0x0, 0x2}, {0x0, 0x1, 0x0, 0x5}, {0x0, 0x4, 0x0, 0xc}]}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0xb000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) 4.003278656s ago: executing program 2 (id=391): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff85000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x82400, 0x0, 0xfc, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000005c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84}, 0x48) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000080)='./bus\x00') chdir(&(0x7f00000002c0)='./bus\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000080)=""/43, 0x2b) getdents(r4, 0xfffffffffffffffd, 0x58) 1.15839118s ago: executing program 0 (id=392): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='netlink_extack\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f00000007c0), &(0x7f0000000840)}, 0x20) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='irq_handler_exit\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1}, 0x48) socket$packet(0x11, 0x0, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @broadcast}, {0x0, @random="ca1597489704"}, 0x8, {0x2, 0x0, @empty}, 'veth0\x00'}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r5, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080)='`', &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r5}, 0x38) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x6c02, 0x41}, 0x48) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) close_range(r8, 0xffffffffffffffff, 0x0) 1.02836026s ago: executing program 1 (id=393): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000611060000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@get={0x1, &(0x7f00000000c0)=""/146, 0x8}) 825.274527ms ago: executing program 4 (id=394): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000259d360205f0501d09288000000010902124201000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 0s ago: executing program 3 (id=395): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20048004, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x9c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r9, 0x1}, 0x14}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f00000002c0)=0x3f, 0x4) r10 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r10, 0x40046109, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x1c, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xa00000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x1}, @exit, @ldst={0x3, 0x2, 0x2, 0x0, 0x7, 0xfffffffffffffffa, 0xfffffffffffffffc}, @ldst={0x3, 0x3, 0x6, 0x7, 0x9, 0x20}, @generic={0x2, 0x4, 0x0, 0xff}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xf00b}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.230' (ED25519) to the list of known hosts. [ 72.858010][ T5222] cgroup: Unknown subsys name 'net' [ 73.008789][ T5222] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.717805][ T5222] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.851615][ T5248] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.861520][ T5248] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.865867][ T5249] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.878071][ T5249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.878221][ T5248] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.886242][ T5249] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.900245][ T5246] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.912525][ T5249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.920635][ T5249] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.930058][ T5249] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.937275][ T5246] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.944410][ T5246] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.953242][ T5246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.961686][ T5246] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.970213][ T5246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.976587][ T5248] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.988823][ T5248] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.989728][ T5246] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.000283][ T5248] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.015876][ T4613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.019093][ T5248] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.024366][ T5254] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.033456][ T5248] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.038987][ T5254] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 78.052566][ T5254] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.060540][ T5248] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 78.071262][ T5248] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.071612][ T5254] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 78.087692][ T5254] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.095511][ T5248] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.095901][ T5254] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 78.112352][ T5254] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 78.132488][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 78.147006][ T5257] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.162895][ T5246] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.170787][ T5246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.186224][ T5238] chnl_net:caif_netlink_parms(): no params data found [ 79.217888][ T5233] chnl_net:caif_netlink_parms(): no params data found [ 79.232399][ T5237] chnl_net:caif_netlink_parms(): no params data found [ 79.244106][ T5240] chnl_net:caif_netlink_parms(): no params data found [ 79.392209][ T5234] chnl_net:caif_netlink_parms(): no params data found [ 79.484542][ T5242] chnl_net:caif_netlink_parms(): no params data found [ 79.630284][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.639189][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.647119][ T5237] bridge_slave_0: entered allmulticast mode [ 79.654694][ T5237] bridge_slave_0: entered promiscuous mode [ 79.668204][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.675906][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.683279][ T5237] bridge_slave_1: entered allmulticast mode [ 79.690947][ T5237] bridge_slave_1: entered promiscuous mode [ 79.811790][ T5238] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.821921][ T5238] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.830567][ T5238] bridge_slave_0: entered allmulticast mode [ 79.838841][ T5238] bridge_slave_0: entered promiscuous mode [ 79.848514][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.855969][ T5238] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.863339][ T5238] bridge_slave_1: entered allmulticast mode [ 79.872304][ T5238] bridge_slave_1: entered promiscuous mode [ 79.880035][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.887684][ T5240] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.895027][ T5240] bridge_slave_0: entered allmulticast mode [ 79.902639][ T5240] bridge_slave_0: entered promiscuous mode [ 79.912542][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.919817][ T5240] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.927460][ T5240] bridge_slave_1: entered allmulticast mode [ 79.935267][ T5240] bridge_slave_1: entered promiscuous mode [ 80.081283][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.088596][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.097534][ T5249] Bluetooth: hci1: command tx timeout [ 80.103666][ T5233] bridge_slave_0: entered allmulticast mode [ 80.112699][ T5233] bridge_slave_0: entered promiscuous mode [ 80.140158][ T5237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.175695][ T5249] Bluetooth: hci5: command tx timeout [ 80.177244][ T5246] Bluetooth: hci2: command tx timeout [ 80.181635][ T5249] Bluetooth: hci0: command tx timeout [ 80.192710][ T5254] Bluetooth: hci4: command tx timeout [ 80.214932][ T5238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.229138][ T5240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.239575][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.247253][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.254549][ T5233] bridge_slave_1: entered allmulticast mode [ 80.262092][ T5254] Bluetooth: hci3: command tx timeout [ 80.269797][ T5233] bridge_slave_1: entered promiscuous mode [ 80.316481][ T5237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.326017][ T5242] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.333199][ T5242] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.341891][ T5242] bridge_slave_0: entered allmulticast mode [ 80.350552][ T5242] bridge_slave_0: entered promiscuous mode [ 80.360393][ T5242] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.367666][ T5242] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.375120][ T5242] bridge_slave_1: entered allmulticast mode [ 80.383400][ T5242] bridge_slave_1: entered promiscuous mode [ 80.393407][ T5238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.432809][ T5240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.476324][ T5234] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.485626][ T5234] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.492913][ T5234] bridge_slave_0: entered allmulticast mode [ 80.501385][ T5234] bridge_slave_0: entered promiscuous mode [ 80.612528][ T5240] team0: Port device team_slave_0 added [ 80.623322][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.638692][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.648113][ T5234] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.655269][ T5234] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.669224][ T5234] bridge_slave_1: entered allmulticast mode [ 80.678353][ T5234] bridge_slave_1: entered promiscuous mode [ 80.707243][ T5237] team0: Port device team_slave_0 added [ 80.717395][ T5242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.731625][ T5242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.744978][ T5238] team0: Port device team_slave_0 added [ 80.755023][ T5240] team0: Port device team_slave_1 added [ 80.813806][ T5237] team0: Port device team_slave_1 added [ 80.841866][ T5238] team0: Port device team_slave_1 added [ 80.868832][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.876003][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.902035][ T5240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.937571][ T5234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.999789][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.007999][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.035065][ T5240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.062242][ T5233] team0: Port device team_slave_0 added [ 81.074276][ T5234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.121846][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.129179][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.155817][ T5237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.173349][ T5242] team0: Port device team_slave_0 added [ 81.242111][ T5233] team0: Port device team_slave_1 added [ 81.297114][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.304135][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.360796][ T5237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.377579][ T5242] team0: Port device team_slave_1 added [ 81.384597][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.392461][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.420961][ T5238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.491287][ T5234] team0: Port device team_slave_0 added [ 81.503698][ T5234] team0: Port device team_slave_1 added [ 81.545596][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.552778][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.586638][ T5238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.614830][ T5240] hsr_slave_0: entered promiscuous mode [ 81.630147][ T5240] hsr_slave_1: entered promiscuous mode [ 81.642444][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.654050][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.687696][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.805221][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.820881][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.854410][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.906908][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.913963][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.942595][ T5242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.026237][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.033238][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.059905][ T5234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.078481][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.086314][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.113811][ T5234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.128818][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.135880][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.161999][ T5242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.175553][ T5254] Bluetooth: hci1: command tx timeout [ 82.208511][ T5238] hsr_slave_0: entered promiscuous mode [ 82.216438][ T5238] hsr_slave_1: entered promiscuous mode [ 82.223053][ T5238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.231941][ T5238] Cannot create hsr debugfs directory [ 82.245733][ T5237] hsr_slave_0: entered promiscuous mode [ 82.252825][ T5237] hsr_slave_1: entered promiscuous mode [ 82.258710][ T5254] Bluetooth: hci4: command tx timeout [ 82.258789][ T5254] Bluetooth: hci0: command tx timeout [ 82.265691][ T5254] Bluetooth: hci5: command tx timeout [ 82.272517][ T5249] Bluetooth: hci2: command tx timeout [ 82.281057][ T5237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.289247][ T5237] Cannot create hsr debugfs directory [ 82.345483][ T5249] Bluetooth: hci3: command tx timeout [ 82.427968][ T5233] hsr_slave_0: entered promiscuous mode [ 82.435172][ T5233] hsr_slave_1: entered promiscuous mode [ 82.442800][ T5233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.451109][ T5233] Cannot create hsr debugfs directory [ 82.540860][ T5234] hsr_slave_0: entered promiscuous mode [ 82.547800][ T5234] hsr_slave_1: entered promiscuous mode [ 82.554306][ T5234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.562591][ T5234] Cannot create hsr debugfs directory [ 82.774989][ T5242] hsr_slave_0: entered promiscuous mode [ 82.782862][ T5242] hsr_slave_1: entered promiscuous mode [ 82.790194][ T5242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.798565][ T5242] Cannot create hsr debugfs directory [ 83.246225][ T5240] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.315819][ T5240] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.375267][ T5240] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.432983][ T5240] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.520214][ T5238] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.546467][ T5238] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.559332][ T5238] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.577897][ T5238] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.687867][ T5233] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 83.701677][ T5233] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 83.713849][ T5233] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 83.751331][ T5233] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 83.902054][ T5237] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.917950][ T5237] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.964493][ T5237] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.977854][ T5237] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.092426][ T5240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.167823][ T5234] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.181226][ T5234] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.201317][ T5234] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.220314][ T5234] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.244719][ T5238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.255611][ T5249] Bluetooth: hci1: command tx timeout [ 84.337210][ T5249] Bluetooth: hci2: command tx timeout [ 84.337430][ T5254] Bluetooth: hci5: command tx timeout [ 84.342727][ T5249] Bluetooth: hci0: command tx timeout [ 84.350693][ T5254] Bluetooth: hci4: command tx timeout [ 84.398650][ T5242] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.417064][ T5254] Bluetooth: hci3: command tx timeout [ 84.441847][ T5240] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.449573][ T5242] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.464174][ T5242] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.490263][ T5238] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.512853][ T5242] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.560918][ T5299] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.568506][ T5299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.613142][ T5299] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.620418][ T5299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.634764][ T5299] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.641972][ T5299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.704189][ T934] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.711476][ T934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.766842][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.909349][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.951373][ T934] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.958623][ T934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.007789][ T934] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.014979][ T934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.150519][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.317669][ T5237] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.391439][ T5303] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.398710][ T5303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.435014][ T5234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.508152][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.515575][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.576874][ T5240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.621341][ T5242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.672825][ T5234] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.830085][ T5242] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.858279][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.865553][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.932201][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.939515][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.004347][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.011743][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.058577][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.066004][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.144668][ T5238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.190014][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.208069][ T5240] veth0_vlan: entered promiscuous mode [ 86.336217][ T5254] Bluetooth: hci1: command tx timeout [ 86.368372][ T5240] veth1_vlan: entered promiscuous mode [ 86.416215][ T5246] Bluetooth: hci0: command tx timeout [ 86.418738][ T5249] Bluetooth: hci5: command tx timeout [ 86.422206][ T5246] Bluetooth: hci2: command tx timeout [ 86.433355][ T5254] Bluetooth: hci4: command tx timeout [ 86.508998][ T5246] Bluetooth: hci3: command tx timeout [ 86.629972][ T5238] veth0_vlan: entered promiscuous mode [ 86.671176][ T5237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.751193][ T5238] veth1_vlan: entered promiscuous mode [ 86.811102][ T5240] veth0_macvtap: entered promiscuous mode [ 86.871300][ T5240] veth1_macvtap: entered promiscuous mode [ 87.017534][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.069294][ T5238] veth0_macvtap: entered promiscuous mode [ 87.109595][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.121555][ T5238] veth1_macvtap: entered promiscuous mode [ 87.195014][ T5240] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.218044][ T5240] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.234699][ T5240] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.244143][ T5240] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.280897][ T5242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.363066][ T5233] veth0_vlan: entered promiscuous mode [ 87.382943][ T5234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.493836][ T5233] veth1_vlan: entered promiscuous mode [ 87.562203][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.574444][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.587756][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.606093][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.617802][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.631024][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.678710][ T3003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.716806][ T3003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.748439][ T5238] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.759265][ T5238] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.769805][ T5238] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.780908][ T5238] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.833433][ T5237] veth0_vlan: entered promiscuous mode [ 87.893140][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.903374][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.981077][ T5233] veth0_macvtap: entered promiscuous mode [ 87.994566][ T5242] veth0_vlan: entered promiscuous mode [ 88.003415][ T5237] veth1_vlan: entered promiscuous mode [ 88.066318][ T5233] veth1_macvtap: entered promiscuous mode [ 88.110701][ T5234] veth0_vlan: entered promiscuous mode [ 88.150265][ T5242] veth1_vlan: entered promiscuous mode [ 88.168491][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.214100][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.250531][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.266533][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.279749][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.290896][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.312756][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.333094][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.345183][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.356644][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.368700][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.380763][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.403549][ T5234] veth1_vlan: entered promiscuous mode [ 88.455309][ T5233] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.465100][ T5233] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.476456][ T5233] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.485226][ T5233] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.519231][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.535973][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.559249][ T5237] veth0_macvtap: entered promiscuous mode [ 88.597701][ T5242] veth0_macvtap: entered promiscuous mode [ 88.606983][ T5299] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.631853][ T5242] veth1_macvtap: entered promiscuous mode [ 88.693314][ T5237] veth1_macvtap: entered promiscuous mode [ 88.746652][ T5234] veth0_macvtap: entered promiscuous mode [ 88.818935][ T5234] veth1_macvtap: entered promiscuous mode [ 88.823937][ T5299] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.864676][ T5299] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.885992][ T5299] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 88.892483][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.895144][ T5299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.911104][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.931428][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.942899][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.953309][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.960108][ T5299] usb 2-1: config 0 descriptor?? [ 88.965575][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.985154][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.993738][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.012180][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.027797][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.038911][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.049174][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.063616][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.075903][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.097807][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.118714][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.168184][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.179690][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.200085][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.213558][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.246779][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.274469][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.305536][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.324619][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.355695][ T5345] loop1: detected capacity change from 0 to 2048 [ 89.441042][ T5350] loop0: detected capacity change from 0 to 16 [ 89.549647][ T5350] erofs: (device loop0): mounted with root inode @ nid 36. [ 89.836718][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.849079][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.908374][ T5345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.921155][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.965557][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.977249][ T5345] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.022792][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.083794][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.123330][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.133626][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.144896][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.162993][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.183959][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.211513][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.225578][ T5345] loop1: detected capacity change from 2048 to 64 [ 90.232204][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.243094][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.267539][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.302168][ T5345] syz.1.2: attempt to access beyond end of device [ 90.302168][ T5345] loop1: rw=2049, sector=1408, nr_sectors = 136 limit=64 [ 90.316341][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.339886][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.352506][ T5345] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 176) [ 90.371410][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.384904][ T5345] Buffer I/O error on device loop1, logical block 176 [ 90.402248][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.409734][ T5345] Buffer I/O error on device loop1, logical block 177 [ 90.414839][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.434190][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.439448][ T5345] Buffer I/O error on device loop1, logical block 178 [ 90.462512][ T5345] Buffer I/O error on device loop1, logical block 179 [ 90.468833][ T5242] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.476754][ T5345] Buffer I/O error on device loop1, logical block 180 [ 90.485247][ T5242] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.494679][ T5345] Buffer I/O error on device loop1, logical block 181 [ 90.494714][ T5345] Buffer I/O error on device loop1, logical block 182 [ 90.494740][ T5345] Buffer I/O error on device loop1, logical block 183 [ 90.494852][ T5345] Buffer I/O error on device loop1, logical block 184 [ 90.494879][ T5345] Buffer I/O error on device loop1, logical block 185 [ 90.560697][ T5242] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.571225][ T5299] usb 2-1: USB disconnect, device number 2 [ 90.582053][ T5242] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.654466][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.669320][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.679388][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.690471][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.701334][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.712189][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.722486][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.733024][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.743925][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.756204][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.768723][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.834205][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.846747][ T5234] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.860951][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.866786][ T5234] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.887117][ T5342] udevd[5342]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.890571][ T5234] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.924059][ T5360] delete_channel: no stack [ 90.936071][ T5234] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.960136][ T5237] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.974601][ T5237] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.984176][ T5237] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.995191][ T5237] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.332295][ T5240] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.350993][ T2906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.382857][ T2906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.396200][ T5351] kmmpd-loop1: attempt to access beyond end of device [ 91.396200][ T5351] loop1: rw=14337, sector=512, nr_sectors = 8 limit=64 [ 91.433533][ T5351] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 91.469185][ T46] cfg80211: failed to load regulatory.db [ 91.590366][ T2906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.631327][ T2906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.724025][ T29] audit: type=1326 audit(1721926859.968:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5370 comm="syz.0.13" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0f3575f19 code=0x0 [ 91.794025][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.804343][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.862965][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.879720][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.897405][ T5240] syz-executor (5240) used greatest stack depth: 19152 bytes left [ 91.995649][ T3075] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 92.073132][ T2906] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.104473][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.117801][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.141926][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.165166][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.225867][ T3075] usb 6-1: Using ep0 maxpacket: 16 [ 92.242728][ T3075] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 92.267409][ T2906] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.288207][ T3075] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 92.301654][ T3075] usb 6-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 92.311439][ T3075] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.342101][ T3075] usb 6-1: config 0 descriptor?? [ 92.484505][ T2906] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.599985][ T5369] loop5: detected capacity change from 0 to 128 [ 92.617677][ T5375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.706301][ T5377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.791660][ T2906] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.175004][ T5387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.222907][ T5385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.237579][ T5387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.262539][ T25] IPVS: starting estimator thread 0... [ 93.283989][ T3075] hid (null): bogus close delimiter [ 93.318781][ T3075] hid (null): usage index exceeded [ 93.389854][ T5389] IPVS: using max 16 ests per chain, 38400 per kthread [ 93.436752][ T3075] hid-generic 0003:0158:0100.0001: unknown main item tag 0x0 [ 93.446714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.488384][ T5369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.521478][ T3075] hid-generic 0003:0158:0100.0001: unknown main item tag 0x0 [ 93.546364][ T5369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.557676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.563818][ T3075] hid-generic 0003:0158:0100.0001: bogus close delimiter [ 93.593554][ T3075] hid-generic 0003:0158:0100.0001: item 0 0 2 10 parsing failed [ 93.638454][ T3075] hid-generic 0003:0158:0100.0001: probe with driver hid-generic failed with error -22 [ 93.652518][ T5393] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.713545][ T5246] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 93.759982][ T5369] loop5: detected capacity change from 0 to 512 [ 93.775299][ T5369] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 93.793826][ T2906] bridge_slave_1: left allmulticast mode [ 93.795825][ T5369] EXT4-fs (loop5): invalid journal inode [ 93.834887][ T2906] bridge_slave_1: left promiscuous mode [ 93.860980][ T2906] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.873386][ T5369] EXT4-fs (loop5): can't get journal size [ 93.907138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 94.011900][ T2906] bridge_slave_0: left allmulticast mode [ 94.060050][ T5369] EXT4-fs (loop5): 1 truncate cleaned up [ 94.098013][ T2906] bridge_slave_0: left promiscuous mode [ 94.114572][ T5254] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.125776][ T5369] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.151913][ T2906] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.161395][ T5254] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.170312][ T5254] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.200194][ T5254] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.211477][ T5254] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 94.219568][ T5254] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.328787][ T46] usb 6-1: USB disconnect, device number 2 [ 94.757205][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.907259][ T5411] loop4: detected capacity change from 0 to 64 [ 95.017251][ T5233] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.094205][ T5414] loop2: detected capacity change from 0 to 512 [ 95.102619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #340!!! [ 95.246692][ T5414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.330591][ T5414] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.497917][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.563521][ T2906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.591815][ T2906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.638376][ T2906] bond0 (unregistering): Released all slaves [ 95.706495][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 95.744965][ T25] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 95.753755][ T5393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 95.793725][ T25] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 95.822978][ T25] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 95.848880][ T25] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 95.865708][ T5422] IPv6: Can't replace route, no match found [ 95.917064][ T5420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.921756][ T25] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.929057][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.944316][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.953655][ T25] usb 4-1: Product: syz [ 95.963388][ T25] usb 4-1: Manufacturer: syz [ 95.973129][ T25] usb 4-1: SerialNumber: syz [ 96.006173][ T5429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.169989][ T5234] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.268257][ T5254] Bluetooth: hci3: command tx timeout [ 96.554740][ T5425] netlink: 12 bytes leftover after parsing attributes in process `syz.5.27'. [ 96.707306][ T5428] bridge_slave_1: left allmulticast mode [ 96.766860][ T5428] bridge_slave_1: left promiscuous mode [ 96.815181][ T5428] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.994314][ T5443] dvmrp0: entered allmulticast mode [ 97.092992][ T5452] loop2: detected capacity change from 0 to 16 [ 97.212919][ T5452] erofs: (device loop2): mounted with root inode @ nid 36. [ 97.580174][ T25] usb 4-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 97.645977][ T25] usb 4-1: found format II with max.bitrate = 0, frame size=0 [ 97.710449][ T25] usb 4-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 97.784100][ T25] usb 4-1: found format II with max.bitrate = 0, frame size=0 [ 97.922559][ T25] usb 4-1: failed to enable PITCH for EP 0x82 [ 97.936488][ T5447] loop4: detected capacity change from 0 to 4096 [ 97.947448][ T25] usb 4-1: 2:1: cannot set freq 16318258 