last executing test programs: 24.211299822s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x5451, 0x0) 24.060840226s ago: executing program 0: syz_open_dev$hiddev(0x0, 0x0, 0xc100) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000000c0)) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r1, &(0x7f0000001a00)='r', 0x1) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x4020940d, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xc, 0xed, 0x97, 0x0, 0xa2c, 0x8, 0x5858, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb1, 0x76, 0x1c}}]}}]}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x2d) 22.111471775s ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) write$cgroup_pid(r2, &(0x7f0000000200), 0x12) 19.355511388s ago: executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 19.259529377s ago: executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = dup(r0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) 19.0830392s ago: executing program 2: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x5452, &(0x7f00000000c0)) 18.864710184s ago: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, 0x0, 0x5005) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) write$9p(r1, &(0x7f0000001400)="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", 0x600) sendfile(r1, r2, 0x0, 0xe065) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x208c40, 0x0) 17.550407511s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000009a000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='signal_generate\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 17.334195947s ago: executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x30000}, 0x0) 14.786983953s ago: executing program 2: r0 = openat$mice(0xffffff9c, &(0x7f0000000000), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 14.575661802s ago: executing program 2: syz_open_dev$hiddev(0x0, 0x0, 0xc100) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000000c0)) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000001a00)='r', 0x1) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x4020940d, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xc, 0xed, 0x97, 0x0, 0xa2c, 0x8, 0x5858, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb1, 0x76, 0x1c}}]}}]}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x2d) 12.621047943s ago: executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.982856783s ago: executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c5", 0x29}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 5.899308238s ago: executing program 4: r0 = fsopen(&(0x7f0000000300)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fstat(r1, &(0x7f0000000100)) 5.717677906s ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x1000, 0x40000001, &(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x80000000, @private2, 0x80}, 0x80) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r3, &(0x7f0000003680)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x241803, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x1, 0x9, 0x101}, 0x14}}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r5, &(0x7f0000000080)=""/75, 0x8e, 0x4000000000a2) 5.450296409s ago: executing program 5: syz_open_dev$hiddev(0x0, 0x0, 0xc100) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000000c0)) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r0, &(0x7f0000001a00)='r', 0x1) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x4020940d, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xc, 0xed, 0x97, 0x0, 0xa2c, 0x8, 0x5858, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb1, 0x76, 0x1c}}]}}]}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x2d) 4.729936861s ago: executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) recvmmsg(r4, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000340)=""/157, 0x9d}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000080), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x18) 4.45686843s ago: executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 4.333792823s ago: executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c500c500", 0x2c}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 4.152708835s ago: executing program 4: mlockall(0x1) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) chroot(0x0) syz_read_part_table(0x5bd, &(0x7f00000005c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) 3.624984547s ago: executing program 5: syz_open_dev$hiddev(0x0, 0x0, 0xc100) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000000c0)) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r0, &(0x7f0000001a00)='r', 0x1) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x4020940d, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xc, 0xed, 0x97, 0x0, 0xa2c, 0x8, 0x5858, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb1, 0x76, 0x1c}}]}}]}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x2d) 2.982038964s ago: executing program 5: bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000540)="0cc31a4098ddc80dadd3a0aa2bea9050d9f47bcde4cbb8170d3d61aabbdbd869e8a75ab95a3b8e8b960477dbbbbf5cb0fd4a98ea0032d054de676f19c5e1f84def57482d1b3eb94a2a1d3c0a733709610ece6cb54ae7f8c3ed385c3890244d348c9bcfb556ee478845ff23d8a9f2a492531e7c7ce719ef1983bdaf4008386323fc593be590321dbe51aa4ecabebf49ab7edb835efc0f722637337e20cc541399dc617deafa840b68f2b22e5f7c6afb3825871b966ab90a79a4d6d72f29a1e43abdf4d25f6352dfa26c576830c49b18ece887b47c37affa1c3f24fdb0e14151550796aaa09b4669e71d9f4255f63905467b709f7a7185347a078538e4443f0dad324393274e857979db0a9e3894857aacabc2f2ccd9457fda98a520e2b8c83085a206c8aea9dd18a0b66c87b3b61f95fafed84303436c7ae3782f714dc364c10102788b02d3aed05cb29fe974b75e7bf53dfd2554d7b700dcbf24a6fa021732b747a2c7d6d2a649e1ca523f91ba57da29e6e5050da7ec9466884aea64349e0c65b40bd78fe25622a5f854d351fd3282e85e37989b73e1a3b9fe874ad7131850117f285afe15040fd20cd9c861c95b2c1f9844ac1f8b3cd0a7f22269e235866434acb5f4d9d0b64301cd5b4e8c2da68caacd3f7dda0f325120ad99c05a55736067c87cceda7b850758e60ab8829b0dbfdc1ca8322e6716e643e00c2f665781461f08282a0aa366d9927036d685c3a721530dafe21e62906c5710c3214621d6374d9f5eef47eca1e5080e21832e6d639822a3bf99784f7b19e2dfaa7b8ba39dc5212c94585af38e7a50cbf6d619e3f1b8e4c17351203fa037ca4ce7ef32fd8b4387b8583ebd32a0c5aeb05fced1e492670cabc370aba18abe561e2bfcfa6d92c0c3d0419f5f4936772b6a0026a623914f09b04cf5d7c2b3ab010c676e9932f5807240a765b3d92d2bcdd63a91bd0f1c795fe0ecdda5e50ec8fd0a68115986168fb8bb67fa020ed3c416a716fb12d5d918b8522931dcf2bfd0c7bf7d9c56c490c9880309240d0c2cf1a3cafb647e1a9e1fde434cdbcae9eeac3f8c652a85d6aea69b3e9a922cb2727ed8f50e6babd152b96ca623be94c4aedf7e6848650026a7e1df48e00f45714233d9ae79f4e5e13ac220d553da26f7e7bd242d0cd26470bfb99fb84e6035bfb962368222ff72c5a8e34092cc0ecadf270882d604da1b59f09eeb28559b9fa6b91a13d5eb2084b77838ee4aaa241703b17a5e53d042879a15170a1273711989ba2b75c2a5deb21a028dbf9b1445e3ccc419ef5adc4de90be49251813b4fc886920f5ea0f6dc25f8adeabe7065fb3d6bda0aebf27d3593d541d4c101a7c2b04c2fef924f4afaccb0603f769ec075a2eea2394c61917a2fb1e13fccc32ab914321464c81b93ce9989477928c09ca498eeb0e6ef2a15d378976aaf9f069e4bf0cef9c1b81855c6f4e003ce3fdfeaba1e69821970fb5ff0a031368666229afc8f4b07b0addab6d492a6b351af1ec5ba1e78c263e0726ed3495941a28b9da32d56acfe40a32fe58f6e722f9bd647eb7cc74ba6fd4343b18956f40cc8ec68bcd7b231b9b979b8ac899dc27b44ac9a0a73fe2f12102bd6f731415aefc6d74c39f211b8e8b98980d7ffafeb3237bbcaacecc095a29c0a1f3e31824fdf23b953f46e38714615e5e531f531dac3c854c5d35c8e69be5d5c468f28d9b13c35a316ae232ddd3088ba4bc14e19263c4e7f847153633a0a850dbe4c45675e702310b83d20bfd865cda44c87389dc000ebef19b9027bc7de167130892c018e09b9b9cf264f7dc51a7ebd29bbd3e39511c9908be44330fe96f6cb202aae4c0a70bb8aa7daedc8f12e99c087f672c67a4aefd9905476ee4f1bce6f2a760d9823703c55b843d3c74b69652edcd7edeee7791fe5d7786d1745583dcd09596a661d18cada70da172e39ca7ff351ae5d5aa9ae786e0f27509b61113722c11dadb045a45a8d8caa50e44062ecbea4cadd127b1d109b2b2760e9f9760de696523c706fa4d1f0092ae1ab7af8d91f2d1eb0f62b3320b58662bf4e607ac9ebe9c04c4f2279aff0a96072024783d133476614df51e92a7f4e3bc526df588edc8b8d48e82f3d4661f3f68bdc1d657f48b29dfe6069eb30bf25fd20ed83f25528809a70438153526d2b6882890ed73cb6670cae24ae78c7291fcb63bb57cf05703a5f4fa82469d3cb374d948f5fed2946161af65ead4ae75a4b1c7cdb6b2b7afb52012623a8ba17b2044968a903b4e4ea02f90f96e09d98fcf15ddbc27732588f43af4f84589718268322693c1006105522cf4e4b69eb58aac52af881b1533b7a52424f8e9030149b080bb69ca211be12d995b054639754795346c9c9a7a3435e2d781436531da8ad3f597e0ce8391a3ccc25c0ae9f0b7a19db85f12d51773b1cd1b675a402f31f89715d14f00719f38198735d0eca672549fb1c5ea21557afa82a78a86ecf17c177b9404c7e0f99e20eb38a3c331b66f9100ddfb6207eba709e86e41f4e408da583b49435913499d83a5975cc4b074aa7174087f6eb476c33824690e65f61e41cddd742f941ece08a5031887975e473e9583d8bb1cf9ae5fae7925b8254cfd15a9f976cdc554139cfc7828a9ee62493a9316c06c53088192614732efa9e9f9956682341daa1dcf5ef824b1692e5962227a30ac75367d207d13180d01c58bb2576ff84b2f3eaaf4b14c271c508cad97f09a5ef7ffa06b87180e989e62ed4c49fec0dbd260d14320cd11f361b66fbaf73038025ac71c36525062396368bddc66ae5ebf3f3b42bf7d06a8cca2e111e527a612fb0c2f976013f3cb49f4624a3b224f4b1f34c019f0401165373078b238cdfb3ed9f192a46f41d807861effaacd8ec57023bee8b311958da9ebd37da4b8260432ce673e2960cfd85c2faa5c4eec4b63b5178b2893e6f19a07ae95a6f38498b636a189d69d8997bbc15dd7a71a8b32bd4dc4ec967ce35192dad8491bbec40ff917f9db859604796614f62f3cd203a7600d599ee90d307c5d08d202253a81766c3763387fd3271e16629e29abfb74f69ee5ff19f56b355fc4ee84c762fcaa2a37fc11c018e5e15294666c497e9b084f0320eee5728feba9c5c82e2997c0e715d9cde6a98e885478b9c14cf86a0bf93c89987a38ee981c9767b29f3e481f4c91f14aa15ec74667e334bbdce1abca24e67156a3b675e9c87c051154a509a883a079e47f8bc15a842475f44cc873ede41358cf2461d26127f0f5a4c9d219d9ab7530632882c1bdda95474ab5433dcdc3fa2e9b489fb64e9b0ff7f1d3658b48f55e9ff376ed7549e951ec1caf391c93f4f0a031daa651b79717b8a6fa01aae8c0fac3ce1bc05eae689a6b8b391a4e0fc79e6834513d3498df91fd1bbc52f3ed46be28e405c90d9d7403a47161e0682b48d33449ab82dc8e912fb3298b25b10a42b38c12ceaa26ff19950e3e043cecbff9cfd43162df856d097e5f1c9f1627e0d432e219e15b487b118e0b0d0b1dc371ba8c8c6c0204439c57b360ee82b616b36e2ba6ba44ef7f6bc899ba7fbfa103d3d193f1e995d08d723b192f6bd83d7e49622580c05e9356d160d07a9dbfb78255e2826145b6d06d148b51366965f3383ee5245b6b29fb8e08b388632f18229ff64049c3efa253d5713ae13e13fd965512f57a1d19a7782716629ecb41e645afb67b34a9af3836f76599fac7234d27eb5551e03f8a236d5ab1096f2f4eb5e9ac7867966af77d04736033e634476eb6bf0625cbc126ab9f669558a7ee1cc618a1d028ba73306f3e6ce48f0e0b531718e3ecc40f19d5d3822056264ce1010132403c3cfff140ff55270a40ac6fe6872ffba0cff2e7ce0ce86589e66f93454bcbf83b9844303bb8da5878f76e86ed1f205854e826b3efa471d76aaa7e260f082ea19baa0d0195d44a5ab4cb8d783f47129dbdfe199003a9beb67ec4df8f9ba556c8768865466fb5c123428b36a8a8b74788796bcc5057ef4568b18d35128361c00f316b6eccc59418839a902b3af26d5041dc883194754e69aa3d647fad1af599607a0966d0b0c01d61ef9267a01fe6ffee3356e529193b09818b8a1fff13ebc115df78aaaf63fc05de82b1ff03e910dfc347eda7f9837a4eb25df57b30e98a9c7482f0446719c651ddf1955099c1724151973ec8adea1de48846467b2aba8c23acd8ed7430e48c2549b77deee3db02bc1b112700ce1d014df38fa4ac37a8f0d52fb34f2827390b3181351bd38b4fa83fa93ef9c12845f4c667dc8c9beff8cd875b91281c606f727100689a6d97a134b938f44f361fc04ffb396449c9cb8c6c33d2977dc24b02e33f2bbfed13fc1ea1dd47acb96a8f37bafe4c34d08643a3b67ab94305f828625c32e1c064fe13a53988837d5d022901b513745c344aaaeaa3613423708a1b3a45dbdbd55693db754863d2c29f9a372f5426fed2c00cf55fd77945c0c5c83aeff9982e0cdcb089650723f00af3c405d95f7a0e920b252e1c1ba0c60391b1979be75fcffd3f338f2e7fefbf6a0d0d6e0e81fd78308050a2800721f7dcdbd877e611154a12411d9e77d267790eb92cfe6441d6e643269d2d99c4bf2482b791f84b1184be2775d8f3a65fbfdb458f005ed2d861d6e9ed09f041584a1fd1f96cf1977451baf6ea87eef711a1741fa031e233e192d726b57b7ea8e374f565e440771f2567057a10b9a052ac67e4928a559057fb48b9022f806937ea9a08dfe0e9964802137733a3576352d40ecf9169b9d7ccd433ad9c3e8afd2bc3eb143d7a6ea7fd5c1fd83fd9ac89e20d411f223d008dc4e8fc5aa0b4e63f70cc10ea6b37e609fcf077797a0968b5bc976ff2b19d26101a356249bb41ff43eb2516555b69b089a9e1e314aebd36278b7c6d8d5e352626e605919d246cdc5e84b7d069c8d0ddbe2e1bf3ed0aa83070998fe5655ec204f1a2ffa2a0d43240218a38f836e1b96880ea6a2069a8422a863e798807122aa1257289c3d2b3a2a6b27e32d442db99e62a1524a6636c4a76cb7282b9e14e9a97571f7bfca7f16205326b1ace7a6183d1166e592b5a550599568154fe962c76b25d886d18f6aa265862a127cc2b23bab19eab997c8dd4e5aac0017793d90291192f9b0e79eff3df835030ea2fafe7adca294a3dd4ac37f9d63c31d4fcef63639a3ee7f8857412099528e615dfd89cf48813710404bc37c4a104d14e13bd93d5c72dc4eb4cbc49f04d1c7c2750a2f8b9b5887c4d1722bea965948d63b883a26d92c24ecd663f48f95820caeca0810dd850507cb1e176e3c8485196f89a930953180d02551ac6ad17ad905802d5b63b16fce4fb3b1dbf8d94bba538ae28f32ab5bf31e05478b264cd704691ef4f9b98c3c24d0cd249c111e731c5326df23e4fd8f7f4bc02ace6f3cced06d2a48a86bd27028d7834c61ef91f007d14c293cd338e724568454f7e70f223331b3089814dbe7efd6f1d1b406c831a0ec2510311aa341984671d60666aeee5fc285b8765c26f92b0a3fcb970ca8bce7a61e25e4f40299ffe0aed150b51a3687f1fa6da62c3b3daa9545efe0f94dba9e7d55dfa6252e294d00eb9cd16ebc82de8ef7b56e3ae8d7c0f2fd862805fa163afe08af6e20cb281826cafeaa36149a681687887e5fe1105901e5e95a618f5733a2e0c0bd2ce0e662549790c822bd9f7b92da7e305daef5d050d89ce84d015cd5a37b80597435127071a5d84c9017cd896ca4ef3846ceb3f6923c379176faae4fbc2ff6c9dd0cefaa852ae6f7e3dfe45b68d02c7bb1f2d972610a", 0x1000, 0x40000001, &(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x80000000, @private2, 0x80}, 0x80) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r3, &(0x7f0000003680)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x241803, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x1, 0x9, 0x101}, 0x14}}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r5, &(0x7f0000000080)=""/75, 0x8e, 0x4000000000a2) 2.928668497s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.state\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x4c}}, 0x0) 2.113488234s ago: executing program 1: r0 = syz_io_uring_setup(0x6908, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x7058, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x18, 0x20000000, r4) 1.969481145s ago: executing program 3: socket$qrtr(0x2a, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) write$6lowpan_control(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, r6) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r9, 0xc0182101, &(0x7f0000000180)={r10}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f0000000080)={r11, 0x3, r9, 0x5}) close_range(r8, 0xffffffffffffffff, 0x0) splice(r3, 0x0, r5, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r4, 0x407, 0x100004) write$eventfd(r4, &(0x7f0000000240), 0xffffff14) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 1.937617152s ago: executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x20000400) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.767637799s ago: executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c500c500", 0x2c}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 1.645057626s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) recvmmsg(r4, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000340)=""/157, 0x9d}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000080), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x18) 1.291022699s ago: executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) 677.730464ms ago: executing program 5: syz_open_dev$hiddev(0x0, 0x0, 0xc100) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r1, &(0x7f0000001a00)='r', 0x1) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x4020940d, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xc, 0xed, 0x97, 0x0, 0xa2c, 0x8, 0x5858, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb1, 0x76, 0x1c}}]}}]}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x2d) 595.455583ms ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a80000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe8b}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 442.616944ms ago: executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000340), 0xffffff46) dup3(r1, r0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000340)={0x24, 0x3, 0x0, {0x0, 0x3, 0x0, ')!