last executing test programs: 1m34.128944943s ago: executing program 0 (id=660): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000580)={0x1023, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e22, @empty}}}, 0x108) 1m33.9720745s ago: executing program 0 (id=664): syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x1208000, 0x0, 0x4, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x28) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) renameat2(r0, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000040)='./file1\x00', 0x0) 1m33.834215736s ago: executing program 0 (id=667): syz_clone3(&(0x7f0000000600)={0x22028000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x0], 0x1}, 0x58) 1m32.875849588s ago: executing program 0 (id=673): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x3ac5048, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 1m32.652150658s ago: executing program 0 (id=676): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) munmap(&(0x7f0000525000/0x2000)=nil, 0x2000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1m29.493818276s ago: executing program 0 (id=691): syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x1208000, 0x0, 0x4, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x28) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) renameat2(r0, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000040)='./file1\x00', 0x0) 1m29.352200633s ago: executing program 32 (id=691): syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x1208000, 0x0, 0x4, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x28) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) renameat2(r0, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000040)='./file1\x00', 0x0) 35.259588064s ago: executing program 5 (id=1036): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'wlan0\x00', {0x2, 0x4e22, @empty=0x7f000000}}) 33.473021372s ago: executing program 5 (id=1041): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 33.336204909s ago: executing program 5 (id=1043): ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0xe2a40) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) 33.206529734s ago: executing program 5 (id=1045): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000d80)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d61736369692c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dd4a620e92c6e6f6465636f6d706f73652c747970653d5dbcce902c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d40f194712c626172726965720063726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c63726561746f723d8a7222832c7569643d", @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYBLOB="a520ad23321534a883fa116848e7295e8693132df1638d943e7dacc03c8d2d9fca2aeb72f72ed82af2ceb592a5eea7e56631ff9ac0d92bcc5e6859b316fd2ac8694577d071f3f31f92dfdbdd695e5edca5b90abb53107e708b90150fc9eee8418e9511b8a4ce6f69a31472378258a55e8aa64d4a9859bfb3d6d3e49cf0a4c8b0044d37812dd15af758d8177ad1d630193b27881a8a06b8221dbceefe3fbf199b81bc31338d35cf4cb9f7f28e7abc55afd41f3a8b4a1e3fc4cd2dece6d1659ab1fc8511c18f9bd3c80004efbd7cfda12866316c01cc4a69ca09f85189380f835231d8ae5332237152dc3ed45d7f88", @ANYRES64, @ANYRESDEC], 0x1, 0x703, &(0x7f0000001f80)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1004020, 0x0) 32.861306189s ago: executing program 5 (id=1046): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000300000000030000000200000002000000000000000000000105000020200000000000000000000003000000000200000002"], 0x0, 0x5a}, 0x20) 31.659971892s ago: executing program 5 (id=1051): r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000300)={0x200000, [[0x9ef8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xd], [0x10000, 0x0, 0x20000], [0x7]], '\x00', [{0x5}, {0x0, 0x5}, {}, {0x4, 0x80000000}, {0x3, 0x40000000, 0x0, 0x1, 0x1}, {0x0, 0x5f, 0x1}, {0xfffffffd}, {}, {0x0, 0x200006}, {0x0, 0xfffffffe}], '\x00', 0x1000}) 31.385881484s ago: executing program 33 (id=1051): r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000300)={0x200000, [[0x9ef8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xd], [0x10000, 0x0, 0x20000], [0x7]], '\x00', [{0x5}, {0x0, 0x5}, {}, {0x4, 0x80000000}, {0x3, 0x40000000, 0x0, 0x1, 0x1}, {0x0, 0x5f, 0x1}, {0xfffffffd}, {}, {0x0, 0x200006}, {0x0, 0xfffffffe}], '\x00', 0x1000}) 3.578923543s ago: executing program 1 (id=1219): sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYBLOB="010000000000000000000c000000280005801400f4800400020000000000080001000000000008"], 0x3c}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.691692202s ago: executing program 1 (id=1221): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x30}, @TCA_CGROUP_POLICE={0x0, 0x2, [@TCA_POLICE_AVRATE={0x0, 0x4, 0x2}, @TCA_POLICE_AVRATE={0x0, 0x4, 0xa}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x8}, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0xfffff055, 0xffff, 0x8, 0x80000001, 0x4, 0x9, 0x7f, 0xba, 0x6, 0xffff, 0x9, 0x5, 0x3e, 0x5, 0x6, 0x10, 0x3, 0x7, 0x40, 0x8, 0x5, 0x9, 0x8, 0x7, 0x2, 0x0, 0x7, 0x3, 0x3e4c, 0xffff0000, 0x5e, 0x3, 0xfffffff7, 0x8001, 0x400, 0xc, 0x2, 