to ep 0x82 [ 98.041782][ T5447] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 98.106522][ T5447] ntfs3: loop4: ino=3, ntfs_set_state failed, -22. [ 98.136658][ T25] usb 4-1: USB disconnect, device number 2 [ 98.159945][ T5462] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.219431][ T5447] ntfs3: loop4: Failed to load $MFT (-22). [ 98.255880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 98.299379][ T5447] ntfs3: loop4: ino=3, ntfs3_write_inode failed, -22. [ 98.345752][ T5254] Bluetooth: hci3: command tx timeout [ 98.443654][ T5254] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 98.671918][ T5354] udevd[5354]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.730450][ T5462] bridge0: entered promiscuous mode [ 98.800180][ T5462] bridge0: left promiscuous mode [ 99.685456][ T5478] loop4: detected capacity change from 0 to 8 [ 100.199065][ T2906] hsr_slave_0: left promiscuous mode [ 100.285630][ T2906] hsr_slave_1: left promiscuous mode [ 100.359559][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.384818][ T5481] loop0: detected capacity change from 0 to 4096 [ 100.397099][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.429017][ T5254] Bluetooth: hci3: command tx timeout [ 100.456207][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.475202][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.612638][ T5490] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.662533][ T2906] veth1_macvtap: left promiscuous mode [ 100.695831][ T2906] veth0_macvtap: left promiscuous mode [ 100.725206][ T2906] veth1_vlan: left promiscuous mode [ 100.731735][ T2906] veth0_vlan: left promiscuous mode [ 100.781867][ T5481] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 100.833067][ T5481] Remounting filesystem read-only [ 100.842327][ T5486] loop5: detected capacity change from 0 to 8192 [ 100.878092][ T5494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.898244][ T5486] ======================================================= [ 100.898244][ T5486] WARNING: The mand mount option has been deprecated and [ 100.898244][ T5486] and is ignored by this kernel. Remove the mand [ 100.898244][ T5486] option from the mount to silence this warning. [ 100.898244][ T5486] ======================================================= [ 101.030956][ T5486] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.183903][ T5502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.500238][ T5254] Bluetooth: hci3: command tx timeout [ 102.759060][ T5522] loop5: detected capacity change from 0 to 8 [ 103.182642][ T5521] Cannot find add_set index 0 as target [ 103.738129][ T2906] team0 (unregistering): Port device team_slave_1 removed [ 103.854979][ T2906] team0 (unregistering): Port device team_slave_0 removed [ 104.686078][ T5534] loop4: detected capacity change from 0 to 32768 [ 104.801634][ T5479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 104.872638][ T5495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.46'. [ 104.897978][ T5499] bridge_slave_1: left allmulticast mode [ 104.903765][ T5499] bridge_slave_1: left promiscuous mode [ 104.928037][ T5499] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.939427][ T5536] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 104.939427][ T5536] [ 104.970993][ T5536] ERROR: (device loop4): remounting filesystem as read-only [ 104.996149][ T5532] netlink: 'syz.0.59': attribute type 3 has an invalid length. [ 105.004210][ T5536] ialloc: diAlloc returned -5! [ 105.235056][ T5541] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 105.516602][ T5545] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 106.135195][ T5395] chnl_net:caif_netlink_parms(): no params data found [ 106.355094][ T5562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.73'. [ 107.170838][ T5583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.251299][ T5395] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.264143][ T5395] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.279608][ T5395] bridge_slave_0: entered allmulticast mode [ 107.294281][ T5395] bridge_slave_0: entered promiscuous mode [ 107.379877][ T5585] hub 6-0:1.0: USB hub found [ 107.388355][ T5585] hub 6-0:1.0: 1 port detected [ 107.937754][ T5395] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.101662][ T5395] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.209731][ T5395] bridge_slave_1: entered allmulticast mode [ 108.265290][ T5395] bridge_slave_1: entered promiscuous mode [ 108.337571][ T5590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.579109][ T5586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.76'. [ 108.696094][ T5246] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.783052][ T5246] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.792974][ T5246] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.873095][ T5246] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.886927][ T5246] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 108.894628][ T5246] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.960712][ T5589] bridge_slave_1: left allmulticast mode [ 109.018227][ T5589] bridge_slave_1: left promiscuous mode [ 109.036491][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.068291][ T5600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 109.182439][ T5395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.363817][ T2906] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.579501][ T5395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.747655][ T2906] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.961409][ T5612] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 109.970032][ T5614] delete_channel: no stack [ 110.087854][ T5593] loop0: detected capacity change from 0 to 32768 [ 110.112508][ T2906] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.183862][ T5593] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 110.183862][ T5593] [ 110.203387][ T5593] ERROR: (device loop0): remounting filesystem as read-only [ 110.225119][ T5593] ialloc: diAlloc returned -5! [ 110.234059][ T5395] team0: Port device team_slave_0 added [ 110.265073][ T5395] team0: Port device team_slave_1 added [ 110.537574][ T2906] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.636761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.800423][ T5621] loop2: detected capacity change from 0 to 8192 [ 110.897330][ T5621] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.979389][ T5246] Bluetooth: hci0: command tx timeout [ 111.485526][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 111.695703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 112.525230][ T5632] sp0: Synchronizing with TNC [ 112.530351][ T5395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.736891][ T5627] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 112.791347][ T5395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.055836][ T5246] Bluetooth: hci0: command 0x041b tx timeout [ 113.894221][ T5395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.146871][ T5246] Bluetooth: hci0: command 0x041b tx timeout [ 119.407266][ T5395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.425786][ T5395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.520308][ T5395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.055900][ T5246] Bluetooth: hci0: command 0x041b tx timeout [ 121.247793][ T5395] hsr_slave_0: entered promiscuous mode [ 121.285934][ T5395] hsr_slave_1: entered promiscuous mode [ 121.428705][ T5673] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 121.717426][ T2906] bridge_slave_0: left allmulticast mode [ 121.743900][ T2906] bridge_slave_0: left promiscuous mode [ 121.763668][ T2906] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.754296][ T5672] loop0: detected capacity change from 0 to 32768 [ 122.948694][ T5672] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 122.948694][ T5672] [ 122.989210][ T5672] ERROR: (device loop0): remounting filesystem as read-only [ 123.013212][ T5672] ialloc: diAlloc returned -5! [ 123.073190][ T5698] loop3: detected capacity change from 0 to 64 [ 123.136564][ T5246] Bluetooth: hci0: command 0x041b tx timeout [ 123.329959][ T2906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.368134][ T2906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.398642][ T2906] bond0 (unregistering): Released all slaves [ 124.112740][ T5703] loop4: detected capacity change from 0 to 64 [ 125.121887][ T5721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'. [ 125.342346][ T5721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.111'. [ 125.726532][ T5596] chnl_net:caif_netlink_parms(): no params data found [ 125.835135][ T2906] hsr_slave_0: left promiscuous mode [ 125.863712][ T5733] loop4: detected capacity change from 0 to 512 [ 125.873975][ T2906] hsr_slave_1: left promiscuous mode [ 125.887184][ T5733] EXT4-fs: Ignoring removed nobh option [ 125.932478][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.947729][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.969995][ T5733] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 126.001095][ T5733] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 126.022374][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.041946][ T5733] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.113: casefold flag without casefold feature [ 126.072278][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.121504][ T5733] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.113: couldn't read orphan inode 13 (err -117) [ 126.193136][ T5733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.194716][ T2906] veth1_macvtap: left promiscuous mode [ 126.212157][ T2906] veth0_macvtap: left promiscuous mode [ 126.222916][ T2906] veth1_vlan: left promiscuous mode [ 126.234412][ T2906] veth0_vlan: left promiscuous mode [ 126.339887][ T5733] EXT4-fs error (device loop4): __ext4_remount:6491: comm syz.4.113: Abort forced by user [ 126.365952][ T5733] EXT4-fs (loop4): Remounting filesystem read-only [ 126.378603][ T5733] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 127.035476][ T5755] loop2: detected capacity change from 0 to 64 [ 127.607201][ T2906] team0 (unregistering): Port device team_slave_1 removed [ 127.760574][ T2906] team0 (unregistering): Port device team_slave_0 removed [ 127.762467][ T5758] loop0: detected capacity change from 0 to 512 [ 127.803627][ T5758] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 127.826562][ T5758] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0002] [ 127.850229][ T5758] System zones: 1-12 [ 127.854742][ T5758] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 127.864801][ T5758] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 127.892301][ T5758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 127.921940][ T5758] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 3: comm syz.0.119: lblock 0 mapped to illegal pblock 3 (length 1) [ 127.953950][ T5758] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.119: error -117 reading directory block [ 127.970266][ T5758] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 3: comm syz.0.119: lblock 0 mapped to illegal pblock 3 (length 1) [ 127.989569][ T5758] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.119: error -117 reading directory block [ 128.038901][ T5238] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.524667][ T5721] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.534157][ T5721] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.543086][ T5721] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.552483][ T5721] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.645891][ T5733] netlink: 'syz.4.113': attribute type 1 has an invalid length. [ 128.664113][ T5763] warning: `syz.0.121' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.759418][ T5237] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.122987][ T5776] loop2: detected capacity change from 0 to 64 [ 129.216247][ T5299] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 129.445622][ T5299] usb 5-1: Using ep0 maxpacket: 16 [ 129.464639][ T5299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.502215][ T5299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.525502][ T5299] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 129.568273][ T5299] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 129.595609][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.615923][ T5300] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 129.658883][ T5299] usb 5-1: config 0 descriptor?? [ 129.815955][ T5300] usb 1-1: Using ep0 maxpacket: 8 [ 