\xaf'}}, 0x24) 363.197239ms ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000280)='\x87\x94\x9e\v\xaa\xf5\xdaZ:\xd2\xcb\xa3\r\xb89\xa4\x9e\x8a\x8c\x93G6\xb1\xc9V\x8a\xe8\xa9\xbf', 0x0, 0x0) 133.772057ms ago: executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_binder, @flat=@weak_binder}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000140)=[@request_death], 0x0, 0x0, 0x0}) 44.741974ms ago: executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000180)) 0s ago: executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f00000028c0)) kernel console output (not intermixed with test programs): 320.812308][ T5183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.828068][T10232] team0: Port device team_slave_1 added [ 320.909831][T10345] XFS (loop0): Ending clean mount [ 320.912479][T10378] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 320.941459][T10345] XFS (loop0): Quotacheck needed: Please wait. [ 320.954743][T10232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.980409][T10232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.997157][T10345] XFS (loop0): Quotacheck: Done. [ 321.023710][T10232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.051240][ T5176] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.058443][ T5176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.080711][ T7893] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 321.088140][T10232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.101960][T10232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.129527][T10232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.414281][T10232] hsr_slave_0: entered promiscuous mode [ 321.444893][T10232] hsr_slave_1: entered promiscuous mode [ 321.466400][T10232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.490012][T10232] Cannot create hsr debugfs directory [ 321.740795][ T5133] Bluetooth: hci2: command tx timeout [ 321.870647][T10406] sctp: [Deprecated]: syz-executor.0 (pid 10406) Use of struct sctp_assoc_value in delayed_ack socket option. [ 321.870647][T10406] Use struct sctp_sack_info instead [ 322.418527][T10053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.912093][T10232] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 322.956581][T10053] veth0_vlan: entered promiscuous mode [ 322.989427][T10232] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 323.011036][T10232] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 323.043803][T10053] veth1_vlan: entered promiscuous mode [ 323.063924][T10232] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 323.126818][T10417] loop4: detected capacity change from 0 to 32768 [ 323.167932][T10417] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 323.275679][T10053] veth0_macvtap: entered promiscuous mode [ 323.313649][T10053] veth1_macvtap: entered promiscuous mode [ 323.338135][ T29] audit: type=1804 audit(1718462148.958:1607): pid=10451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3227726138/syzkaller.zV4QEl/134/file0" dev="sda1" ino=1962 res=1 errno=0 [ 323.428237][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.493477][T10417] XFS (loop4): Ending clean mount [ 323.500553][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.531190][T10417] XFS (loop4): Quotacheck needed: Please wait. [ 323.563844][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.622224][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.632499][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.633283][T10417] XFS (loop4): Quotacheck: Done. [ 323.643014][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.643037][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.643058][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.643075][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.643094][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.643113][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.643132][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.645251][T10053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.782017][T10456] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 323.802360][ T9842] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 323.823568][ T5133] Bluetooth: hci2: command 0x0419 tx timeout [ 323.927675][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.968907][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.991589][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.005648][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.015771][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.027917][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.038432][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.050375][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.062747][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.077968][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.087945][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.098901][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.123620][T10053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.136074][T10053] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.176872][T10053] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.205194][T10053] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.238478][T10053] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.594972][T10478] input: syz0 as /devices/virtual/input/input7 [ 324.596825][T10232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.623215][T10479] sctp: [Deprecated]: syz-executor.4 (pid 10479) Use of struct sctp_assoc_value in delayed_ack socket option. [ 324.623215][T10479] Use struct sctp_sack_info instead [ 324.695652][T10232] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.770869][ T4862] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.778107][ T4862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.786129][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.811191][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.861088][ T4862] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.868408][ T4862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.984027][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.030006][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.664081][T10500] loop2: detected capacity change from 0 to 2048 [ 325.707907][T10501] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 325.753350][T10501] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 325.797103][T10501] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 325.815035][T10232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.847286][T10501] Remounting filesystem read-only [ 325.900777][ T5122] Bluetooth: hci2: command 0x0419 tx timeout [ 325.913092][T10500] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 325.980004][T10500] NILFS (loop2): discard dirty page: offset=0, ino=18 [ 326.005058][T10500] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 326.028638][T10500] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 326.057713][T10232] veth0_vlan: entered promiscuous mode [ 326.065869][T10500] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 326.094026][T10500] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 326.105320][T10232] veth1_vlan: entered promiscuous mode [ 326.111608][T10500] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 326.118304][T10500] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 326.190136][T10500] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 326.228230][T10500] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 326.253710][T10232] veth0_macvtap: entered promiscuous mode [ 326.260198][T10500] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 326.269508][T10500] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 326.302235][T10232] veth1_macvtap: entered promiscuous mode [ 326.320056][T10500] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 326.327373][T10500] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 326.364084][T10232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.380748][T10500] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 326.388079][T10500] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 326.407861][T10232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.421920][T10500] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 326.432305][T10232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.449161][T10500] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 326.458887][T10232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.471295][T10500] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 326.480424][T10232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.491363][T10500] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 326.500477][T10232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.513991][T10500] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 326.523200][T10232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.545168][T10500] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 326.556748][T10500] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 326.569964][T10232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.588565][T10500] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 326.597711][T10232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.609119][T10500] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 326.618190][T10232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.653846][T10500] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 326.666873][T10232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.677913][T10500] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 326.684817][T10232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.695359][T10500] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 326.703233][T10500] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 326.712417][T10232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.723487][T10500] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 326.732411][T10232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.753001][T10500] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 326.789098][T10232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.796748][T10500] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 326.820589][T10500] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 326.844883][T10232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.873556][T10500] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 326.890048][T10232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.900087][T10500] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 326.907395][T10500] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 326.926502][T10232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.950042][T10500] NILFS (loop2): discard dirty page: offset=65536, ino=3 [ 326.957177][T10500] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 326.976201][T10500] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 326.985317][T10232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.995302][T10232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.005910][T10232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.015872][T10232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.026652][T10232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.029755][T10500] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 327.036739][T10232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.036762][T10232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.036784][T10232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.036803][T10232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.036823][T10232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.036842][T10232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.039117][T10232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.131978][T10500] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 327.180130][T10500] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 327.187286][T10500] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 327.209718][T10232] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.246411][T10232] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.257437][T10500] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 327.270002][T10232] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.296601][T10232] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.299976][T10500] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 327.340450][T10500] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 327.469417][T10527] sctp: [Deprecated]: syz-executor.1 (pid 10527) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.469417][T10527] Use struct sctp_sack_info instead [ 327.626604][ T5359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.653108][ T5359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.732243][ T4066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.755854][ T4066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.936117][T10535] mkiss: ax0: crc mode is auto. [ 329.051025][ T5127] Bluetooth: hci6: command 0x0406 tx timeout [ 329.051043][ T5123] Bluetooth: hci0: command 0x0406 tx timeout [ 329.826202][T10574] sctp: [Deprecated]: syz-executor.5 (pid 10574) Use of struct sctp_assoc_value in delayed_ack socket option. [ 329.826202][T10574] Use struct sctp_sack_info instead [ 330.430389][T10585] mkiss: ax0: crc mode is auto. [ 330.675234][T10567] loop4: detected capacity change from 0 to 32768 [ 330.720809][T10567] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 331.005007][T10567] XFS (loop4): Ending clean mount [ 331.033182][T10567] XFS (loop4): Quotacheck needed: Please wait. [ 331.109634][T10610] loop3: detected capacity change from 0 to 2048 [ 331.167600][T10567] XFS (loop4): Quotacheck: Done. [ 331.270184][T10617] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 331.295810][ T9842] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 331.331901][T10617] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 331.374248][T10617] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 331.404877][T10617] Remounting filesystem read-only [ 331.436363][T10610] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 331.477180][T10610] NILFS (loop3): discard dirty page: offset=0, ino=18 [ 331.490048][T10610] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 331.518052][T10610] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 331.545750][T10610] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 331.565002][T10610] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 331.565508][T10629] sctp: [Deprecated]: syz-executor.1 (pid 10629) Use of struct sctp_assoc_value in delayed_ack socket option. [ 331.565508][T10629] Use struct sctp_sack_info instead [ 331.584430][T10610] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 331.629226][T10610] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 331.645950][T10610] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 331.659497][T10610] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 331.682173][T10610] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 331.699549][T10610] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 331.707600][T10610] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 331.725807][T10610] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 331.752530][T10610] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 331.767518][T10610] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 331.794533][T10610] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 331.817293][T10610] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 331.844552][T10610] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 331.862845][T10610] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 331.884987][T10610] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 331.908343][T10610] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 