0xdaa, 0x8, 0x5, 0x4, 0x9, 0x6, 0x6, 0x5, 0x80000000, 0x401, 0x6, 0x80000001, 0xc, 0x80000000, 0x3, 0xb, 0xa49b, 0x1, 0x4, 0x180000, 0x110, 0x5, 0xad05, 0xffff8000, 0xaf, 0x5, 0x6, 0x7ff, 0x3, 0x8000, 0x7, 0x2, 0x9, 0x6, 0x8, 0x8, 0x1f, 0x2, 0x1, 0x8, 0x80, 0xb3c, 0xffffff80, 0x34, 0x752c, 0x3, 0x3ff, 0xffffffaf, 0xc, 0x2, 0x81, 0x4, 0x1000000, 0x9, 0x6, 0x0, 0x1000, 0x5, 0x2, 0x2, 0x763, 0x5, 0x4, 0x9, 0x589, 0x9, 0x1, 0xffff, 0x1, 0x1000, 0x4, 0x10001, 0x7, 0x8001, 0xc75e, 0x0, 0x6, 0x8, 0x0, 0x2, 0x1, 0x3, 0x3f2d, 0x666d, 0x1, 0x3, 0x7, 0x0, 0x2be6, 0xf5, 0x2, 0x80000000, 0x10, 0x6, 0x7, 0x7fff, 0xfb45, 0x1, 0x1, 0x0, 0x24d, 0x6, 0x5, 0x0, 0x4, 0x5, 0x8000, 0x7, 0x200, 0x68, 0x8, 0x26298000, 0xffff, 0x4, 0x9bb8, 0xfffffffe, 0x5, 0x9, 0x80, 0x58, 0x2, 0x0, 0x3, 0x4, 0x9, 0x4, 0xffff, 0xffff, 0x5, 0x1, 0x7, 0x2, 0x94a6, 0x5, 0x6, 0x4, 0x1, 0x3, 0x32c, 0x81, 0x7, 0xf, 0x7, 0xf6c75d4, 0x4, 0x1149, 0x5, 0x3, 0x8, 0x7, 0x5, 0x1f7c, 0x6, 0x1ff, 0x7, 0xc, 0x7933eede, 0xd1e, 0x5, 0x10000, 0x7fffffff, 0x401, 0x10, 0x8001, 0xfff, 0x4, 0xff, 0x4, 0x2, 0x0, 0x3, 0x1, 0x5, 0x4, 0x6, 0xb1d1, 0xffff, 0xad0, 0x7, 0x2, 0x1a, 0xf9, 0xb, 0x9, 0x9, 0x10000, 0x180000, 0x1, 0xa, 0x400, 0xc1, 0x9, 0x3a6e, 0x7, 0xd, 0x4, 0x0, 0x32, 0x1ff, 0x7, 0x5, 0xffffffff, 0x400, 0x1, 0xffff05e5, 0x3, 0xd, 0x0, 0x7ff, 0x200, 0x2, 0x1a9d0449, 0x0, 0xa, 0x0, 0x1, 0x80000000, 0x300000, 0xff]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x48090}, 0x4c000) 2.531757149s ago: executing program 1 (id=1223): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 2.472474991s ago: executing program 4 (id=1225): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) syz_io_uring_setup(0x50cf, &(0x7f0000000000)={0x0, 0xfffffffc, 0x40000, 0x2, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) 2.316929098s ago: executing program 1 (id=1226): syz_usb_connect(0x3, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0x45, 0x90, 0xb8, 0x8, 0x17ef, 0x721e, 0x8d3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x3, 0x50, 0x7, [{{0x9, 0x4, 0x70, 0x7, 0x0, 0xff, 0xff, 0xff, 0x6}}]}}]}}, &(0x7f0000000f40)={0x0, 0x0, 0x5, &(0x7f0000000d00)={0x5, 0xf, 0x5}}) 2.307259768s ago: executing program 4 (id=1228): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r3, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) 2.160164285s ago: executing program 4 (id=1230): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x50, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private2}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}]}, 0x50}}, 0x4040014) 1.733276324s ago: executing program 6 (id=1233): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x30}, @TCA_CGROUP_POLICE={0x0, 0x2, [@TCA_POLICE_AVRATE={0x0, 0x4, 0x2}, @TCA_POLICE_AVRATE={0x0, 0x4, 0xa}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x8}, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0xfffff055, 0xffff, 0x8, 0x80000001, 0x4, 0x9, 0x7f, 0xba, 0x6, 0xffff, 0x9, 0x5, 0x3e, 0x5, 0x6, 0x10, 0x3, 0x7, 0x40, 0x8, 0x5, 0x9, 0x8, 0x7, 0x2, 0x0, 0x7, 0x3, 0x3e4c, 0xffff0000, 0x5e, 0x3, 0xfffffff7, 0x8001, 0x400, 0xc, 0x2, 0xdaa, 0x8, 0x5, 0x4, 0x9, 0x6, 0x6, 0x5, 0x80000000, 0x401, 0x6, 0x80000001, 0xc, 0x80000000, 0x3, 0xb, 0xa49b, 0x1, 0x4, 0x180000, 0x110, 0x5, 0xad05, 0xffff8000, 0xaf, 0x5, 0x6, 0x7ff, 0x3, 0x8000, 0x7, 0x2, 0x9, 0x6, 0x8, 0x8, 0x1f, 0x2, 0x1, 0x8, 0x80, 0xb3c, 0xffffff80, 0x34, 0x752c, 0x3, 0x3ff, 0xffffffaf, 0xc, 0x2, 0x81, 0x4, 0x1000000, 0x9, 0x6, 0x0, 0x1000, 0x5, 0x2, 0x2, 0x763, 0x5, 0x4, 0x9, 0x589, 0x9, 0x1, 0xffff, 0x1, 0x1000, 0x4, 0x10001, 0x7, 0x8001, 0xc75e, 0x0, 0x6, 0x8, 0x0, 0x2, 0x1, 0x3, 0x3f2d, 0x666d, 0x1, 0x3, 0x7, 0x0, 0x2be6, 0xf5, 0x2, 0x80000000, 0x10, 0x6, 0x7, 0x7fff, 0xfb45, 0x1, 0x1, 0x0, 0x24d, 0x6, 0x5, 0x0, 0x4, 0x5, 0x8000, 0x7, 0x200, 0x68, 0x8, 0x26298000, 0xffff, 0x4, 0x9bb8, 0xfffffffe, 0x5, 0x9, 0x80, 0x58, 0x2, 0x0, 0x3, 0x4, 0x9, 0x4, 0xffff, 0xffff, 0x5, 0x1, 0x7, 0x2, 0x94a6, 0x5, 0x6, 0x4, 0x1, 0x3, 0x32c, 0x81, 0x7, 0xf, 0x7, 0xf6c75d4, 0x4, 0x1149, 0x5, 0x3, 0x8, 0x7, 0x5, 0x1f7c, 0x6, 0x1ff, 0x7, 0xc, 0x7933eede, 0xd1e, 0x5, 0x10000, 0x7fffffff, 0x401, 0x10, 0x8001, 0xfff, 0x4, 0xff, 0x4, 0x2, 0x0, 0x3, 0x1, 0x5, 0x4, 0x6, 0xb1d1, 0xffff, 0xad0, 0x7, 0x2, 0x1a, 0xf9, 0xb, 0x9, 0x9, 0x10000, 0x180000, 0x1, 0xa, 0x400, 0xc1, 0x9, 0x3a6e, 0x7, 0xd, 0x4, 0x0, 0x32, 0x1ff, 0x7, 0x5, 0xffffffff, 0x400, 0x1, 0xffff05e5, 0x3, 0xd, 0x0, 0x7ff, 0x200, 0x2, 0x1a9d0449, 0x0, 0xa, 0x0, 0x1, 0x80000000, 0x300000, 0xff]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x48090}, 0x4c000) 1.732872353s ago: executing program 4 (id=1234): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="97a797c5", 0xa797}], 0x1}}], 0x1, 0x0) 1.673351946s ago: executing program 6 (id=1235): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c562d066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) 1.550774242s ago: executing program 4 (id=1237): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b30, 0x1) 1.550544152s ago: executing program 6 (id=1238): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x50cf, 0x0, &(0x7f0000000080), &(0x7f0000ff4000)) 