129.829499][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.837250][ T5300] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 129.837297][ T5300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.837363][ T5300] usb 1-1: Product: syz [ 129.837387][ T5300] usb 1-1: Manufacturer: syz [ 129.837411][ T5300] usb 1-1: SerialNumber: syz [ 129.842465][ T5300] usb 1-1: config 0 descriptor?? [ 129.874731][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.890450][ T5596] bridge_slave_0: entered allmulticast mode [ 129.904447][ T5596] bridge_slave_0: entered promiscuous mode [ 130.109257][ T5299] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 130.139667][ T5299] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 130.169665][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.178007][ T5299] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 130.185329][ T5299] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 130.197167][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.205694][ T5300] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 130.228754][ T5299] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 130.242532][ T5299] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 130.242902][ T5596] bridge_slave_1: entered allmulticast mode [ 130.258011][ T5299] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 130.266072][ T5596] bridge_slave_1: entered promiscuous mode [ 130.278779][ T5299] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 130.287805][ T5299] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 130.295254][ T5299] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 130.330419][ T5788] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 130.399960][ T5299] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0002/input/input5 [ 130.607803][ T5299] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 130.686688][ T5299] usb 5-1: USB disconnect, device number 2 [ 130.705002][ T5796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.133'. [ 130.808772][ T5796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'. [ 130.988132][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.031121][ T5300] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 131.052792][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.078029][ T5300] usb 1-1: USB disconnect, device number 2 [ 131.418711][ T5596] team0: Port device team_slave_0 added [ 131.549627][ T5596] team0: Port device team_slave_1 added [ 131.806454][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.826782][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.917101][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.965728][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.987129][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.053347][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.158241][ T5395] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 132.471313][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.484245][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.766260][ T5395] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 134.207267][ T5395] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 134.411602][ T5395] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 134.446170][ T5343] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 134.723978][ T5596] hsr_slave_0: entered promiscuous mode [ 134.765690][ T5343] usb 4-1: Using ep0 maxpacket: 16 [ 134.784391][ T5343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.785080][ T5596] hsr_slave_1: entered promiscuous mode [ 134.816661][ T5343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.843612][ T5596] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.845840][ T5343] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 134.862550][ T5596] Cannot create hsr debugfs directory [ 134.905238][ T5343] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 134.929493][ T5343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.998540][ T5343] usb 4-1: config 0 descriptor?? [ 135.283351][ T5854] loop0: detected capacity change from 0 to 128 [ 135.462507][ T5343] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 135.480142][ T5343] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 135.497548][ T5343] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 135.523525][ T5343] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 135.562921][ T5343] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 135.585878][ T5343] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 135.607291][ T5343] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 135.649165][ T5343] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 135.699655][ T5343] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 135.726867][ T5343] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 135.817880][ T5343] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0003/input/input6 [ 135.959629][ T5343] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 135.966478][ T5395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.015692][ T5343] usb 4-1: USB disconnect, device number 3 [ 136.227782][ T5395] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.323116][ T5426] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.330427][ T5426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.439261][ T5426] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.446633][ T5426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.851872][ T5395] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.921300][ T5596] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 136.980855][ T5596] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 137.062355][ T5596] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 137.095057][ T5596] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 137.145709][ T5299] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 137.395663][ T5299] usb 3-1: Using ep0 maxpacket: 16 [ 137.533027][ T5299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.548306][ T5299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.623006][ T5299] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 137.679591][ T5299] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 137.707248][ T5299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.822168][ T5299] usb 3-1: config 0 descriptor?? [ 138.290454][ T5299] microsoft 0003:045E:07DA.0004: unknown main item tag 0x3 [ 138.327180][ T5299] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 138.369481][ T5899] loop4: detected capacity change from 0 to 128 [ 138.389144][ T5299] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 138.445232][ T5299] microsoft 0003:045E:07DA.0004: no inputs found [ 138.483564][ T5299] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 138.576800][ T5299] usb 3-1: USB disconnect, device number 2 [ 138.630981][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.782150][ T5395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.836049][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.892407][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.899739][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.987463][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.996114][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.091309][ T5910] loop4: detected capacity change from 0 to 1024 [ 139.227790][ T5910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.403555][ T29] audit: type=1800 audit(1721927594.635:3): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.166" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 139.584229][ T5395] veth0_vlan: entered promiscuous mode [ 139.625591][ T46] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 139.667460][ T1114] Trying to write to read-only block-device loop4 [ 139.678285][ T5237] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.761689][ T5395] veth1_vlan: entered promiscuous mode [ 139.845894][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 139.891556][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.929516][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.957772][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 139.993773][ T46] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 139.999462][ T5395] veth0_macvtap: entered promiscuous mode [ 140.022280][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.073457][ T5395] veth1_macvtap: entered promiscuous mode [ 140.108267][ T46] usb 4-1: config 0 descriptor?? [ 140.204339][ T5395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.256865][ T5395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.306802][ T5395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.345476][ T5395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.392638][ T5395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.445761][ T5395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.471943][ T5395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.483674][ T5395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.566042][ T5395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.610309][ T5395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.619197][ T46] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 140.649414][ T5395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.680634][ T46] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 140.680687][ T5395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.712140][ T46] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 140.713542][ T5395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.750343][ T46] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 140.754053][ T5395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.777200][ T46] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 140.784553][ T46] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 140.787497][ T5395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.808153][ T5941] loop4: detected capacity change from 0 to 64 [ 140.844451][ T46] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 140.850888][ T5395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.872635][ T46] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 140.921211][ T46] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 140.927570][ T5395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.984099][ T46] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 141.004729][ T5941] loop4: detected capacity change from 0 to 256 [ 141.007160][ T5395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.099177][ T46] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0005/input/input8 [ 141.199430][ T5395] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.251857][ T5395] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.273714][ T46] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 141.294618][ T5395] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.338034][ T5395] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.360353][ T46] usb 4-1: USB disconnect, device number 4 [ 141.645321][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.696422][ T5955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.174'. [ 142.918084][ T3003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.945587][ T5952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.174'. [ 143.005447][ T3003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.046439][ T5955] Zero length message leads to an empty skb [ 143.056160][ T5965] mmap: syz.0.175 (5965) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 143.383889][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.424527][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.665910][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 144.240023][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 144.266579][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.325817][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.374512][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 144.831597][ T25] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 145.029088][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.082866][ T25] usb 4-1: config 0 descriptor?? [ 145.360427][ T5990] netlink: 32 bytes leftover after parsing attributes in process `syz.4.181'. [ 145.629321][ T5596] veth0_vlan: entered promiscuous mode [ 145.637733][ T25] microsoft 0003:045E:07DA.0006: unknown main item tag 0x3 [ 145.682111][ T25] microsoft 0003:045E:07DA.0006: No inputs registered, leaving [ 145.700946][ T5996] loop0: detected capacity change from 0 to 64 [ 145.746082][ T25] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 