331.926332][T10610] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 331.944775][T10610] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 331.969398][T10610] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 332.012075][T10610] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 332.030392][T10610] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 332.056302][T10610] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 332.102681][T10610] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 332.115850][T10610] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 332.125813][T10610] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 332.135068][T10610] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 332.142122][T10610] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 332.149530][T10610] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 332.167310][T10610] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 332.184775][T10610] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 332.202355][T10610] NILFS (loop3): discard dirty page: offset=65536, ino=3 [ 332.215499][T10610] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 332.247429][T10610] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 332.260206][T10610] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 332.267541][T10610] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 332.308490][T10610] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 332.337343][T10610] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 332.366703][T10610] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 332.397826][T10610] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 332.414290][T10610] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 333.190510][ T925] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 333.245234][T10677] sctp: [Deprecated]: syz-executor.2 (pid 10677) Use of struct sctp_assoc_value in delayed_ack socket option. [ 333.245234][T10677] Use struct sctp_sack_info instead [ 333.322716][T10680] loop4: detected capacity change from 0 to 2048 [ 333.363726][T10685] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 333.404112][T10685] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 333.417848][T10685] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 333.420749][ T925] usb 1-1: Using ep0 maxpacket: 16 [ 333.952879][ T925] usb 1-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 333.973645][T10685] Remounting filesystem read-only [ 333.981090][ T925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.989101][ T925] usb 1-1: Product: syz [ 334.030039][ T925] usb 1-1: Manufacturer: syz [ 334.059363][ T925] usb 1-1: SerialNumber: syz [ 334.075649][ T9842] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 334.089596][ T925] usb 1-1: config 0 descriptor?? [ 334.100455][ T9842] NILFS (loop4): discard dirty page: offset=0, ino=18 [ 334.117480][ T9842] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 334.127862][ T9842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 334.146075][ T5133] Bluetooth: hci7: command 0x0405 tx timeout [ 334.162559][ T9842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 334.180267][ T9842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 334.189443][ T9842] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 334.215154][ T9842] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 334.228083][ T9842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 334.257701][ T9842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 334.296300][ T9842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 334.317033][ T9842] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 334.336868][ T9842] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 334.338427][ T925] usb 1-1: MIDIStreaming interface descriptor not found [ 334.377581][ T9842] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 334.410554][ T9842] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 334.433761][ T9842] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 334.460695][ T9842] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 334.467680][ T9842] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 334.510537][ T925] usb 1-1: USB disconnect, device number 12 [ 334.520847][ T9842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 334.542635][ T9842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 334.570028][ T9842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 334.591224][ T9842] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 334.623172][ T9842] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 334.641697][ T9842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 334.669275][ T9842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 334.684411][ T9842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 334.732281][ T9842] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 334.760017][ T9842] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 334.783325][ T9842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 334.813716][ T9842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 334.861471][ T9842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 334.888026][ T9842] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 334.918554][ T9842] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 334.949974][ T9842] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 334.974697][ T9842] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 334.992337][ T9842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 335.023647][ T9842] NILFS (loop4): discard dirty page: offset=65536, ino=3 [ 335.043889][ T9842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 335.066592][ T9842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 335.096125][ T9842] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 335.120365][ T9842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 335.149537][ T9842] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 335.178687][ T9842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 335.222631][ T9842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 335.270081][ T9842] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 335.292415][ T9842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 335.807486][T10764] input: syz0 as /devices/virtual/input/input8 [ 336.530069][ T4862] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 336.750157][ T4862] usb 1-1: Using ep0 maxpacket: 8 [ 336.769810][ T4862] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 336.788399][ T4862] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 336.818824][ T4862] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 336.853688][ T4862] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.906985][ T4862] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 337.325765][ T4862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.857926][ T4862] usb 1-1: GET_CAPABILITIES returned 0 [ 337.895754][ T4862] usbtmc 1-1:16.0: can't read capabilities [ 338.065149][ T4862] usb 1-1: USB disconnect, device number 13 [ 338.497174][T10835] mkiss: ax0: crc mode is auto. [ 341.095469][T10871] loop0: detected capacity change from 0 to 32768 [ 341.174674][T10871] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 341.359607][T10871] XFS (loop0): Ending clean mount [ 341.859709][T10871] XFS (loop0): Quotacheck needed: Please wait. [ 342.219853][T10871] XFS (loop0): Quotacheck: Done. [ 342.280181][T10919] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 342.381964][T10919] team0: Device veth0_macvtap failed to register rx_handler [ 342.420276][T10871] loop0: detected capacity change from 32768 to 0 [ 342.459393][T10871] syz-executor.0: attempt to access beyond end of device [ 342.459393][T10871] loop0: rw=432129, sector=896, nr_sectors = 128 limit=0 [ 342.492135][ T58] XFS (loop0): log I/O error -5 [ 342.497534][ T58] XFS (loop0): Filesystem has been shut down due to log error (0x2). [ 342.510029][ T58] XFS (loop0): Please unmount the filesystem and rectify the problem(s). [ 345.382921][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 347.918227][T11030] loop4: detected capacity change from 0 to 512 [ 348.127637][T11030] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.178696][T11030] ext4 filesystem being mounted at /root/syzkaller-testdir108057286/syzkaller.hCR4To/53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.212021][ T5133] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 348.225123][ T5133] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 348.242199][ T5133] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 348.251699][ T5133] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 348.259867][ T5133] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 348.270319][ T5133] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 348.400263][ T1090] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.410409][ T5183] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 348.565401][ T1090] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.607016][ T5183] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 348.645395][ T5183] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 348.680900][ T5183] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 348.717011][ T5183] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 348.728622][ T5183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.737400][ T5183] usb 3-1: Product: syz [ 348.742570][ T5183] usb 3-1: Manufacturer: syz [ 348.747340][ T5183] usb 3-1: SerialNumber: syz [ 348.776767][ T1090] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.857360][ T9842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.902072][ T1090] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.965300][ T5183] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 349.166355][ T4862] usb 3-1: USB disconnect, device number 18 [ 349.209623][ T4862] usblp0: removed [ 350.248685][T11048] chnl_net:caif_netlink_parms(): no params data found [ 350.276259][ T1090] bridge_slave_1: left allmulticast mode [ 350.284168][ T1090] bridge_slave_1: left promiscuous mode [ 350.291736][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.309786][ T5122] Bluetooth: hci2: command tx timeout [ 350.545250][ T1090] bridge_slave_0: left allmulticast mode [ 350.669564][ T1090] bridge_slave_0: left promiscuous mode [ 350.759252][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.600125][ T4862] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 351.810119][ T4862] usb 3-1: Using ep0 maxpacket: 8 [ 351.817714][ T4862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 351.839856][ T4862] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 351.849161][ T4862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.889844][ T4862] usb 3-1: config 0 descriptor?? [ 352.034063][ T1090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.048024][ T1090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.069698][ T1090] bond0 (unregistering): Released all slaves [ 352.093892][T11076] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 352.115168][T11098] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.5'. [ 352.144607][ T4862] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 352.152500][T11098] gretap0: entered promiscuous mode [ 352.491151][ T5122] Bluetooth: hci2: command tx timeout [ 352.873180][ T25] usb 3-1: USB disconnect, device number 19 [ 352.961420][ T25] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 353.029395][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 353.445795][T11048] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.477090][T11048] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.513537][T11048] bridge_slave_0: entered allmulticast mode [ 353.540366][T11048] bridge_slave_0: entered promiscuous mode [ 354.025740][T11048] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.138351][T11048] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.167410][T11048] bridge_slave_1: entered allmulticast mode [ 354.218713][T11048] bridge_slave_1: entered promiscuous mode [ 354.480114][ T1090] hsr_slave_0: left promiscuous mode [ 354.510787][ T1090] hsr_slave_1: left promiscuous mode [ 354.540628][ T5122] Bluetooth: hci2: command tx timeout [ 354.548218][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.567137][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.575689][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.589986][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.648906][ T1090] veth1_macvtap: left promiscuous mode [ 354.664903][ T1090] veth0_macvtap: left promiscuous mode [ 354.675144][ T1090] veth1_vlan: left promiscuous mode [ 354.687519][ T1090] veth0_vlan: left promiscuous mode [ 354.774827][T11149] loop4: detected capacity change from 0 to 64 [ 354.811606][T11149] hfs: get root inode failed [ 355.100207][ T5180] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 355.289955][ T5180] usb 3-1: Using ep0 maxpacket: 8 [ 355.302076][ T5180] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 355.322203][ T5180] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 355.346680][ T5180] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 355.373939][ T5180] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.398096][ T5180] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 355.413176][ T5180] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.608126][T11149] loop4: detected capacity change from 0 to 32768 [ 355.659827][ T5180] usb 3-1: GET_CAPABILITIES returned 0 [ 355.676212][ T5180] usbtmc 3-1:16.0: can't read capabilities [ 355.749130][T11149] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,nojournal_transaction_names [ 355.768641][T11149] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 355.779103][ T1090] team0 (unregistering): Port device team_slave_1 removed [ 355.809195][T11149] bcachefs (loop4): alloc_read... done [ 355.824897][T11149] bcachefs (loop4): stripes_read... done [ 355.834561][T11149] bcachefs (loop4): snapshots_read... done [ 355.842473][ T1090] team0 (unregistering): Port device team_slave_0 removed [ 355.843711][T11149] bcachefs (loop4): journal_replay... done [ 355.857495][T11149] bcachefs (loop4): resume_logged_ops... done [ 355.867417][ T5180] usb 3-1: USB disconnect, device number 20 [ 355.880380][T11149] bcachefs (loop4): going read-write [ 355.902296][T11149] bcachefs (loop4): done starting filesystem [ 356.104161][ T9842] bcachefs (loop4): shutting down [ 356.109227][ T9842] bcachefs (loop4): going read-only [ 356.121247][ T9842] bcachefs (loop4): finished waiting for writes to stop [ 356.157235][ T9842] bcachefs (loop4): flushing journal and stopping allocators, journal seq 13 [ 356.193747][ T9842] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 15 [ 356.205205][ T9842] bcachefs (loop4): shutdown complete, journal seq 16 [ 356.213050][ T9842] bcachefs (loop4): marking filesystem clean [ 356.255774][ T9842] bcachefs (loop4): shutdown complete [ 356.528601][T11048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.570015][T11155] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 356.622415][T11155] batman_adv: batadv0: Adding interface: team0 [ 356.628603][T11155] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.654177][ T5133] Bluetooth: hci2: command tx timeout [ 356.660396][T11155] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 356.675190][T11048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.954827][T11048] team0: Port device team_slave_0 added [ 357.004798][T11048] team0: Port device team_slave_1 added [ 357.774186][T11048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.807485][T11048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.905479][T11183] loop2: detected capacity change from 0 to 256 [ 357.922072][T11048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.014407][T11048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.040199][T11048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.124129][T11048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.203627][T11183] loop2: detected capacity change from 256 to 0 [ 358.227895][T11194] syz-executor.2: attempt to access beyond end of device [ 358.227895][T11194] loop2: rw=0, sector=4, nr_sectors = 4 limit=0 [ 358.248876][T11194] FAT-fs (loop2): FAT read failed (blocknr 1) [ 358.275296][T11194] syz-executor.2: attempt to access beyond end of device [ 358.275296][T11194] loop2: rw=0, sector=12, nr_sectors = 4 limit=0 [ 358.342320][T11194] FAT-fs (loop2): unable to read inode block for updating (i_pos 203) [ 358.377579][T11048] hsr_slave_0: entered promiscuous mode [ 358.405471][T11048] hsr_slave_1: entered promiscuous mode [ 358.422942][T11048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.450180][T11048] Cannot create hsr debugfs directory [ 358.644720][T10053] syz-executor.2: attempt to access beyond end of device [ 358.644720][T10053] loop2: rw=0, sector=12, nr_sectors = 4 limit=0 [ 358.680835][T10053] FAT-fs (loop2): Directory bread(block 3) failed [ 358.755489][T10053] syz-executor.2: attempt to access beyond end of device [ 358.755489][T10053] loop2: rw=0, sector=0, nr_sectors = 4 limit=0 [ 358.816603][T10053] FAT-fs (loop2): unable to read boot sector to mark fs as dirty [ 359.306927][ T5359] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.638933][ T5359] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.798543][ T5359] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.065231][ T5359] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.294526][T11048] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 360.589626][T11048] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 360.726412][T11048] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 360.903000][T11048] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 361.022256][ T5122] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 361.032948][ T5122] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 361.040980][ T5122] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 361.049563][ T5122] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 361.071822][ T5122] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 361.081412][ T5122] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 361.088728][ T5359] bridge_slave_1: left allmulticast mode [ 361.118648][ T5359] bridge_slave_1: left promiscuous mode [ 361.138997][ T5359] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.171469][ T5359] bridge_slave_0: left allmulticast mode [ 361.192598][ T5359] bridge_slave_0: left promiscuous mode [ 361.202789][ T5359] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.386116][T11257] loop4: detected capacity change from 0 to 512 [ 361.479342][T11257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.492111][T11257] ext4 filesystem being mounted at /root/syzkaller-testdir108057286/syzkaller.hCR4To/69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.569540][T11257] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 256: padding at end of block bitmap is not set [ 361.600054][T11257] Quota error (device loop4): write_blk: dquota write failed [ 361.611254][T11257] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 361.620814][T11257] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 361.631107][T11257] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz-executor.4: Failed to acquire dquot type 1 [ 361.764992][ T9842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.417557][ T5359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.449232][ T5359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.473149][ T5359] bond0 (unregistering): Released all slaves [ 363.181651][ T5122] Bluetooth: hci4: command tx timeout [ 363.558487][ T5359] hsr_slave_0: left promiscuous mode [ 363.565018][ T5359] hsr_slave_1: left promiscuous mode [ 363.583656][ T5359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.592368][ T5359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.612790][ T5359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.620415][ T5359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.654333][ T5359] veth1_macvtap: left promiscuous mode [ 363.660173][ T5359] veth0_macvtap: left promiscuous mode [ 363.665853][ T5359] veth1_vlan: left promiscuous mode [ 363.671323][ T5359] veth0_vlan: left promiscuous mode [ 364.977577][ T5359] team0 (unregistering): Port device team_slave_1 removed [ 365.083438][ T5359] team0 (unregistering): Port device team_slave_0 removed [ 365.260111][ T5122] Bluetooth: hci4: command tx timeout [ 366.247865][T11048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.379063][T11048] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.449179][ T5183] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.456426][ T5183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.488836][ T5183] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.496055][ T5183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.681827][T11235] chnl_net:caif_netlink_parms(): no params data found [ 367.128401][T11235] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.159285][T11235] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.791504][ T5122] Bluetooth: hci4: command tx timeout [ 367.809182][T11235] bridge_slave_0: entered allmulticast mode [ 367.862129][T11235] bridge_slave_0: entered promiscuous mode [ 368.199387][T11235] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.250243][T11235] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.257498][T11235] bridge_slave_1: entered allmulticast mode [ 368.281753][T11235] bridge_slave_1: entered promiscuous mode [ 371.672889][ T5122] Bluetooth: hci4: command tx timeout [ 371.779245][T11235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.956533][T11235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.063636][T11410] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 372.197102][T11235] team0: Port device team_slave_0 added [ 372.239264][T11048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.268671][T11235] team0: Port device team_slave_1 added [ 372.300797][T11414] fuse: Bad value for 'fd' [ 372.312778][ T29] audit: type=1804 audit(1718462197.938:1608): pid=11414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir694988878/syzkaller.7OhKMZ/518/file0" dev="sda1" ino=1937 res=1 errno=0 [ 372.468765][T11235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.494097][T11235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.550087][T11235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.576403][T11235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.585739][T11235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.467264][T11235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.596495][T11426] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 373.618443][T11426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.628032][ T5133] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 373.637616][T11426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.645089][ T5133] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 373.652979][ T5133] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 373.673550][ T5133] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 373.682625][T11426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.690799][T11426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.693509][ T5133] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 373.706110][ T5133] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 373.796697][T11235] hsr_slave_0: entered promiscuous mode [ 373.815156][T11235] hsr_slave_1: entered promiscuous mode [ 373.830983][T11235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 373.844330][T11235] Cannot create hsr debugfs directory [ 374.037147][T11048] veth0_vlan: entered promiscuous mode [ 374.065421][T11048] veth1_vlan: entered promiscuous mode [ 375.160703][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 375.220862][T11048] veth0_macvtap: entered promiscuous mode [ 375.277509][T11048] veth1_macvtap: entered promiscuous mode [ 375.485648][T11048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.504530][T11048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.520852][T11048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.531940][T11048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.541880][T11048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.552359][T11048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.562318][T11048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.579997][T11048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.589828][T11048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.602761][T11048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.635799][T11048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.680649][T11048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.693555][T11048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.707108][T11048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.719636][T11048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.731617][T11048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.769980][T11048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.779811][T11048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.792028][T11048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.802283][T11048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.815688][T11048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.832504][ T5133] Bluetooth: hci1: command tx timeout [ 375.850466][T11048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.864167][T11434] chnl_net:caif_netlink_parms(): no params data found [ 375.897107][T11048] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.918885][T11048] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.929151][T11048] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.938901][T11048] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.367059][T11434] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.379843][T11434] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.406935][T11434] bridge_slave_0: entered allmulticast mode [ 376.414734][T11434] bridge_slave_0: entered promiscuous mode [ 376.488565][T11434] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.502246][T11434] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.524730][T11434] bridge_slave_1: entered allmulticast mode [ 376.537409][T11434] bridge_slave_1: entered promiscuous mode [ 376.565513][ T5359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.574417][T11235] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 376.580157][ T5359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.653712][T11235] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 376.743731][T11434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.794091][T11235] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 376.824393][T11434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.856226][T11235] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 376.892990][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.902378][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.015280][T11434] team0: Port device team_slave_0 added [ 377.074978][T11434] team0: Port device team_slave_1 added [ 377.260814][T11434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.268476][T11434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.317157][ T29] audit: type=1804 audit(1718462202.938:1609): pid=11499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir694988878/syzkaller.7OhKMZ/528/file0" dev="sda1" ino=1950 res=1 errno=0 [ 377.317892][T11434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.486949][T11434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.531733][T11434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.601122][T11434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.854156][T11515] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 377.900169][ T5133] Bluetooth: hci1: command tx timeout [ 378.202786][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.209128][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.414542][T11434] hsr_slave_0: entered promiscuous mode [ 378.540812][T11434] hsr_slave_1: entered promiscuous mode [ 378.579472][T11434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.609005][T11434] Cannot create hsr debugfs directory [ 378.691183][T11527] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 379.980156][ T5133] Bluetooth: hci1: command tx timeout [ 380.138132][T11235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.195879][T11548] binder: BINDER_SET_CONTEXT_MGR already set [ 380.232952][T11548] binder: 11547:11548 ioctl 4018620d 20000040 returned -16 [ 380.297885][T11434] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.371706][T11235] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.454846][T11434] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.489813][ T5183] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.496986][ T5183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.587874][T11434] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.704452][ T4862] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.711729][ T4862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.855285][T11434] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.908678][T11235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 381.230921][T11434] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 381.244890][T11434] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 381.263672][T11434] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 381.283430][T11434] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 381.443367][T11593] binder: BINDER_SET_CONTEXT_MGR already set [ 381.460911][T11591] loop4: detected capacity change from 0 to 512 [ 381.467979][T11593] binder: 11592:11593 ioctl 4018620d 20000040 returned -16 [ 381.534144][T11591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.567073][T11591] ext4 filesystem being mounted at /root/syzkaller-testdir108057286/syzkaller.hCR4To/100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.601510][T11591] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 256: padding at end of block bitmap is not set [ 381.616969][T11591] Quota error (device loop4): write_blk: dquota write failed [ 381.627518][T11591] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 381.635148][T11434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.647053][T11591] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 381.687092][T11235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.709721][T11591] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz-executor.4: Failed to acquire dquot type 1 [ 381.754356][T11434] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.817317][ T5173] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.824563][ T5173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.836429][ T9842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.874753][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.881977][ T5173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.061007][ T5133] Bluetooth: hci1: command tx timeout [ 382.069765][T11235] veth0_vlan: entered promiscuous mode [ 382.098967][T11235] veth1_vlan: entered promiscuous mode [ 382.216899][T11235] veth0_macvtap: entered promiscuous mode [ 382.270526][T11235] veth1_macvtap: entered promiscuous mode [ 