1.463133015s ago: executing program 6 (id=1241): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x6, 0x6f, 0x2, 0x0, 0x10, "88bd91aa28528000000000007500000400"}) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 1.276098794s ago: executing program 4 (id=1242): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)={0x40, 0x3, 0x2, "51ce"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) 1.208602807s ago: executing program 3 (id=1244): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [{0x2, 0x3}], {0x4, 0x1}, [], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x1) 1.14594103s ago: executing program 3 (id=1245): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x30}, @TCA_CGROUP_POLICE={0x0, 0x2, [@TCA_POLICE_AVRATE={0x0, 0x4, 0x2}, @TCA_POLICE_AVRATE={0x0, 0x4, 0xa}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x8}, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0xfffff055, 0xffff, 0x8, 0x80000001, 0x4, 0x9, 0x7f, 0xba, 0x6, 0xffff, 0x9, 0x5, 0x3e, 0x5, 0x6, 0x10, 0x3, 0x7, 0x40, 0x8, 0x5, 0x9, 0x8, 0x7, 0x2, 0x0, 0x7, 0x3, 0x3e4c, 0xffff0000, 0x5e, 0x3, 0xfffffff7, 0x8001, 0x400, 0xc, 0x2, 0xdaa, 0x8, 0x5, 0x4, 0x9, 0x6, 0x6, 0x5, 0x80000000, 0x401, 0x6, 0x80000001, 0xc, 0x80000000, 0x3, 0xb, 0xa49b, 0x1, 0x4, 0x180000, 0x110, 0x5, 0xad05, 0xffff8000, 0xaf, 0x5, 0x6, 0x7ff, 0x3, 0x8000, 0x7, 0x2, 0x9, 0x6, 0x8, 0x8, 0x1f, 0x2, 0x1, 0x8, 0x80, 0xb3c, 0xffffff80, 0x34, 0x752c, 0x3, 0x3ff, 0xffffffaf, 0xc, 0x2, 0x81, 0x4, 0x1000000, 0x9, 0x6, 0x0, 0x1000, 0x5, 0x2, 0x2, 0x763, 0x5, 0x4, 0x9, 0x589, 0x9, 0x1, 0xffff, 0x1, 0x1000, 0x4, 0x10001, 0x7, 0x8001, 0xc75e, 0x0, 0x6, 0x8, 0x0, 0x2, 0x1, 0x3, 0x3f2d, 0x666d, 0x1, 0x3, 0x7, 0x0, 0x2be6, 0xf5, 0x2, 0x80000000, 0x10, 0x6, 0x7, 0x7fff, 0xfb45, 0x1, 0x1, 0x0, 0x24d, 0x6, 0x5, 0x0, 0x4, 0x5, 0x8000, 0x7, 0x200, 0x68, 0x8, 0x26298000, 0xffff, 0x4, 0x9bb8, 0xfffffffe, 0x5, 0x9, 0x80, 0x58, 0x2, 0x0, 0x3, 0x4, 0x9, 0x4, 0xffff, 0xffff, 0x5, 0x1, 0x7, 0x2, 0x94a6, 0x5, 0x6, 0x4, 0x1, 0x3, 0x32c, 0x81, 0x7, 0xf, 0x7, 0xf6c75d4, 0x4, 0x1149, 0x5, 0x3, 0x8, 0x7, 0x5, 0x1f7c, 0x6, 0x1ff, 0x7, 0xc, 0x7933eede, 0xd1e, 0x5, 0x10000, 0x7fffffff, 0x401, 0x10, 0x8001, 0xfff, 0x4, 0xff, 0x4, 0x2, 0x0, 0x3, 0x1, 0x5, 0x4, 0x6, 0xb1d1, 0xffff, 0xad0, 0x7, 0x2, 0x1a, 0xf9, 0xb, 0x9, 0x9, 0x10000, 0x180000, 0x1, 0xa, 0x400, 0xc1, 0x9, 0x3a6e, 0x7, 0xd, 0x4, 0x0, 0x32, 0x1ff, 0x7, 0x5, 0xffffffff, 0x400, 0x1, 0xffff05e5, 0x3, 0xd, 0x0, 0x7ff, 0x200, 0x2, 0x1a9d0449, 0x0, 0xa, 0x0, 0x1, 0x80000000, 0x300000, 0xff]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x48090}, 0x4c000) 1.087808702s ago: executing program 6 (id=1246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_DST={0x8}, @RTA_SRC={0x8, 0x2, @rand_addr=0x64010100}]}, 0x2c}}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x4008004) mkdirat(0xffffffffffffff9c, 0x0, 0x27) r6 = socket$inet_udplite(0x2, 0x2, 0x88) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000540)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000240), 0x12) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRES32, @ANYRES16, @ANYRES8], 0x0, 0x23e, &(0x7f0000000800)="$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") setsockopt$ARPT_SO_SET_REPLACE(r6, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x218, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pimreg1\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1.082349022s ago: executing program 3 (id=1247): r0 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) process_vm_writev(r0, &(0x7f0000000400)=[{&(0x7f0000001440)=""/210, 0xd2}], 0x1, &(0x7f0000008740)=[{&(0x7f0000000440)=""/4092, 0xffc}], 0x1, 0x0) 982.699306ms ago: executing program 3 (id=1248): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000700)={0xa, 0x4e22, 0x0, @loopback, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x2, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x890}, 0x800) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000040)={0x4, 0x48, {0x51, 0x2, 0x5, {0x6}, {0xf68, 0x7}, @cond=[{0x7, 0x3, 0x6, 0x8, 0x6, 0x47}, {0x81, 0x5, 0x9, 0x6, 0x6, 0xd6}]}, {0x52, 0x5, 0x7f, {0x3, 0xfffc}, {0x200, 0x8001}, @const={0x6, {0x3, 0x7f, 0x7fff, 0xe6}}}}) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 896.10506ms ago: executing program 3 (id=1249): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x20, 0x0, 0x4e, 0xa}, [@ldst={0x5, 0x3, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x32) 860.867092ms ago: executing program 3 (id=1250): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080)=0x200ffff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 566.142865ms ago: executing program 2 (id=1251): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x50cf, 0x0, &(0x7f0000000080), &(0x7f0000ff4000)) 498.837707ms ago: executing program 2 (id=1252): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x80802, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc4, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0xb, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 317.053846ms ago: executing program 2 (id=1253): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000004d00)=@file={0x1, './file0\x00'}, 0x6e) 248.605039ms ago: executing program 2 (id=1254): ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000380)={{}, {0xb817}, 0x2f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)="350ce88d2544ccf9714fb4fa32333248cef2c702a7b538bf6d2e0610952e59435d2336fe2632dfd6e76cbeac42a738b8a3b192cc9625cf55a4110ffba1ff8d8069c835ca09888d7eeb40fb71a1721d312773", 0x52, 0x0, 0x0, 0x32}) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000004a00010200000000000000000a"], 0x28}}, 0x0) 247.738498ms ago: executing program 6 (id=1255): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r0, 0x5501) 168.091602ms ago: executing program 2 (id=1256): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000a20000/0x2000)=nil) 167.495192ms ago: executing program 1 (id=1257): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x30}, @TCA_CGROUP_POLICE={0x0, 0x2, [@TCA_POLICE_AVRATE={0x0, 0x4, 0x2}, @TCA_POLICE_AVRATE={0x0, 0x4, 0xa}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x8}, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0xfffff055, 0xffff, 0x8, 0x80000001, 0x4, 0x9, 0x7f, 0xba, 0x6, 0xffff, 0x9, 0x5, 0x3e, 0x5, 0x6, 0x10, 0x3, 0x7, 0x40, 0x8, 0x5, 0x9, 0x8, 0x7, 0x2, 0x0, 0x7, 0x3, 0x3e4c, 0xffff0000, 0x5e, 0x3, 0xfffffff7, 0x8001, 0x400, 0xc, 0x2, 0xdaa, 0x8, 0x5, 0x4, 0x9, 0x6, 0x6, 0x5, 0x80000000, 0x401, 0x6, 0x80000001, 0xc, 0x80000000, 0x3, 0xb, 0xa49b, 0x1, 0x4, 0x180000, 0x110, 0x5, 0xad05, 0xffff8000, 0xaf, 0x5, 0x6, 0x7ff, 0x3, 0x8000, 0x7, 0x2, 0x9, 0x6, 0x8, 0x8, 0x1f, 0x2, 0x1, 0x8, 0x80, 0xb3c, 0xffffff80, 0x34, 0x752c, 0x3, 0x3ff, 0xffffffaf, 0xc, 0x2, 0x81, 0x4, 0x1000000, 0x9, 0x6, 0x0, 0x1000, 0x5, 0x2, 0x2, 0x763, 0x5, 0x4, 0x9, 0x589, 0x9, 0x1, 0xffff, 0x1, 0x1000, 0x4, 0x10001, 0x7, 0x8001, 0xc75e, 0x0, 0x6, 0x8, 0x0, 0x2, 0x1, 0x3, 0x3f2d, 0x666d, 0x1, 0x3, 0x7, 0x0, 0x2be6, 0xf5, 0x2, 0x80000000, 0x10, 0x6, 0x7, 0x7fff, 0xfb45, 0x1, 0x1, 0x0, 0x24d, 0x6, 0x5, 0x0, 0x4, 0x5, 0x8000, 0x7, 0x200, 0x68, 0x8, 0x26298000, 0xffff, 0x4, 0x9bb8, 0xfffffffe, 0x5, 0x9, 0x80, 0x58, 0x2, 0x0, 0x3, 0x4, 0x9, 0x4, 0xffff, 0xffff, 0x5, 0x1, 0x7, 0x2, 0x94a6, 0x5, 0x6, 0x4, 0x1, 0x3, 0x32c, 0x81, 0x7, 0xf, 0x7, 0xf6c75d4, 0x4, 0x1149, 0x5, 0x3, 0x8, 0x7, 0x5, 0x1f7c, 0x6, 0x1ff, 0x7, 0xc, 0x7933eede, 0xd1e, 0x5, 0x10000, 0x7fffffff, 0x401, 0x10, 0x8001, 0xfff, 0x4, 0xff, 0x4, 0x2, 0x0, 0x3, 0x1, 0x5, 0x4, 0x6, 0xb1d1, 0xffff, 0xad0, 0x7, 0x2, 0x1a, 0xf9, 0xb, 0x9, 0x9, 0x10000, 0x180000, 0x1, 0xa, 0x400, 0xc1, 0x9, 0x3a6e, 0x7, 0xd, 0x4, 0x0, 0x32, 0x1ff, 0x7, 0x5, 0xffffffff, 0x400, 0x1, 0xffff05e5, 0x3, 0xd, 0x0, 0x7ff, 0x200, 0x2, 0x1a9d0449, 0x0, 0xa, 0x0, 0x1, 0x80000000, 0x300000, 0xff]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x48090}, 0x4c000) 149.853783ms ago: executing program 2 (id=1258): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 0s ago: executing program 1 (id=1259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0xffff1000, 0x8, r2, 0x9}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x4, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r2, 0x5}) kernel console output (not intermixed with test programs): omes ready [ 63.887252][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.899146][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.911722][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.933794][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.942503][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.951149][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.961214][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.998018][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.008182][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.019059][ T1203] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.026201][ T1203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.034994][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.045047][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.054816][ T1203] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.061955][ T1203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.070131][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.079815][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.088705][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.101184][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.109658][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.118997][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.137083][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.149779][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.173891][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.208868][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.217703][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.239207][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.248642][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.258244][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.268279][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.277031][