145.746458][ T5596] veth1_vlan: entered promiscuous mode [ 145.800648][ T25] microsoft 0003:045E:07DA.0006: no inputs found [ 145.835523][ T25] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 145.923784][ T5246] Bluetooth: hci3: unexpected event 0x04 length: 14 > 10 [ 145.928608][ T5996] capability: warning: `syz.0.183' uses deprecated v2 capabilities in a way that may be insecure [ 145.934714][ T25] usb 4-1: USB disconnect, device number 5 [ 146.653018][ T5596] veth0_macvtap: entered promiscuous mode [ 146.724056][ T5596] veth1_macvtap: entered promiscuous mode [ 146.857722][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.922519][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.964052][ T6010] loop1: detected capacity change from 0 to 512 [ 146.997407][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.051791][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.102418][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.133920][ T6010] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.186: attempt to clear invalid blocks 1 len 1 [ 147.155502][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.225600][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.261783][ T6010] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.186: bg 0: block 343: padding at end of block bitmap is not set [ 147.290461][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.386391][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.513877][ T6010] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 147.712352][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.857034][ T6010] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.186: invalid indirect mapped block 1819239214 (level 0) [ 148.077258][ T5246] Bluetooth: hci3: command tx timeout [ 148.159296][ T6023] loop3: detected capacity change from 0 to 128 [ 148.170298][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.330128][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.375722][ T6010] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.186: invalid indirect mapped block 1819239214 (level 1) [ 148.409059][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.475632][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.476398][ T6010] EXT4-fs (loop1): 1 truncate cleaned up [ 148.499094][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.509209][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.519908][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.531743][ T6010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.548195][ T6028] loop4: detected capacity change from 0 to 128 [ 148.569863][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.610975][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.651496][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.680969][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.715308][ T6010] Bluetooth: MGMT ver 1.23 [ 148.751010][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.841772][ T5596] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.947149][ T5596] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.015848][ T5596] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.050352][ T5596] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.104507][ T5395] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.124414][ T6040] netlink: 40 bytes leftover after parsing attributes in process `syz.3.193'. [ 149.295271][ T6043] loop0: detected capacity change from 0 to 2048 [ 149.516142][ T6052] netlink: 16 bytes leftover after parsing attributes in process `syz.4.198'. [ 149.533340][ T6043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.626967][ T2945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.646376][ T6043] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.676279][ T2945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.766135][ T6043] fs-verity (loop0, inode 13): Unknown hash algorithm number: 0 [ 149.890773][ T6062] loop2: detected capacity change from 0 to 164 [ 149.904553][ T6058] loop3: detected capacity change from 0 to 64 [ 149.913521][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.953745][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.959280][ T6062] Unable to read rock-ridge attributes [ 150.003999][ T6060] netlink: 'syz.4.200': attribute type 5 has an invalid length. [ 150.126843][ T5238] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.147871][ T6062] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 150.393407][ T6069] loop0: detected capacity change from 0 to 8 [ 150.491813][ T6069] SQUASHFS error: zlib decompression failed, data probably corrupt [ 150.562454][ T6069] SQUASHFS error: Failed to read block 0x9b: -5 [ 150.636438][ T6069] SQUASHFS error: Unable to read metadata cache entry [99] [ 150.643730][ T6069] SQUASHFS error: Unable to read inode 0x127 [ 150.715183][ T6078] loop2: detected capacity change from 0 to 512 [ 150.730209][ T6076] loop5: detected capacity change from 0 to 1024 [ 150.829652][ T6078] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.205: attempt to clear invalid blocks 1 len 1 [ 150.935069][ T6076] hfsplus: failed to load root directory [ 150.956236][ T6078] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.205: bg 0: block 343: padding at end of block bitmap is not set [ 150.983909][ T6078] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 151.025106][ T6078] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.205: invalid indirect mapped block 1819239214 (level 0) [ 151.156456][ T6078] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.205: invalid indirect mapped block 1819239214 (level 1) [ 151.260203][ T6078] EXT4-fs (loop2): 1 truncate cleaned up [ 151.287476][ T6078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.296257][ T6093] netlink: 40 bytes leftover after parsing attributes in process `syz.0.210'. [ 152.368071][ T6101] netlink: 16 bytes leftover after parsing attributes in process `syz.3.212'. [ 152.494285][ T5234] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.653104][ T6111] netlink: 20 bytes leftover after parsing attributes in process `syz.5.215'. [ 152.726048][ T6111] ubi0: attaching mtd0 [ 152.788307][ T6111] ubi0: scanning is finished [ 152.817183][ T6111] ubi0: empty MTD device detected [ 152.941366][ T6106] loop0: detected capacity change from 0 to 64 [ 152.965499][ T6120] netlink: 'syz.2.216': attribute type 5 has an invalid length. [ 153.131709][ T6111] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 153.177162][ T6111] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 153.255110][ T6111] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 153.307103][ T6111] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 153.314661][ T6111] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 153.422720][ T6111] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 153.424881][ T6131] loop2: detected capacity change from 0 to 164 [ 153.466373][ T6111] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 535207413 [ 153.497760][ T6132] veth0_vlan: entered allmulticast mode [ 153.818638][ T6111] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 154.123725][ T6125] ubi0: background thread "ubi_bgt0d" started, PID 6125 [ 154.338187][ T6131] Unable to read rock-ridge attributes [ 154.405681][ T6131] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 154.628301][ T6140] veth0_vlan: left promiscuous mode [ 154.634884][ T6140] veth0_vlan: entered promiscuous mode [ 155.344239][ T6164] loop1: detected capacity change from 0 to 512 [ 155.536308][ T6164] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.229: attempt to clear invalid blocks 1 len 1 [ 155.594855][ T6164] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.229: bg 0: block 343: padding at end of block bitmap is not set [ 155.735539][ T6164] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 155.762360][ T6164] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.229: invalid indirect mapped block 1819239214 (level 0) [ 155.798435][ T6164] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.229: invalid indirect mapped block 1819239214 (level 1) [ 155.892977][ T6164] EXT4-fs (loop1): 1 truncate cleaned up [ 156.141772][ T6164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.397360][ T5395] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.415889][ T6191] loop5: detected capacity change from 0 to 4096 [ 157.794296][ T6158] loop4: detected capacity change from 0 to 32768 [ 158.052716][ T6216] loop2: detected capacity change from 0 to 512 [ 158.097368][ T6216] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.169309][ T6191] tmpfs: Unknown parameter 'usrquotaj²:ò›iA†dæâCçEþ.0˜^¡' [ 158.204634][ T6216] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #12: comm syz.2.244: corrupted in-inode xattr: invalid ea_ino [ 158.261764][ T6216] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.244: couldn't read orphan inode 12 (err -117) [ 158.277498][ C0] eth0: bad gso: type: 1, size: 1408 [ 158.326594][ T6216] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.536678][ T6230] netlink: 20 bytes leftover after parsing attributes in process `syz.1.249'. [ 158.563190][ T5234] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 158.722352][ T6230] ubi: mtd0 is already attached to ubi0 [ 160.233373][ T6248] virtio-fs: tag not found [ 161.304240][ T6261] loop1: detected capacity change from 0 to 128 [ 161.412920][ T5246] Bluetooth: hci1: SCO packet for unknown connection handle 1 [ 161.449501][ T6261] loop1: detected capacity change from 0 to 1024 [ 161.472954][ T6263] loop5: detected capacity change from 0 to 512 [ 161.522011][ T6261] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.608423][ T6261] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 161.615828][ T6242] loop2: detected capacity change from 0 to 64 [ 161.667807][ T6263] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.252: attempt to clear invalid blocks 1 len 1 [ 161.668117][ T6261] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 161.772813][ T6263] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.252: bg 0: block 343: padding at end of block bitmap is not set [ 161.811445][ T6261] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz.1.257: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 161.857854][ T6263] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 161.873458][ T6261] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.257: couldn't read orphan inode 11 (err -117) [ 161.996074][ T6263] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.252: invalid indirect mapped block 1819239214 (level 0) [ 162.185484][ T6261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.202008][ T6263] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.252: invalid indirect mapped block 1819239214 (level 1) [ 162.330525][ T6276] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 162.457058][ T6263] EXT4-fs (loop5): 1 truncate cleaned up [ 162.557580][ T6263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.187466][ T6261] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.257: Invalid block bitmap block 0 in block_group 0 [ 163.254658][ T6261] Quota error (device loop1): write_blk: dquota write failed [ 163.322546][ T6261] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 163.449351][ T6261] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.257: Failed to acquire dquot type 0 [ 163.511665][ T5596] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.810082][ T5395] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.906197][ T6287] netlink: 'syz.0.265': attribute type 1 has an invalid length. [ 164.112083][ T6299] loop1: detected capacity change from 0 to 64 [ 164.421269][ T6304] loop3: detected capacity change from 0 to 1024 [ 164.737500][ T6304] input: syz0 as /devices/virtual/input/input10 [ 165.073339][ T6313] input: syz0 as /devices/virtual/input/input11 [ 165.826134][ T6326] loop1: detected capacity change from 0 to 512 [ 165.923195][ T6326] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.276: attempt to clear invalid blocks 1 len 1 [ 165.975403][ T6326] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.276: bg 0: block 343: padding at end of block bitmap is not set [ 166.039914][ T6326] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 166.129834][ T6326] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.276: invalid indirect mapped block 1819239214 (level 0) [ 166.232948][ T6295] loop4: detected capacity change from 0 to 32768 [ 166.411962][ T6326] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.276: invalid indirect