382.347618][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.420190][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.450189][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.489777][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.505310][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.531249][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.551951][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.569971][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.585508][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.598667][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.618490][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.643905][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.689831][T11235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.737557][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.769284][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.810048][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.847065][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.880048][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.907340][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.953188][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.992073][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.014711][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.046572][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.056654][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.069510][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.104927][T11235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.163238][T11235] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.204578][T11235] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.236643][T11235] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.255708][T11235] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.312555][T11434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.773424][T11434] veth0_vlan: entered promiscuous mode [ 383.828706][ T5359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.851451][ T5359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.699277][T11685] syz-executor.3[11685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.699470][T11685] syz-executor.3[11685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.784971][T11434] veth1_vlan: entered promiscuous mode [ 384.831670][T11685] loop3: detected capacity change from 0 to 512 [ 384.855653][T11685] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 384.855728][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.899525][T11685] EXT4-fs (loop3): orphan cleanup on readonly fs [ 384.909799][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.992995][T11685] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor.3: bg 0: block 248: padding at end of block bitmap is not set [ 385.015789][T11685] Quota error (device loop3): write_blk: dquota write failed [ 385.041734][T11434] veth0_macvtap: entered promiscuous mode [ 385.050789][T11685] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 385.110834][T11685] EXT4-fs error (device loop3): ext4_acquire_dquot:6860: comm syz-executor.3: Failed to acquire dquot type 1 [ 385.164062][T11434] veth1_macvtap: entered promiscuous mode [ 385.224307][T11685] EXT4-fs (loop3): 1 truncate cleaned up [ 385.230688][T11434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.249929][T11434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.253215][T11685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 385.259742][T11434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.259765][T11434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.259786][T11434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.318622][T11434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.329653][T11434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.363050][T11434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.382442][T11434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.398838][T11434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.452290][T11434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.471692][T11434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.482160][T11434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.502023][T11434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.544465][T11048] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.565724][T11709] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 385.582741][T11434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.754180][T11434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.914376][T11434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.954850][T11434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.965182][T11722] binder: BINDER_SET_CONTEXT_MGR already set [ 385.990176][T11434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.004773][T11722] binder: 11721:11722 ioctl 4018620d 20000040 returned -16 [ 386.110358][T11434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.159028][T11434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.220565][T11434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.280122][T11434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.296905][T11434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.307719][T11434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.336936][T11434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.347832][T11434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.363645][T11434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.374859][T11434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.403808][T11434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.494454][ T5357] bridge_slave_1: left allmulticast mode [ 386.531762][ T5357] bridge_slave_1: left promiscuous mode [ 386.547196][ T5357] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.582107][ T5357] bridge_slave_0: left allmulticast mode [ 386.608661][ T5357] bridge_slave_0: left promiscuous mode [ 386.623082][ T5357] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.482770][ T5357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.605179][ T5357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.676090][ T5357] bond0 (unregistering): Released all slaves [ 388.874118][T11434] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.950099][T11434] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.980604][T11434] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.007517][T11434] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.513222][T11763] binder: BINDER_SET_CONTEXT_MGR already set [ 389.529478][T11763] binder: 11762:11763 ioctl 4018620d 20000040 returned -16 [ 389.693602][T11749] loop3: detected capacity change from 0 to 32768 [ 389.742703][T11749] gfs2: fsid=(œ[{{{+: Trying to join cluster "lock_nolock", "(œ[{{{+" [ 389.761779][T11749] gfs2: fsid=(œ[{{{+: Now mounting FS (format 0)... [ 389.920145][T11749] gfs2: fsid=(œ[{{{+.0: journal 0 mapped with 22 extents in 0ms [ 390.007507][ T5176] gfs2: fsid=(œ[{{{+.0: jid=0, already locked for use [ 390.042279][ T5176] gfs2: fsid=(œ[{{{+.0: jid=0: Looking at journal... [ 390.166370][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.206705][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.259197][ T5176] gfs2: fsid=(œ[{{{+.0: jid=0: Journal head lookup took 216ms [ 390.305172][ T5176] gfs2: fsid=(œ[{{{+.0: jid=0: Done [ 390.327360][T11749] gfs2: fsid=(œ[{{{+.0: first mount done, others may mount [ 390.334998][ T5357] hsr_slave_0: left promiscuous mode [ 390.421693][ T5357] hsr_slave_1: left promiscuous mode [ 390.486050][ T5357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.576349][ T5357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.649819][ T5357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.665547][ T5357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.786454][ T5357] veth1_macvtap: left promiscuous mode [ 390.801752][ T5357] veth0_macvtap: left promiscuous mode [ 390.825835][ T5357] veth1_vlan: left promiscuous mode [ 390.840286][ T5357] veth0_vlan: left promiscuous mode [ 390.871664][T11800] loop3: detected capacity change from 0 to 512 [ 390.921721][T11800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.934716][T11800] ext4 filesystem being mounted at /root/syzkaller-testdir2093900102/syzkaller.mmQtKv/26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.965990][T11800] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor.3: bg 0: block 256: padding at end of block bitmap is not set [ 390.983348][T11800] Quota error (device loop3): write_blk: dquota write failed [ 390.990260][ T5176] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 390.992015][T11800] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 391.007773][T11800] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 391.018066][T11800] EXT4-fs error (device loop3): ext4_acquire_dquot:6860: comm syz-executor.3: Failed to acquire dquot type 1 [ 391.089328][T11048] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.190331][ T5176] usb 5-1: Using ep0 maxpacket: 8 [ 391.226640][ T5176] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.238179][ T5176] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 391.266433][ T5176] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 391.290000][ T5176] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 391.323280][ T5176] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 391.335604][ T5176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.358008][ T5176] hub 5-1:1.0: bad descriptor, ignoring hub [ 391.370462][ T4862] IPVS: starting estimator thread 0... [ 391.388395][ T5176] hub 5-1:1.0: probe with driver hub failed with error -5 [ 391.417451][ T5176] cdc_wdm 5-1:1.0: skipping garbage [ 391.425353][ T5176] cdc_wdm 5-1:1.0: skipping garbage [ 391.451328][ T5176] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 391.457345][ T5176] cdc_wdm 5-1:1.0: Unknown control protocol [ 391.481881][T11812] IPVS: using max 16 ests per chain, 38400 per kthread [ 391.670554][ T4862] usb 5-1: USB disconnect, device number 7 [ 391.942482][ T5357] team0 (unregistering): Port device team_slave_1 removed [ 392.028050][ T5357] team0 (unregistering): Port device team_slave_0 removed [ 392.979492][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.010076][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.400049][ T5173] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 393.620117][ T5173] usb 5-1: Using ep0 maxpacket: 8 [ 393.658542][ T5173] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.690194][ T5173] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 393.723817][ T5173] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 393.770761][ T5173] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 393.802245][ T5173] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 393.821411][ T5173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.865610][ T5173] hub 5-1:1.0: bad descriptor, ignoring hub [ 393.889111][ T5173] hub 5-1:1.0: probe with driver hub failed with error -5 [ 393.919024][ T5173] cdc_wdm 5-1:1.0: skipping garbage [ 393.930965][ T5173] cdc_wdm 5-1:1.0: skipping garbage [ 393.951948][ T5173] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 393.957869][ T5173] cdc_wdm 5-1:1.0: Unknown control protocol [ 394.220998][ T5173] usb 5-1: USB disconnect, device number 8 [ 394.766925][T11916] loop3: detected capacity change from 0 to 64 [ 394.783685][ T29] audit: type=1804 audit(1718462220.378:1610): pid=11916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2093900102/syzkaller.mmQtKv/40/file0" dev="sda1" ino=1972 res=1 errno=0 [ 394.998855][ T29] audit: type=1804 audit(1718462220.378:1611): pid=11921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2093900102/syzkaller.mmQtKv/40/file0" dev="sda1" ino=1972 res=1 errno=0 [ 395.600288][ T5176] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 395.809954][ T5176] usb 4-1: Using ep0 maxpacket: 8 [ 395.821857][ T5176] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 395.864806][ T5176] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 395.901324][ T5176] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 395.929943][ T5176] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 395.959544][ T5176] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 395.983209][ T5176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.227521][ T5176] usb 4-1: GET_CAPABILITIES returned 0 [ 396.233303][ T5176] usbtmc 4-1:16.0: can't read capabilities [ 396.438881][ T5176] usb 4-1: USB disconnect, device number 32 [ 398.110221][ T5180] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 398.329957][ T5180] usb 1-1: Using ep0 maxpacket: 8 [ 398.347648][ T5180] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 398.374263][ T5180] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 398.385122][ T5180] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 398.395331][ T5180] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.408422][ T5180] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 398.422161][ T5180] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.670196][ T5180] usb 1-1: GET_CAPABILITIES returned 0 [ 398.675739][ T5180] usbtmc 1-1:16.0: can't read capabilities [ 398.871785][ T5173] usb 1-1: USB disconnect, device number 14 [ 404.276039][T12087] "syz-executor.4" (12087) uses obsolete ecb(arc4) skcipher [ 406.510789][ T5180] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 406.740176][ T5180] usb 1-1: Using ep0 maxpacket: 8 [ 406.753309][ T5180] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.771117][ T5180] usb 1-1: config 0 interface 0 has no altsetting 0 [ 406.780671][ T5180] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 406.789768][ T5180] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 406.829933][ T5180] usb 1-1: SerialNumber: syz [ 406.837864][ T5180] usb 1-1: config 0 descriptor?? [ 409.188050][ T5180] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 409.205631][ T5180] usb 1-1: No valid video chain found. [ 409.213186][ T5180] usb 1-1: USB disconnect, device number 15 [ 413.186163][T12249] sctp: [Deprecated]: syz-executor.5 (pid 12249) Use of struct sctp_assoc_value in delayed_ack socket option. [ 413.186163][T12249] Use struct sctp_sack_info instead [ 414.789921][ T29] audit: type=1804 audit(1718462240.408:1612): pid=12292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2093900102/syzkaller.mmQtKv/63/bus" dev="sda1" ino=1955 res=1 errno=0 [ 414.824186][T12292] Invalid ELF header magic: != ELF [ 414.918489][ T29] audit: type=1804 audit(1718462240.438:1613): pid=12292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2093900102/syzkaller.mmQtKv/63/bus" dev="sda1" ino=1955 res=1 errno=0 [ 415.919605][T12309] sctp: [Deprecated]: syz-executor.1 (pid 12309) Use of struct sctp_assoc_value in delayed_ack socket option. [ 415.919605][T12309] Use struct sctp_sack_info instead [ 416.080079][ T5122] Bluetooth: hci3: command 0x0406 tx timeout [ 420.136084][T12370] sctp: [Deprecated]: syz-executor.5 (pid 12370) Use of struct sctp_assoc_value in delayed_ack socket option. [ 420.136084][T12370] Use struct sctp_sack_info instead [ 422.032511][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 422.070342][T12401] sctp: [Deprecated]: syz-executor.1 (pid 12401) Use of struct sctp_assoc_value in delayed_ack socket option. [ 422.070342][T12401] Use struct sctp_sack_info instead [ 424.245744][ T35] bridge_slave_1: left allmulticast mode [ 424.269182][ T35] bridge_slave_1: left promiscuous mode [ 424.286992][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.305440][ T35] bridge_slave_0: left allmulticast mode [ 424.316085][ T35] bridge_slave_0: left promiscuous mode [ 424.326201][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.046172][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.063288][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.077694][ T35] bond0 (unregistering): Released all slaves [ 425.438782][ T35] hsr_slave_0: left promiscuous mode [ 425.452664][ T35] hsr_slave_1: left promiscuous mode [ 425.461806][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.469241][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.483989][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.492111][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.529022][ T35] veth1_macvtap: left promiscuous mode [ 425.543040][ T35] veth0_macvtap: left promiscuous mode [ 425.548721][ T35] veth1_vlan: left promiscuous