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.286658][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.295272][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.306803][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.321802][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.348787][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.382474][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.390540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.398050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.414005][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.423999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.436667][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.449869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.459521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.474612][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.481915][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.501023][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.522562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.537954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.546344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.562668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.575268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.583982][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.591064][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.598845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.608405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.623641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.632539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.643029][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.650159][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.674736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.682830][ T4248] Bluetooth: hci1: command 0x041b tx timeout [ 64.685037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.699109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.708284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.718216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.731249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.757020][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.761018][ T4234] Bluetooth: hci2: command 0x041b tx timeout [ 64.764741][ T4248] Bluetooth: hci3: command 0x041b tx timeout [ 64.776574][ T4248] Bluetooth: hci0: command 0x041b tx timeout [ 64.783126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.791441][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.798963][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.807381][ T4248] Bluetooth: hci4: command 0x041b tx timeout [ 64.808495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.824142][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.831361][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.839179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.849787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.858391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.865948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.879625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.888242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.899455][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.927759][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.937508][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.947549][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.957137][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.968918][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.981443][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.017119][ T4187] device veth0_vlan entered promiscuous mode [ 65.037098][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.051747][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.068016][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.079236][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.088423][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.097549][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.106089][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.116960][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.125767][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.134255][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.143370][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.168637][ T4181] device veth0_vlan entered promiscuous mode [ 65.183646][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.196009][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.228126][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.237106][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.263983][ T4187] device veth1_vlan entered promiscuous mode [ 65.276011][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.292064][ T4181] device veth1_vlan entered promiscuous mode [ 