mapped block 1819239214 (level 1) [ 166.487381][ T6326] EXT4-fs (loop1): 1 truncate cleaned up [ 167.198665][ T6326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.493270][ T6341] netlink: 'syz.0.280': attribute type 1 has an invalid length. [ 167.532351][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.280'. [ 167.981947][ T5246] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 167.992004][ T5246] Bluetooth: hci5: Injecting HCI hardware error event [ 168.002630][ T5246] Bluetooth: hci5: hardware error 0x00 [ 169.009732][ T29] audit: type=1326 audit(1721927623.655:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.2.281" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88e4575f19 code=0x0 [ 169.497173][ T5395] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.991161][ T6362] loop3: detected capacity change from 0 to 4096 [ 170.014160][ T6365] veth0_vlan: entered allmulticast mode [ 170.072073][ T6362] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 170.140029][ T6371] input: syz0 as /devices/virtual/input/input12 [ 170.149818][ T6364] loop4: detected capacity change from 0 to 4096 [ 170.458649][ T6372] veth0_vlan: left promiscuous mode [ 170.492043][ T6372] veth0_vlan: entered promiscuous mode [ 170.586762][ T6379] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 171.055817][ T5246] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 171.729175][ T6385] loop0: detected capacity change from 0 to 128 [ 171.757450][ T6387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.291'. [ 171.787919][ T6385] EXT4-fs: Ignoring removed nobh option [ 171.824412][ T6387] veth0_to_batadv: entered promiscuous mode [ 171.868043][ T6385] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 171.874190][ T6393] loop2: detected capacity change from 0 to 512 [ 171.889451][ T6387] veth0_to_batadv: entered allmulticast mode [ 171.915128][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.291'. [ 171.939474][ T6385] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 171.969363][ T29] audit: type=1326 audit(1721927627.215:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6391 comm="syz.4.294" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f558c575f19 code=0x0 [ 172.034491][ T6393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.047877][ T6393] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.062311][ T6397] veth0_to_batadv: left promiscuous mode [ 172.097871][ T6397] veth0_to_batadv: left allmulticast mode [ 172.410495][ T6402] loop5: detected capacity change from 0 to 64 [ 172.880907][ T6405] loop4: detected capacity change from 0 to 8 [ 175.848258][ T5234] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.879301][ T5238] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 175.994365][ T6411] syz.4.297[6411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.994567][ T6411] syz.4.297[6411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.174121][ T6419] input: syz0 as /devices/virtual/input/input13 [ 176.398734][ T5246] Bluetooth: hci3: unexpected event 0x04 length: 14 > 10 [ 179.498877][ T5254] Bluetooth: hci3: command tx timeout [ 179.945713][ T6429] netlink: 1 bytes leftover after parsing attributes in process `syz.5.304'. [ 180.158400][ T6447] use of bytesused == 0 is deprecated and will be removed in the future, [ 180.170448][ T6447] use the actual size instead. [ 180.325748][ T5244] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 181.313176][ T6449] loop1: detected capacity change from 0 to 4096 [ 182.727495][ T6449] tmpfs: Unknown parameter 'usrquotaj²:ò›iA†dæâCçEþ.0˜^¡' [ 183.056862][ T6481] syz_tun: entered promiscuous mode [ 183.090883][ T6481] syz_tun: left promiscuous mode [ 185.267040][ T5343] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 185.816143][ T6495] xt_TCPMSS: Only works on TCP SYN packets [ 185.832513][ T5343] usb 3-1: Using ep0 maxpacket: 8 [ 185.884632][ T5343] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 185.947603][ T5343] usb 3-1: config 179 has no interface number 0 [ 185.953982][ T5343] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 186.005845][ T5343] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 186.055590][ T5343] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 186.116000][ T5343] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 186.156177][ T5343] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 186.195686][ T5343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.276480][ T6507] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 186.433900][ T6527] syz_tun: entered promiscuous mode [ 186.867071][ T6527] syz_tun: left promiscuous mode [ 190.236165][ T5343] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input14 [ 190.306062][ T6525] loop0: detected capacity change from 0 to 4096 [ 190.544728][ T5299] usb 3-1: USB disconnect, device number 3 [ 190.544737][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 190.558919][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 190.663889][ T6535] overlayfs: failed to resolve '/perms cbytes qnum lspid lrpid uidoverlay': -2 [ 190.727600][ T5299] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 190.757110][ T6537] loop1: detected capacity change from 0 to 256 [ 190.836891][ T5298] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 191.105857][ T5298] usb 4-1: Using ep0 maxpacket: 8 [ 191.129838][ T5298] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.170683][ T5298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 191.224573][ T5298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 191.281986][ T5298] usb 4-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 191.294121][ T5298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.304905][ T5298] usb 4-1: Product: syz [ 191.309841][ T5298] usb 4-1: Manufacturer: syz [ 191.314472][ T5298] usb 4-1: SerialNumber: syz [ 191.322724][ T5298] usb 4-1: config 0 descriptor?? [ 191.585533][ T5298] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 191.619825][ T5298] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 191.650527][ T5298] usb 4-1: USB disconnect, device number 6 [ 191.914208][ T6561] xt_TCPMSS: Only works on TCP SYN packets [ 191.925476][ T5244] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 193.513557][ T5244] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.606229][ T5244] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.650267][ T5244] usb 6-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 193.665544][ T5244] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.679475][ T5244] usb 6-1: config 0 descriptor?? [ 194.136276][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.146411][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.173494][ T6582] loop2: detected capacity change from 0 to 256 [ 194.363400][ T6583] virtio-fs: tag not found [ 195.265594][ T6556] netlink: 44 bytes leftover after parsing attributes in process `syz.5.349'. [ 195.275026][ T6556] netlink: 12 bytes leftover after parsing attributes in process `syz.5.349'. [ 195.470000][ T5244] usbhid 6-1:0.0: can't add hid device: -71 [ 195.494865][ T5244] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 195.559993][ T5244] usb 6-1: USB disconnect, device number 4 [ 195.822448][ T5255] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 196.891968][ T5255] usb 4-1: Using ep0 maxpacket: 8 [ 196.914207][ T5255] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 196.954537][ T5255] usb 4-1: config 179 has no interface number 0 [ 196.986180][ T5255] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 197.042454][ T5255] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 197.087812][ T5255] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 197.131899][ T5255] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 197.167450][ T5255] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 197.183464][ T5255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.213948][ T6585] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 197.590151][ T5255] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input15 [ 197.718444][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'. [ 197.832838][ T5343] usb 4-1: USB disconnect, device number 7 [ 197.832912][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 197.847204][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 198.230466][ T6612] netlink: 160 bytes leftover after parsing attributes in process `syz.2.371'. [ 198.609988][ T6619] netlink: 165 bytes leftover after parsing attributes in process `syz.0.372'. [ 198.772910][ T5343] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 199.002946][ T6628] loop4: detected capacity change from 0 to 512 [ 199.252664][ T6628] EXT4-fs: Ignoring removed i_version option [ 199.693354][ T6628] EXT4-fs: Ignoring removed nobh option [ 200.301231][ T6628] ext4: Unknown parameter 'obj_role' [ 200.524737][ T6636] loop5: detected capacity change from 0 to 1024 [ 200.537094][ T6628] loop4: detected capacity change from 0 to 256 [ 200.585744][ T6628] vfat: Unknown parameter 'shortnamiolower' [ 200.606289][ T6636] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 200.645689][ T6636] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 200.926725][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 201.056218][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 201.056333][ T5257] Bluetooth: hci2: command 0x0406 tx timeout [ 201.062313][ T5243] Bluetooth: hci1: command 0x0406 tx timeout [ 201.177692][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.221744][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.265497][ T5298] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 201.293733][ T25] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 201.315947][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.337313][ T25] usb 3-1: config 0 descriptor?? [ 201.497078][ T5298] usb 6-1: Using ep0 maxpacket: 16 [ 201.529716][ T5298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 201.552912][ T5298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 201.563144][ T5298] usb 6-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 201.573013][ T5298] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.619284][ T5298] usb 6-1: config 0 descriptor?? [ 201.825251][ T6640] netlink: 44 bytes leftover after parsing attributes in process `syz.2.378'. [ 201.864528][ T6640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.378'. [ 201.872146][ T6634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.889078][ T6634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.005666][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 202.018795][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 202.078855][ T6634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.145622][ T25] usb 3-1: USB disconnect, device number 4 [ 202.224948][ T6634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.024796][ T6661] loop0: detected capacity change from 0 to 512 [ 203.177023][ T6661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.190034][ T6661] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 203.202185][ T5298] usbhid 6-1:0.0: can't add hid device: -71 [ 203.228328][ T5298] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 203.303538][ T5298] usb 6-1: USB disconnect, device number 5 [ 205.116795][ T6677] loop3: detected capacity change from 0 to 1024 [ 206.306223][ T6677] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 206.318640][ T6677] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 206.332711][ T6677] EXT4-fs (loop3): journal inode is deleted [ 206.636259][ T5238] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.479338][ T6683] ================================================================== [ 207.487477][ T6683] BUG: KASAN: slab-use-after-free in uprobe_mmap+0xb9a/0x11a0 [ 207.494964][ T6683] Read of size 8 at addr ffff888079f4a430 by task syz.5.390/6683 [ 207.502969][ T6683] [ 207.505336][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.5.390 Not tainted 6.10.0-syzkaller-12381-gc33ffdb70cc6 #0 [ 207.515691][ T6683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 207.525857][ T6683] Call Trace: [ 207.529590][ T6683] [ 207.532536][ T6683] dump_stack_lvl+0x241/0x360 [ 207.537252][ T6683] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.542482][ T6683] ? __pfx__printk+0x10/0x10 [ 207.547100][ T6683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.552771][ T6683] ? _printk+0xd5/0x120 [ 207.556951][ T6683] ? __virt_addr_valid+0x183/0x530 [ 207.562608][ T6683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.568361][ T6683] print_report+0x169/0x550 [ 207.572931][ T6683] ? __virt_addr_valid+0x183/0x530 [ 207.578161][ T6683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.584051][ T6683] ? __virt_addr_valid+0x45f/0x530 [ 207.589720][ T6683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.595497][ T6683] ? __phys_addr+0xba/0x170 [ 207.600039][ T6683] ? uprobe_mmap+0xb9a/0x11a0 [ 207.604925][ T6683] kasan_report+0x143/0x180 [ 207.609466][ T6683] ? uprobe_mmap+0xb9a/0x11a0 [ 207.614170][ T6683] uprobe_mmap+0xb9a/0x11a0 [ 207.618716][ T6683] ? __pfx_uprobe_mmap+0x10/0x10 [ 207.623707][ T6683] mmap_region+0x1891/0x2090 [ 207.628359][ T6683] ? mark_lock+0x9a/0x350 [ 207.632767][ T6683] ? __pfx_mmap_region+0x10/0x10 [ 207.637752][ T6683] ? mm_get_unmapped_area+0xa5/0xd0 [ 207.643016][ T6683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.648717][ T6683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.654404][ T6683] ? shmem_get_unmapped_area+0x2a7/0x8f0 [ 207.660439][ T6683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.666123][ T6683] ? cap_mmap_addr+0x163/0x2c0 [ 207.670937][ T6683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.676613][ T6683] ? __get_unmapped_area+0x2f0/0x360 [ 207.681948][ T6683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.687626][ T6683] do_mmap+0x8f9/0x1010 [ 207.691827][ T6683] ? __pfx_do_mmap+0x10/0x10 [ 207.696458][ T6683] ? __pfx_down_write_killable+0x10/0x10 [ 207.702121][ T6683] ? __pfx_ima_file_mmap+0x10/0x10 [ 207.707255][ T6683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.712929][ T6683] ? security_mmap_file+0x178/0x1a0 [ 207.718179][ T6683] vm_mmap_pgoff+0x1dd/0x3d0 [ 207.722846][ T6683] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 207.727993][ T6683] ? __fget_files+0x29/0x470 [ 207.732616][ T6683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.738295][ T6683] ? __fget_files+0x3f6/0x470 [ 207.743036][ T6683] ksys_mmap_pgoff+0x4f1/0x720 [ 207.747848][ T6683] ? __x64_sys_mmap+0x7f/0x140 [ 207.752653][ T6683] do_syscall_64+0xf3/0x230 [ 207.757190][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.763117][ T6683] RIP: 0033:0x7f1608d75f19 [ 207.767551][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.787189][ T6683] RSP: 002b:00007f1609b88048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 207.795644][ T6683] RAX: ffffffffffffffda RBX: 00007f1608f06038 RCX: 00007f1608d75f19 [ 207.803639][ T6683] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000000020000000 [ 207.811636][ T6683] RBP: 00007f1608de4e68 R08: 0000000000000003 R09: 0000000000000000 [ 207.819638][ T6683] R10: 0000000000010012 R11: 0000000000000246 R12: 0000000000000000 [ 207.827631][ T6683] R13: 000000000000006e R14: 00007f1608f06038 R15: 00007ffe26580a78 [ 207.835649][ T6683] [ 207.838682][ T6683] [ 207.841105][ T6683] Allocated by task 6619: [ 207.845447][ T6683] kasan_save_track+0x3f/0x80 [ 207.850176][ T6683] __kasan_kmalloc+0x98/0xb0 [ 207.854815][ T6683] __kmalloc_cache_noprof+0x19c/0x2c0 [ 207.860233][ T6683] ip_setup_cork+0x53f/0x8b0 [ 207.864861][ T6683] ip_append_data+0xff/0x190 [ 207.869481][ T6683] icmp_push_reply+0x97/0x410 [ 207.874222][ T6683] __icmp_send+0xf89/0x14e0 [ 207.878751][ T6683] ip_protocol_deliver_rcu+0x418/0x440 [ 207.884245][ T6683] ip_local_deliver_finish+0x341/0x5f0 [ 207.889751][ T6683] NF_HOOK+0x3a6/0x450 [ 207.893863][ T6683] NF_HOOK+0x3a6/0x450 [ 207.897996][ T6683] __netif_receive_skb+0x2bf/0x650 [ 207.903174][ T6683] process_backlog+0x662/0x15b0 [ 207.908052][ T6683] __napi_poll+0xcd/0x490 [ 207.912413][ T6683] net_rx_action+0x89b/0x1240 [ 207.917128][ T6683] handle_softirqs+0x2c6/0x970 [ 207.921931][ T6683] do_softirq+0x11b/0x1e0 [ 207.926333][ T6683] __local_bh_enable_ip+0x1bb/0x200 [ 207.931567][ T6683] __dev_queue_xmit+0x1763/0x3e90 [ 207.936642][ T6683] ip_finish_output2+0xd41/0x1390 [ 207.941701][ T6683] ip_push_pending_frames+0xbf/0x150 [ 207.947148][ T6683] raw_sendmsg+0x1ac5/0x2490 [ 207.951773][ T6683] __sock_sendmsg+0x1a6/0x270 [ 207.956467][ T6683] ____sys_sendmsg+0x525/0x7d0 [ 207.961253][ T6683] __sys_sendmmsg+0x3b2/0x740 [ 207.965950][ T6683] __x64_sys_sendmmsg+0xa0/0xb0 [ 207.970839][ T6683] do_syscall_64+0xf3/0x230 [ 207.975445][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.981613][ T6683] [ 207.983930][ T6683] Freed by task 6619: [ 207.987918][ T6683] kasan_save_track+0x3f/0x80 [ 207.992621][ T6683] kasan_save_free_info+0x40/0x50 [ 207.997743][ T6683] poison_slab_object+0xe0/0x150 [ 208.002780][ T6683] __kasan_slab_free+0x37/0x60 [ 208.007555][ T6683] kfree+0x149/0x360 [ 208.011451][ T6683] __ip_make_skb+0x158a/0x1eb0 [ 208.016221][ T6683] ip_push_pending_frames+0x30/0x150 [ 208.021603][ T6683] __icmp_send+0xf89/0x14e0 [ 208.026126][ T6683] ip_protocol_deliver_rcu+0x418/0x440 [ 208.031598][ T6683] ip_local_deliver_finish+0x341/0x5f0 [ 208.037069][ T6683] NF_HOOK+0x3a6/0x450 [ 208.041154][ T6683] NF_HOOK+0x3a6/0x450 [ 208.045232][ T6683] __netif_receive_skb+0x2bf/0x650 [ 208.050356][ T6683] process_backlog+0x662/0x15b0 [ 208.055224][ T6683] __napi_poll+0xcd/0x490 [ 208.059566][ T6683] net_rx_action+0x89b/0x1240 [ 208.064256][ T6683] handle_softirqs+0x2c6/0x970 [ 208.069037][ T6683] do_softirq+0x11b/0x1e0 [ 208.073390][ T6683] __local_bh_enable_ip+0x1bb/0x200 [ 208.078604][ T6683] __dev_queue_xmit+0x1763/0x3e90 [ 208.083644][ T6683] ip_finish_output2+0xd41/0x1390 [ 208.088762][ T6683] ip_push_pending_frames+0xbf/0x150 [ 208.094053][ T6683] raw_sendmsg+0x1ac5/0x2490 [ 208.098663][ T6683] __sock_sendmsg+0x1a6/0x270 [ 208.103348][ T6683] ____sys_sendmsg+0x525/0x7d0 [ 208.108137][ T6683] __sys_sendmmsg+0x3b2/0x740 [ 208.112850][ T6683] __x64_sys_sendmmsg+0xa0/0xb0 [ 208.117716][ T6683] do_syscall_64+0xf3/0x230 [ 208.122235][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.128144][ T6683] [ 208.130465][ T6683] The buggy address belongs to the object at ffff888079f4a400 [ 208.130465][ T6683] which belongs to the cache kmalloc-64 of size 64 [ 208.144348][ T6683] The buggy address is located 48 bytes inside of [ 208.144348][ T6683] freed 64-byte region [ffff888079f4a400, ffff888079f4a440) [ 208.158015][ T6683] [ 208.160350][ T6683] The buggy address belongs to the physical page: [ 208.166763][ T6683] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79f4a [ 208.175540][ T6683] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 208.183349][ T6683] page_type: 0xfdffffff(slab) [ 208.188037][ T6683] raw: 00fff00000000000 ffff8880154418c0 ffffea0000b3a480 dead000000000005 [ 208.196728][ T6683] raw: 0000000000000000 0000000000200020 00000001fdffffff 0000000000000000 [ 208.205410][ T6683] page dumped because: kasan: bad access detected [ 208.211915][ T6683] page_owner tracks the page as allocated [ 208.217626][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5237, tgid 5237 (syz-executor), ts 92406839922, free_ts 92314506184 [ 208.238488][ T6683] post_alloc_hook+0x1f3/0x230 [ 208.243278][ T6683] get_page_from_freelist+0x2e4c/0x2f10 [ 208.248930][ T6683] __alloc_pages_noprof+0x256/0x6c0 [ 208.254169][ T6683] alloc_slab_page+0x5f/0x120 [ 208.258961][ T6683] allocate_slab+0x5a/0x2f0 [ 208.263498][ T6683] ___slab_alloc+0xcd1/0x14b0 [ 208.268190][ T6683] __slab_alloc+0x58/0xa0 [ 208.272535][ T6683] __kmalloc_noprof+0x25a/0x400 [ 208.277397][ T6683] tomoyo_encode+0x26f/0x540 [ 208.282004][ T6683] tomoyo_realpath_from_path+0x59e/0x5e0 [ 208.287653][ T6683] tomoyo_check_open_permission+0x255/0x500 [ 208.293565][ T6683] security_file_open+0x6c/0x750 [ 208.298519][ T6683] do_dentry_open+0x38e/0x1440 [ 208.303285][ T6683] vfs_open+0x3e/0x330 [ 208.307396][ T6683] path_openat+0x2b3e/0x3470 [ 208.312286][ T6683] do_filp_open+0x235/0x490 [ 208.316800][ T6683] page last free pid 5228 tgid 5228 stack trace: [ 208.323136][ T6683] free_unref_page+0xd22/0xea0 [ 208.327939][ T6683] vfree+0x186/0x2e0 [ 208.331860][ T6683] kcov_close+0x2b/0x50 [ 208.336040][ T6683] __fput+0x24c/0x8a0 [ 208.340041][ T6683] task_work_run+0x251/0x310 [ 208.344640][ T6683] do_exit+0xa2f/0x27f0 [ 208.348801][ T6683] do_group_exit+0x207/0x2c0 [ 208.353402][ T6683] __x64_sys_exit_group+0x3f/0x40 [ 208.358429][ T6683] x64_sys_call+0x26c3/0x26d0 [ 208.363214][ T6683] do_syscall_64+0xf3/0x230 [ 208.367740][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.373657][ T6683] [ 208.375999][ T6683] Memory state around the buggy address: [ 208.381626][ T6683] ffff888079f4a300: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 208.389699][ T6683] ffff888079f4a380: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 208.397775][ T6683] >ffff888079f4a400: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 208.406714][ T6683] ^ [ 208.412459][ T6683] ffff888079f4a480: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 208.420622][ T6683] ffff888079f4a500: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 208.428698][ T6683] ================================================================== [ 208.465292][ T6683] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 208.472582][ T6683] CPU: 0 UID: 0 PID: 6683 Comm: syz.5.390 Not tainted 6.10.0-syzkaller-12381-gc33ffdb70cc6 #0 [ 208.482941][ T6683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 208.493058][ T6683] Call Trace: [ 208.496365][ T6683] [ 208.499309][ T6683] dump_stack_lvl+0x241/0x360 [ 208.504072][ T6683] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.509304][ T6683] ? __pfx__printk+0x10/0x10 [ 208.513929][ T6683] ? preempt_schedule+0xe1/0xf0 [ 208.518832][ T6683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.524512][ T6683] ? vscnprintf+0x5d/0x90 [ 208.528891][ T6683] panic+0x349/0x860 [ 208.532822][ T6683] ? check_panic_on_warn+0x21/0xb0 [ 208.538235][ T6683] ? __pfx_panic+0x10/0x10 [ 208.542678][ T6683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.548373][ T6683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.554050][ T6683] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 208.560066][ T6683] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 208.566421][ T6683] ? print_report+0x502/0x550 [ 208.571232][ T6683] check_panic_on_warn+0x86/0xb0 [ 208.576199][ T6683] ? uprobe_mmap+0xb9a/0x11a0 [ 208.580908][ T6683] end_report+0x77/0x160 [ 208.585278][ T6683] kasan_report+0x154/0x180 [ 208.589827][ T6683] ? uprobe_mmap+0xb9a/0x11a0 [ 208.594542][ T6683] uprobe_mmap+0xb9a/0x11a0 [ 208.599085][ T6683] ? __pfx_uprobe_mmap+0x10/0x10 [ 208.604062][ T6683] mmap_region+0x1891/0x2090 [ 208.608690][ T6683] ? mark_lock+0x9a/0x350 [ 208.613086][ T6683] ? __pfx_mmap_region+0x10/0x10 [ 208.618063][ T6683] ? mm_get_unmapped_area+0xa5/0xd0 [ 208.623297][ T6683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.628976][ T6683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.634651][ T6683] ? shmem_get_unmapped_area+0x2a7/0x8f0 [ 208.640326][ T6683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.645999][ T6683] ? cap_mmap_addr+0x163/0x2c0 [ 208.650809][ T6683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.656498][ T6683] ? __get_unmapped_area+0x2f0/0x360 [ 208.661850][ T6683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.667536][ T6683] do_mmap+0x8f9/0x1010 [ 208.671757][ T6683] ? __pfx_do_mmap+0x10/0x10 [ 208.676386][ T6683] ? __pfx_down_write_killable+0x10/0x10 [ 208.682057][ T6683] ? __pfx_ima_file_mmap+0x10/0x10 [ 208.687203][ T6683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.692882][ T6683] ? security_mmap_file+0x178/0x1a0 [ 208.698144][ T6683] vm_mmap_pgoff+0x1dd/0x3d0 [ 208.702841][ T6683] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 208.708084][ T6683] ? __fget_files+0x29/0x470 [ 208.712722][ T6683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.718394][ T6683] ? __fget_files+0x3f6/0x470 [ 208.723121][ T6683] ksys_mmap_pgoff+0x4f1/0x720 [ 208.727926][ T6683] ? __x64_sys_mmap+0x7f/0x140 [ 208.732737][ T6683] do_syscall_64+0xf3/0x230 [ 208.737277][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.743211][ T6683] RIP: 0033:0x7f1608d75f19 [ 208.747649][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.767286][ T6683] RSP: 002b:00007f1609b88048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 208.775726][ T6683] RAX: ffffffffffffffda RBX: 00007f1608f06038 RCX: 00007f1608d75f19 [ 208.783715][ T6683] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000000020000000 [ 208.791709][ T6683] RBP: 00007f1608de4e68 R08: 0000000000000003 R09: 0000000000000000 [ 208.799691][ T6683] R10: 0000000000010012 R11: 0000000000000246 R12: 0000000000000000 [ 208.807667][ T6683] R13: 000000000000006e R14: 00007f1608f06038 R15: 00007ffe26580a78 [ 208.815665][ T6683] [ 208.818979][ T6683] Kernel Offset: disabled [ 208.823306][ T6683] Rebooting in 86400 seconds..