mode [ 425.559611][ T35] veth0_vlan: left promiscuous mode [ 426.663946][ T35] team0 (unregistering): Port device team_slave_1 removed [ 426.751982][ T35] team0 (unregistering): Port device team_slave_0 removed [ 427.173228][T12493] syz-executor.1[12493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 427.173651][T12493] syz-executor.1[12493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 428.963924][ T29] audit: type=1804 audit(1718462254.568:1614): pid=12514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2093900102/syzkaller.mmQtKv/80/bus" dev="sda1" ino=1941 res=1 errno=0 [ 430.921956][ T29] audit: type=1326 audit(1718462256.548:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12544 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea48e7cea9 code=0x0 [ 431.445978][T12558] loop2: detected capacity change from 0 to 32768 [ 431.460015][ T4862] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 431.467411][T12558] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (12558) [ 431.488057][T12558] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 431.511038][T12558] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 431.535503][T12558] BTRFS info (device loop2): using free-space-tree [ 431.650451][ T4862] usb 5-1: Using ep0 maxpacket: 16 [ 431.677273][ T4862] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.727361][ T4862] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 431.740297][T12558] loop2: detected capacity change from 32768 to 11 [ 431.757081][ T4862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 431.773193][T12558] syz-executor.2: attempt to access beyond end of device [ 431.773193][T12558] loop2: rw=2049, sector=10440, nr_sectors = 8 limit=11 [ 431.783796][ T4862] usb 5-1: SerialNumber: syz [ 431.815797][ T4862] cdc_acm 5-1:1.0: skipping garbage [ 431.828477][T12558] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 431.833283][ T4862] cdc_acm 5-1:1.0: invalid descriptor buffer length [ 431.864115][ T4862] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 431.878842][ T4862] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 431.887044][ T4862] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 432.017512][ T4862] usb 5-1: USB disconnect, device number 9 [ 432.018917][ T35] kworker/u8:2: attempt to access beyond end of device [ 432.018917][ T35] loop2: rw=67112961, sector=10440, nr_sectors = 8 limit=11 [ 432.055103][ T35] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 432.073825][ T35] kworker/u8:2: attempt to access beyond end of device [ 432.073825][ T35] loop2: rw=67112961, sector=10448, nr_sectors = 8 limit=11 [ 432.098274][ T35] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 432.125302][ T35] kworker/u8:2: attempt to access beyond end of device [ 432.125302][ T35] loop2: rw=67112961, sector=13448, nr_sectors = 8 limit=11 [ 432.155840][ T35] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0 [ 432.181589][T11235] BTRFS error (device loop2 state A): Transaction aborted (error -5) [ 432.197013][T11235] BTRFS: error (device loop2 state A) in __btrfs_free_extent:3222: errno=-5 IO failure [ 432.208690][T11235] BTRFS info (device loop2 state EA): forced readonly [ 432.220925][T11235] BTRFS error (device loop2 state EA): failed to run delayed ref for logical 5296128 num_bytes 12288 type 178 action 2 ref_mod 1: -5 [ 432.245345][T11235] BTRFS: error (device loop2 state EA) in btrfs_run_delayed_refs:2211: errno=-5 IO failure [ 432.266270][T11235] BTRFS info (device loop2 state EA): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 432.826486][ T5180] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 432.860012][ T5122] Bluetooth: hci1: command 0x0405 tx timeout [ 432.976925][T12646] fuse: Bad value for 'fd' [ 433.040067][ T5180] usb 1-1: Using ep0 maxpacket: 8 [ 433.056254][ T5180] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 433.077146][ T5180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.108924][ T5180] usb 1-1: Product: syz [ 433.118370][ T5180] usb 1-1: Manufacturer: syz [ 433.136382][ T5180] usb 1-1: SerialNumber: syz [ 433.152884][ T5180] usb 1-1: config 0 descriptor?? [ 433.354074][ T5180] msi2500 1-1:0.0: Registered as swradio16 [ 433.376789][T12631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.389997][ T5180] msi2500 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 433.410453][T12631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.456583][T12631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.492525][T12631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.535399][ T5176] usb 1-1: USB disconnect, device number 16 [ 433.967623][ T5133] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 433.992457][ T1090] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.003437][ T5133] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 434.020662][ T5133] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 434.041734][ T5133] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 434.050664][ T5133] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 434.078849][ T5133] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 434.115720][ T1090] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.295651][ T1090] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.449507][ T1090] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.899829][ T1090] bridge_slave_1: left allmulticast mode [ 434.916575][ T1090] bridge_slave_1: left promiscuous mode [ 434.936081][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.974278][ T1090] bridge_slave_0: left allmulticast mode [ 434.990033][ T1090] bridge_slave_0: left promiscuous mode [ 435.011063][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.140159][T12750] block nbd4: Device being setup by another task [ 436.146685][ T5133] Bluetooth: hci4: command tx timeout [ 436.193848][T12746] block nbd4: shutting down sockets [ 436.634208][ T1090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.690487][ T1090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.908265][ T1090] bond0 (unregistering): Released all slaves [ 437.314151][T12659] chnl_net:caif_netlink_parms(): no params data found [ 437.885355][T12794] serio: Serial port pts0 [ 438.176658][T12659] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.200008][T12659] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.220985][ T5133] Bluetooth: hci4: command tx timeout [ 438.230968][T12659] bridge_slave_0: entered allmulticast mode [ 438.248042][T12659] bridge_slave_0: entered promiscuous mode [ 438.269902][ T1090] hsr_slave_0: left promiscuous mode [ 438.277209][ T1090] hsr_slave_1: left promiscuous mode [ 438.288246][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.312936][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.322751][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.330462][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.367036][ T1090] veth1_macvtap: left promiscuous mode [ 438.372975][ T1090] veth0_macvtap: left promiscuous mode [ 438.379630][ T1090] veth1_vlan: left promiscuous mode [ 438.385376][ T1090] veth0_vlan: left promiscuous mode [ 439.204251][ T1090] team0 (unregistering): Port device team_slave_1 removed [ 439.303909][ T1090] team0 (unregistering): Port device team_slave_0 removed [ 439.600561][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.607661][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.217966][T12659] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.226843][T12659] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.234125][T12659] bridge_slave_1: entered allmulticast mode [ 440.241569][T12659] bridge_slave_1: entered promiscuous mode [ 440.301669][ T5133] Bluetooth: hci4: command tx timeout [ 440.413488][T12659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.457096][T12659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.595993][T12659] team0: Port device team_slave_0 added [ 440.610206][T12659] team0: Port device team_slave_1 added [ 440.689334][T12659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.705059][T12659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.735775][T12659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.761571][T12659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.773251][T12659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.815161][T12659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.019583][T12659] hsr_slave_0: entered promiscuous mode [ 441.040547][T12659] hsr_slave_1: entered promiscuous mode [ 441.126713][T12893] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 441.551920][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 441.629190][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 441.847126][T12923] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 442.380718][ T5133] Bluetooth: hci4: command tx timeout [ 442.751678][T12659] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 442.764241][T12659] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 442.806065][T12659] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 442.828783][T12959] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 442.853443][T12659] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 443.162805][T12659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.343881][T12659] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.384175][ T5175] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.391387][ T5175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.432350][ T5176] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.439512][ T5176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.506001][T12977] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 446.098339][ T29] audit: type=1804 audit(1718462271.708:1616): pid=13007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir108057286/syzkaller.hCR4To/193/file0" dev="sda1" ino=1967 res=1 errno=0 [ 446.278455][ T29] audit: type=1804 audit(1718462271.708:1617): pid=13011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir108057286/syzkaller.hCR4To/193/file0" dev="sda1" ino=1967 res=1 errno=0 [ 446.618355][T12659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.033915][T12659] veth0_vlan: entered promiscuous mode [ 447.079544][T12659] veth1_vlan: entered promiscuous mode [ 447.269125][T12659] veth0_macvtap: entered promiscuous mode [ 447.347541][T12659] veth1_macvtap: entered promiscuous mode [ 447.439937][T12659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.459048][T12659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.469463][T12659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.517877][T12659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.535862][T12659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.546648][T12659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.557606][T12659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.568105][T12659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.577965][T12659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.588482][T12659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.611321][T12659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.624865][T12659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.651355][T12659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.675414][T12659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.688420][T12659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.705664][T12659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.717638][T12659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.738375][T12659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.758719][T12659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.768988][T12659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.803722][T12659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.859276][T12659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.888843][T12659] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.949070][T12659] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.970060][T12659] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.997168][T12659] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.234023][ T5357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.264503][ T5357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.456400][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.464474][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.947030][T13098] fuse: Bad value for 'fd' [ 449.075996][T13100] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 449.240804][T13107] loop2: detected capacity change from 0 to 512 [ 449.255969][T13107] EXT4-fs: Ignoring removed i_version option [ 449.298884][T13107] EXT4-fs (loop2): orphan cleanup on readonly fs [ 449.317609][T13107] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz-executor.2: bad orphan inode 1 [ 449.368515][T13107] EXT4-fs (loop2): Remounting filesystem read-only [ 449.390258][T13107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 449.501313][T12659] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.994464][ T29] audit: type=1804 audit(1718462275.618:1618): pid=13133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir694988878/syzkaller.7OhKMZ/647/file0" dev="sda1" ino=1958 res=1 errno=0 [ 450.051584][T13136] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 450.548074][T13141] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 453.673408][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 453.742027][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 453.886905][T13241] loop4: detected capacity change from 0 to 1024 [ 453.921629][T13241] EXT4-fs: Ignoring removed nomblk_io_submit option [ 454.000282][T13241] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c018, mo2=0002] [ 454.049162][T13241] System zones: 0-1, 3-12 [ 454.081734][T13241] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.292230][T13252] binder: 13251:13252 ioctl 8008f513 20000280 returned -22 [ 454.470655][ T9842] EXT4-fs (loop4): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 455.920200][ T5176] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 456.111959][ T5176] usb 5-1: no configurations [ 456.116612][ T5176] usb 5-1: can't read configurations, error -22 [ 456.289964][ T5176] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 456.524018][ T5176] usb 5-1: no configurations [ 456.528668][ T5176] usb 5-1: can't read configurations, error -22 [ 456.580708][ T5176] usb usb5-port1: attempt power cycle [ 457.009962][ T5176] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 457.072694][ T5176] usb 5-1: no configurations [ 457.077400][ T5176] usb 5-1: can't read configurations, error -22 [ 457.251427][ T5176] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 457.311778][ T5176] usb 5-1: no configurations [ 457.316486][ T5176] usb 5-1: can't read configurations, error -22 [ 457.348217][ T5176] usb usb5-port1: unable to enumerate USB device [ 457.634633][T13334] loop2: detected capacity change from 0 to 32768 [ 457.823860][T13334] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 457.853405][T13334] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 457.898608][T13334] bcachefs (loop2): alloc_read... done [ 457.908190][T13334] bcachefs (loop2): stripes_read... done [ 457.919545][T13334] bcachefs (loop2): snapshots_read... done [ 457.946489][T13334] bcachefs (loop2): journal_replay... done [ 457.952744][T13334] bcachefs (loop2): resume_logged_ops... done [ 457.971004][T13334] bcachefs (loop2): going read-write [ 457.985416][T13334] bcachefs (loop2): done starting filesystem [ 458.074853][T13334] syz-executor.2 (13334) used greatest stack depth: 14904 bytes left [ 458.135307][T12659] bcachefs (loop2): shutting down [ 458.166108][T12659] bcachefs (loop2): going read-only [ 458.184528][T12659] bcachefs (loop2): finished waiting for writes to stop [ 458.215803][T12659] bcachefs (loop2): flushing journal and stopping allocators, journal seq 12 [ 458.272571][T12659] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 13 [ 458.292728][T12659] bcachefs (loop2): shutdown complete, journal seq 14 [ 458.302295][T12659] bcachefs (loop2): marking filesystem clean [ 458.366974][T12659] bcachefs (loop2): shutdown complete [ 459.080022][ T5175] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 459.269986][ T5175] usb 5-1: Using ep0 maxpacket: 8 [ 459.294534][ T5175] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 459.324303][ T5175] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.342635][ T5175] usb 5-1: Product: syz [ 459.357224][ T5175] usb 5-1: Manufacturer: syz [ 459.367356][ T5175] usb 5-1: SerialNumber: syz [ 459.384719][ T5175] usb 5-1: config 0 descriptor?? [ 459.517966][ T5175] msi2500 5-1:0.0: Registered as swradio16 [ 459.530161][ T5175] msi2500 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 459.611745][T13393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.640246][T13393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.670308][T13393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.692651][T13393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.745236][ T5175] usb 5-1: USB disconnect, device number 14 [ 461.751120][ T5175] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 461.960128][ T5175] usb 3-1: Using ep0 maxpacket: 8 [ 461.970009][ T5176] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 461.996195][ T5175] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 462.013183][ T5175] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.026985][ T5175] usb 3-1: Product: syz [ 462.032186][ T5175] usb 3-1: Manufacturer: syz [ 462.042295][ T5175] usb 3-1: SerialNumber: syz [ 462.054029][ T5175] usb 3-1: config 0 descriptor?? [ 462.184680][ T5175] msi2500 3-1:0.0: Registered as swradio16 [ 462.194585][ T5175] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 462.215382][ T5176] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 462.230146][ T5176] usb 1-1: can't read configurations, error -61 [ 462.275556][T13472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.308110][T13472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.334635][T13472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.355743][T13472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.390038][ T5176] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 462.421974][ T5173] usb 3-1: USB disconnect, device number 21 [ 462.602617][ T5176] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 462.629994][ T5176] usb 1-1: can't read configurations, error -61 [ 462.650469][ T5176] usb usb1-port1: attempt power cycle [ 463.080267][ T5176] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 463.145986][ T5176] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 463.164925][ T5176] usb 1-1: can't read configurations, error -61 [ 463.330676][ T5176] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 463.383609][ T5176] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 463.398075][ T5176] usb 1-1: can't read configurations, error -61 [ 463.406477][ T5176] usb usb1-port1: unable to enumerate USB device [ 464.652909][T13550] lo: entered allmulticast mode [ 465.396987][T13576] loop2: detected capacity change from 0 to 512 [ 465.468698][T13576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.520102][T13576] ext4 filesystem being mounted at /root/syzkaller-testdir1956057295/syzkaller.5qfDCr/41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.619413][T13576] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor.2: bg 0: block 256: padding at end of block bitmap is not set [ 465.653868][T13576] Quota error (device loop2): write_blk: dquota write failed [ 465.685362][T13576] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 465.720322][T13576] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 465.739996][T13576] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz-executor.2: Failed to acquire dquot type 1 [ 465.884381][T12659] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.899286][T13583] loop4: detected capacity change from 0 to 32768 [ 466.954333][T13583] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (13583) [ 467.023421][T13583] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 467.040744][T13583] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 467.069219][T13583] BTRFS info (device loop4): using free-space-tree [ 467.092835][ T29] audit: type=1804 audit(1718462292.718:1619): pid=13612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1956057295/syzkaller.5qfDCr/43/file0" dev="sda1" ino=1974 res=1 errno=0 [ 467.221533][T13616] fuse: Bad value for 'fd' [ 467.627162][T13631] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 468.287538][ T9842] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 468.339323][T13642] loop2: detected capacity change from 0 to 512 [ 468.434380][T13642] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino [ 468.501599][T13642] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 468.558242][T13642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.762012][T12659] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.330077][ T5180] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 469.536517][ T5180] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 469.549704][ T5180] usb 5-1: can't read configurations, error -61 [ 469.710113][ T5180] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 469.843451][T13677] loop2: detected capacity change from 0 to 32768 [ 469.853214][T13677] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (13677) [ 469.873981][T13677] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 469.889439][T13677] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 469.899647][T13677] BTRFS info (device loop2): using free-space-tree [ 469.926157][ T5180] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 469.942085][ T5180] usb 5-1: can't read configurations, error -61 [ 469.950957][ T5180] usb usb5-port1: attempt power cycle [ 470.045332][T12659] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 470.366061][ T5180] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 470.412750][ T5180] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 470.435065][ T5180] usb 5-1: can't read configurations, error -61 [ 470.604059][ T5180] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 470.673771][ T5180] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 470.696083][ T5180] usb 5-1: can't read configurations, error -61 [ 470.712278][ T5180] usb usb5-port1: unable to enumerate USB device [ 470.854685][ T29] audit: type=1804 audit(1718462296.478:1620): pid=13723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1956057295/syzkaller.5qfDCr/51/bus" dev="sda1" ino=1949 res=1 errno=0 [ 471.393047][T13746] fuse: Bad value for 'fd' [ 471.533172][ T29] audit: type=1804 audit(1718462297.158:1621): pid=13752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4159814444/syzkaller.fiHw0I/132/bus" dev="sda1" ino=1957 res=1 errno=0 [ 471.809526][T13767] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20002 [ 472.385247][ T5127] Bluetooth: hci2: command 0x0406 tx timeout [ 472.636262][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 472.868257][T13800] loop2: detected capacity change from 0 to 512 [ 472.913558][T13800] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 472.985106][T13800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 473.043757][T13800] ext4 filesystem being mounted at /root/syzkaller-testdir1956057295/syzkaller.5qfDCr/59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.140935][T13800] EXT4-fs error (device loop2): ext4_find_dest_de:2111: inode #2: block 3: comm syz-executor.2: bad entry in directory: directory entry overrun - offset=60, inode=15, rec_len=46528, size=2048 fake=0 [ 473.240716][T12659] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 473.463287][ T5173] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 473.688354][ T5173] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 473.712239][ T5173] usb 1-1: can't read configurations, error -61 [ 473.880024][ T5173] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 474.095421][ T5173] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 474.100365][ T925] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 474.129312][ T5173] usb 1-1: can't read configurations, error -61 [ 474.162772][ T5173] usb usb1-port1: attempt power cycle [ 474.300265][ T925] usb 5-1: Using ep0 maxpacket: 8 [ 474.309313][ T925] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 474.329901][ T925] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 474.369899][ T925] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 474.409981][ T925] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.444249][ T925] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 474.465247][ T925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.579993][ T5173] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 474.662171][ T5173] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 474.671625][ T5173] usb 1-1: can't read configurations, error -61 [ 474.699613][ T925] usb 5-1: GET_CAPABILITIES returned 0 [ 474.707979][ T925] usbtmc 5-1:16.0: can't read capabilities [ 474.860136][ T5173] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 474.914208][T13831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.930231][T13831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.932429][ T5173] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 474.947826][ T925] usb 5-1: USB disconnect, device number 19 [ 474.967143][ T5173] usb 1-1: can't read configurations, error -61 [ 474.987458][ T5173] usb usb1-port1: unable to enumerate USB device [ 475.896241][T13867] loop4: detected capacity change from 0 to 512 [ 475.998699][T13867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.039147][T13867] ext4 filesystem being mounted at /root/syzkaller-testdir108057286/syzkaller.hCR4To/238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.371759][ T9842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.670758][ T5180] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 476.860519][ T5180] usb 1-1: Using ep0 maxpacket: 8 [ 476.876443][ T5180] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 476.908595][ T5180] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 476.939727][ T5180] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 476.962747][ T5180] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 476.987621][ T5180] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 477.240322][ T5180] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.454667][ T5180] usb 1-1: GET_CAPABILITIES returned 0 [ 477.470039][ T5180] usbtmc 1-1:16.0: can't read capabilities [ 477.664160][T13885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.690353][T13885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.712820][ T925] usb 1-1: USB disconnect, device number 25 [ 479.548896][ T925] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 479.751432][ T925] usb 5-1: Using ep0 maxpacket: 8 [ 479.766080][ T925] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 479.789988][ T925] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 479.819443][ T925] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 479.849928][ T925] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.871078][ T925] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 479.900460][ T925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.129543][ T925] usb 5-1: GET_CAPABILITIES returned 0 [ 480.142342][ T925] usbtmc 5-1:16.0: can't read capabilities [ 480.336857][T13978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.346691][T13978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.358713][ T925] usb 5-1: USB disconnect, device number 20 [ 481.727563][ T29] audit: type=1804 audit(1718462307.348:1622): pid=14093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4159814444/syzkaller.fiHw0I/140/file0" dev="sda1" ino=1958 res=1 errno=0 [ 482.273403][T14099] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 483.179988][ T5178] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 483.409566][ T5178] usb 5-1: Using ep0 maxpacket: 8 [ 483.431303][ T5178] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 483.449903][ T5178] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 483.489913][ T5178] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 483.516914][ T5178] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 483.580289][ T5178] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 483.606347][ T5178] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.884435][ T5178] usb 5-1: GET_CAPABILITIES returned 0 [ 483.895912][ T5178] usbtmc 5-1:16.0: can't read capabilities [ 484.087999][T14104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.122091][T14104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.152584][ T5178] usb 5-1: USB disconnect, device number 21 [ 484.547071][ T5127] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 484.582826][ T4066] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.596797][ T5127] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 484.605901][ T5127] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 484.614238][ T5127] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 484.633119][ T5127] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 484.640797][ T5127] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 485.022758][ T4066] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.274241][ T4066] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.545177][ T4066] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.055252][ T4066] bridge_slave_1: left allmulticast mode [ 486.069504][ T4066] bridge_slave_1: left promiscuous mode [ 486.075447][ T4066] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.088655][ T4066] bridge_slave_0: left allmulticast mode [ 486.094804][ T4066] bridge_slave_0: left promiscuous mode [ 486.101732][ T4066] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.180617][ T5180] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 486.386699][T14151] loop4: detected capacity change from 0 to 32768 [ 486.399916][ T5180] usb 3-1: Using ep0 maxpacket: 8 [ 486.440348][ T5180] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 486.468052][ T5180] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 486.480593][ T5180] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 486.493317][ T5180] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 486.508832][ T5180] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 486.518243][T14151] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 486.527580][ T5180] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.709609][ T5127] Bluetooth: hci1: command tx timeout [ 486.807005][ T5180] usb 3-1: GET_CAPABILITIES returned 0 [ 486.842336][ T5180] usbtmc 3-1:16.0: can't read capabilities [ 486.992264][T14151] XFS (loop4): Ending clean mount [ 487.011820][T14170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.063199][T14151] XFS (loop4): Quotacheck needed: Please wait. [ 487.129215][T14170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.183566][T14151] XFS (loop4): Quotacheck: Done. [ 487.199107][ T5180] usb 3-1: USB disconnect, device number 22 [ 487.602830][ T9842] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 488.386902][T14241] fuse: Bad value for 'fd' [ 488.400959][ T29] audit: type=1804 audit(1718462314.018:1623): pid=14241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir3242305271/syzkaller.IiPPPX/469/file0" dev="sda1" ino=1963 res=1 errno=0 [ 488.640498][ T5178] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 488.790546][ T5127] Bluetooth: hci1: command tx timeout [ 488.831494][ T4066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.861145][ T5178] usb 5-1: Using ep0 maxpacket: 8 [ 488.892983][ T5178] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 488.934348][ T5178] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 488.964791][ T4066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.983632][ T5178] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 489.020034][ T5178] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 489.074992][ T4066] bond0 (unregistering): Released all slaves [ 489.100057][ T5178] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 489.109116][ T5178] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.328757][T14137] chnl_net:caif_netlink_parms(): no params data found [ 489.712861][T14239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.950352][T14239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.244068][ T5178] usb 5-1: usb_control_msg returned -71 [ 490.249716][ T5178] usbtmc 5-1:16.0: can't read capabilities [ 490.264764][ T5178] usb 5-1: USB disconnect, device number 22 [ 490.564301][ T5133] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 490.575988][ T5133] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 490.606279][ T5133] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 490.631400][ T5133] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 490.647941][ T5133] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 490.655780][ T5133] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 490.890191][ T5133] Bluetooth: hci1: command tx timeout [ 491.254023][ T4066] hsr_slave_0: left promiscuous mode [ 491.285893][ T4066] hsr_slave_1: left promiscuous mode [ 491.296602][ T4066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.313348][ T4066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.336841][ T4066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.358405][ T4066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.417798][ T4066] veth1_macvtap: left promiscuous mode [ 491.463635][ T4066] veth0_macvtap: left promiscuous mode [ 491.469397][ T4066] veth1_vlan: left promiscuous mode [ 491.495506][ T4066] veth0_vlan: left promiscuous mode [ 492.780341][ T5133] Bluetooth: hci4: command tx timeout [ 492.940460][ T5133] Bluetooth: hci1: command tx timeout [ 493.116651][ T29] audit: type=1326 audit(1718462318.728:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d7267cea9 code=0x0 [ 493.188481][ T4066] team0 (unregistering): Port device team_slave_1 removed [ 493.281477][ T4066] team0 (unregistering): Port device team_slave_0 removed [ 494.797752][T14137] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.838480][T14137] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.860049][ T5133] Bluetooth: hci4: command tx timeout [ 494.880091][T14137] bridge_slave_0: entered allmulticast mode [ 494.917647][T14137] bridge_slave_0: entered promiscuous mode [ 494.951754][T14137] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.958923][T14137] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.999160][T14137] bridge_slave_1: entered allmulticast mode [ 495.038371][T14137] bridge_slave_1: entered promiscuous mode [ 495.215814][T14137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.297592][T14137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.638050][T14137] team0: Port device team_slave_0 added [ 495.732728][T14137] team0: Port device team_slave_1 added [ 496.175730][T14137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.202226][T14137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.231717][T14137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.292500][T14137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.299490][T14137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.328444][T14137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.449368][T14137] hsr_slave_0: entered promiscuous mode [ 496.471230][T14137] hsr_slave_1: entered promiscuous mode [ 496.478872][T14137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 496.495987][T14137] Cannot create hsr debugfs directory [ 496.514054][T14294] chnl_net:caif_netlink_parms(): no params data found [ 496.804703][ T4066] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.940222][ T5133] Bluetooth: hci4: command tx timeout [ 497.103304][ T4066] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.241224][T14294] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.248432][T14294] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.271133][T14294] bridge_slave_0: entered allmulticast mode [ 497.290155][T14294] bridge_slave_0: entered promiscuous mode [ 497.311768][T14294] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.318931][T14294] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.346518][T14294] bridge_slave_1: entered allmulticast mode [ 497.371625][T14294] bridge_slave_1: entered promiscuous mode [ 497.562913][ T4066] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.827902][ T4066] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.982816][T14294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.075427][T14294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.209764][T14294] team0: Port device team_slave_0 added [ 498.354694][T14294] team0: Port device team_slave_1 added [ 498.496435][T14294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.520343][T14294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.607773][T14294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.670083][ T29] audit: type=1326 audit(1718462324.288:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14532 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f152007cea9 code=0x0 [ 498.800683][T14294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.807670][T14294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.869970][T14294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.020319][ T5133] Bluetooth: hci4: command tx timeout [ 499.283372][ T4066] bridge_slave_1: left allmulticast mode [ 499.295775][ T4066] bridge_slave_1: left promiscuous mode [ 499.309557][ T4066] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.335287][ T4066] bridge_slave_0: left allmulticast mode [ 499.347020][ T4066] bridge_slave_0: left promiscuous mode [ 499.356828][ T4066] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.380408][ T30] INFO: task kworker/0:1H:58 blocked for more than 143 seconds. [ 500.399986][ T30] Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 500.407659][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 2024/06/15 14:38:46 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 500.429903][ T30] task:kworker/0:1H state:D stack:25272 pid:58 tgid:58 ppid:2 flags:0x00004000 [ 500.459403][ T30] Workqueue: xfs-log/loop0 xlog_ioend_work [ 500.472078][ T30] Call Trace: [ 500.475377][ T30] [ 500.478325][ T30] __schedule+0x17e8/0x4a20 [ 500.550951][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.556672][ T30] ? __pfx___schedule+0x10/0x10 [ 500.587217][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.601514][ T30] ? __pfx_lock_release+0x10/0x10 [ 500.606576][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.612607][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 500.617661][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.623407][ T30] ? kthread_data+0x52/0xd0 [ 500.627936][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.633736][ T30] ? wq_worker_sleeping+0x66/0x240 [ 500.639970][ T30] ? schedule+0x90/0x320 [ 500.644255][ T30] schedule+0x14b/0x320 [ 500.648443][ T30] schedule_timeout+0xb0/0x310 [ 500.653353][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 500.658758][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 500.664837][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 500.677590][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.683387][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 500.688628][ T30] __down_common+0x343/0x7f0 [ 500.699950][ T30] ? __pfx___down_common+0x10/0x10 [ 500.705091][ T30] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 500.711147][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.716840][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 500.722154][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.728095][ T30] down+0x84/0xc0 [ 500.731920][ T30] ? xfs_buf_item_unpin+0x1dd/0x710 [ 500.737147][ T30] xfs_buf_lock+0x164/0x510 [ 500.743050][ T30] xfs_buf_item_unpin+0x1dd/0x710 [ 500.748108][ T30] ? __pfx_xfs_buf_item_unpin+0x10/0x10 [ 500.753810][ T30] xfs_trans_committed_bulk+0x677/0x850 [ 500.759408][ T30] ? __pfx_xfs_trans_committed_bulk+0x10/0x10 [ 500.765612][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.771377][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 500.776621][ T30] ? __wake_up_common_lock+0x18c/0x1e0 [ 500.782187][ T30] xlog_cil_committed+0x1d0/0x560 [ 500.787249][ T30] xlog_cil_process_committed+0x15c/0x1b0 [ 500.801434][ T30] xlog_state_shutdown_callbacks+0x2ba/0x3b0 [ 500.807459][ T30] ? __pfx_xlog_state_shutdown_callbacks+0x10/0x10 [ 500.824705][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.830565][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 500.835803][ T30] ? __wake_up_common_lock+0x18c/0x1e0 [ 500.851415][ T30] xlog_force_shutdown+0x32c/0x390 [ 500.856590][ T30] xlog_ioend_work+0xad/0x100 [ 500.861550][ T30] ? process_scheduled_works+0x945/0x1830 [ 500.867439][ T30] process_scheduled_works+0xa2e/0x1830 [ 500.873229][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 500.879245][ T30] ? assign_work+0x364/0x3d0 [ 500.883915][ T30] worker_thread+0x86d/0xd70 [ 500.888542][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 500.894619][ T30] ? __kthread_parkme+0x169/0x1d0 [ 500.899674][ T30] ? __pfx_worker_thread+0x10/0x10 [ 500.904951][ T30] kthread+0x2f2/0x390 [ 500.909050][ T30] ? __pfx_worker_thread+0x10/0x10 [ 500.914279][ T30] ? __pfx_kthread+0x10/0x10 [ 500.918900][ T30] ret_from_fork+0x4d/0x80 [ 500.925747][ T30] ? __pfx_kthread+0x10/0x10 [ 500.930497][ T30] ret_from_fork_asm+0x1a/0x30 [ 500.935316][ T30] [ 500.950111][ T30] INFO: task syz-executor.0:10871 blocked for more than 143 seconds. [ 500.959475][ T30] Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 500.979863][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 500.999904][ T30] task:syz-executor.0 state:D stack:22512 pid:10871 tgid:10870 ppid:7893 flags:0x00004006 [ 501.030735][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.035489][ T30] Call Trace: [ 501.037048][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.040335][ T30] [ 501.059933][ T30] __schedule+0x17e8/0x4a20 [ 501.064502][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.100739][ T30] ? __pfx___schedule+0x10/0x10 [ 501.105660][ T30] ? __pfx_lock_release+0x10/0x10 [ 501.130171][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.135865][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 501.160018][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.165801][ T30] ? schedule+0x90/0x320 [ 501.191158][ T30] schedule+0x14b/0x320 [ 501.195365][ T30] xlog_wait_on_iclog+0x501/0x770 [ 501.221034][ T30] ? __pfx_xlog_wait_on_iclog+0x10/0x10 [ 501.226621][ T30] ? __pfx_default_wake_function+0x10/0x10 [ 501.247882][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.262424][ T30] ? xlog_state_release_iclog+0x495/0x850 [ 501.268184][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.297527][ T30] ? xlog_force_lsn+0x801/0x9e0 [ 501.310181][ T30] xlog_force_lsn+0x523/0x9e0 [ 501.314913][ T30] ? __pfx_xlog_force_lsn+0x10/0x10 [ 501.337187][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 501.344181][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.349989][ T30] ? rcu_is_watching+0x15/0xb0 [ 501.355655][ T30] ? __xfs_trans_commit+0xb98/0x1290 [ 501.361064][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.366741][ T30] xfs_log_force_seq+0x1da/0x450 [ 501.373933][ T30] __xfs_trans_commit+0xb98/0x1290 [ 501.379087][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.384804][ T30] ? rcu_is_watching+0x15/0xb0 [ 501.389593][ T30] ? __pfx___xfs_trans_commit+0x10/0x10 [ 501.395324][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.401018][ T30] ? rcu_is_watching+0x15/0xb0 [ 501.405813][ T30] xfs_sync_sb_buf+0x2bb/0x350 [ 501.410737][ T30] ? __pfx_xfs_sync_sb_buf+0x10/0x10 [ 501.416047][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 501.421943][ T30] ? xfs_file_ioctl+0x1649/0x19e0 [ 501.427095][ T30] xfs_file_ioctl+0x165b/0x19e0 [ 501.432095][ T30] ? __pfx_xfs_file_ioctl+0x10/0x10 [ 501.437323][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.443026][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.448696][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 501.455247][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 501.462336][ T30] ? __pfx_lock_release+0x10/0x10 [ 501.467406][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.473222][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.478886][ T30] ? kfree+0x149/0x360 [ 501.485278][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.491058][ T30] ? tomoyo_path_number_perm+0x71a/0x880 [ 501.496726][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 501.502414][ T30] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 501.508468][ T30] ? __fget_files+0x29/0x470 [ 501.519874][ T30] ? __fget_files+0x3f6/0x470 [ 501.524603][ T30] ? __fget_files+0x29/0x470 [ 501.529319][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.535087][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.540819][ T30] ? security_file_ioctl+0x87/0xb0 [ 501.545950][ T30] ? __pfx_xfs_file_ioctl+0x10/0x10 [ 501.551278][ T30] __se_sys_ioctl+0xfe/0x170 [ 501.555900][ T30] do_syscall_64+0xf3/0x230 [ 501.561330][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.567254][ T30] RIP: 0033:0x7f49ace7cea9 [ 501.572137][ T30] RSP: 002b:00007f49adb2f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 501.580755][ T30] RAX: ffffffffffffffda RBX: 00007f49acfb3f80 RCX: 00007f49ace7cea9 [ 501.588753][ T30] RDX: 0000000020000080 RSI: 0000000041009432 RDI: 0000000000000006 [ 501.599302][ T30] RBP: 00007f49aceebff4 R08: 0000000000000000 R09: 0000000000000000 [ 501.607369][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.615501][ T30] R13: 000000000000000b R14: 00007f49acfb3f80 R15: 00007ffc52572fe8 [ 501.623558][ T30] [ 501.670011][ T30] [ 501.670011][ T30] Showing all locks held in the system: [ 501.685158][ T30] 3 locks held by kworker/0:1/9: [ 501.699880][ T30] #0: ffff888015078948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 501.749929][ T30] #1: ffffc900000e7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 501.799898][ T30] #2: ffffffff8f5e7a08 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 501.839872][ T30] 1 lock held by khungtaskd/30: [ 501.844760][ T30] #0: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 501.880069][ T30] 2 locks held by kworker/0:1H/58: [ 501.885213][ T30] #0: ffff88801eac0148 ((wq_completion)xfs-log/loop0){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 501.940170][ T30] #1: ffffc9000133fd00 ((work_completion)(&iclog->ic_end_io_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 501.963645][ T30] 2 locks held by kworker/u8:6/1090: [ 501.980049][ T30] 5 locks held by kworker/u8:8/4066: [ 501.985373][ T30] #0: ffff888015ed5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 502.009924][ T30] #1: ffffc9000c0f7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 502.030969][ T30] #2: ffffffff8f5db1d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 502.059906][ T30] #3: ffffffff8f5e7a08 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0 [ 502.068870][ T30] #4: ffffffff8e339378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 502.092669][ T30] 2 locks held by getty/4846: [ 502.097372][ T30] #0: ffff88802edda0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 502.107250][ T30] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 502.117482][ T30] 3 locks held by kworker/0:3/4862: [ 502.122762][ T30] #0: ffff888015078948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 502.133884][ T30] #1: ffffc9000343fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 502.144990][ T30] #2: ffffffff8f5e7a08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 502.156585][ T30] 2 locks held by syz-fu