65.302711][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.311833][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.319655][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.328598][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.368290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.381757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.394031][ T4187] device veth0_macvtap entered promiscuous mode [ 65.427489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.436961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.458514][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.472336][ T4187] device veth1_macvtap entered promiscuous mode [ 65.489756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.500663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.515630][ T4181] device veth0_macvtap entered promiscuous mode [ 65.529547][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.539475][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.548871][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.558564][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.569027][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.584820][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.596452][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.607951][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.618100][ T4181] device veth1_macvtap entered promiscuous mode [ 65.642118][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.651218][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.658645][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.675820][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.693962][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.703237][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.713731][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.723241][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.738026][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.748955][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.761209][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.771570][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.781717][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.790728][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.799429][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.816874][ T4182] device veth0_vlan entered promiscuous mode [ 65.826118][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.834140][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.843286][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.852774][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.861156][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.869582][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.877852][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.927428][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.943065][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.954224][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.965051][ T4182] device veth1_vlan entered promiscuous mode [ 65.976499][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.986865][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.995321][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.003934][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.012785][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.021612][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.030985][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.038785][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.053114][ T4181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.069686][ T4181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.078626][ T4181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.087384][ T4181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.099113][ T4186] device veth0_vlan entered promiscuous mode [ 66.138247][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.148504][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.182174][ T4186] device veth1_vlan entered promiscuous mode [ 66.190650][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.222941][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.232594][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.259385][ T4189] device veth0_vlan entered promiscuous mode [ 66.267321][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.276564][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.285341][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.295965][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.304304][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.315317][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.323643][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.335991][ T4182] device veth0_macvtap entered promiscuous mode [ 66.373418][ T4182] device veth1_macvtap entered promiscuous mode [ 66.391700][ T4189] device veth1_vlan entered promiscuous mode [ 66.399779][ T4186] device veth0_macvtap entered promiscuous mode [ 66.422758][ T4279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.429774][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.441602][ T4279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.448406][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.459023][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.469781][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.482848][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.490934][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.498962][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.507118][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.515315][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.524808][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.533741][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.541755][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.551238][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.559951][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.571933][ T4186] device veth1_macvtap entered promiscuous mode [ 66.591744][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.603224][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.613391][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.625903][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.637341][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.663443][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.677178][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.686944][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.692464][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.703153][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.720610][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.729497][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.741501][ T4182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.750542][ T4182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.759249][ T4182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.768866][ T4291] Bluetooth: hci1: command 0x040f tx timeout [ 66.775786][ T4182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.799431][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.816732][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.828385][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.846642][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.858097][ T4291] Bluetooth: hci4: command 0x040f tx timeout [ 66.869429][ T4291] Bluetooth: hci0: command 0x040f tx timeout [ 66.869515][ T4291] Bluetooth: hci3: command 0x040f tx timeout [ 66.869592][ T4291] Bluetooth: hci2: command 0x040f tx timeout [ 66.872605][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.872626][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.874447][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.895287][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.895927][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.916831][ T4189] device veth0_macvtap entered promiscuous mode [ 66.923972][ T4189] device veth1_macvtap entered promiscuous mode [ 66.926367][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.926387][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.926397][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.926410][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.926419][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.926431][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.926647][ T4279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.926690][ T4279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.927774][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.928299][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.928954][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.929563][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.930101][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.120614][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.129387][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.138543][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.161328][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.170129][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.193634][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.208890][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.278502][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.293211][ T4299] loop0: detected capacity change from 0 to 512 [ 67.316570][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.330004][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.340513][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.346126][ T4299] EXT4-fs (loop0): Ignoring removed nobh option [ 67.350391][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.350410][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.350419][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.350437][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.352173][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.390853][ T4299] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 67.404242][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.423988][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.424240][ T4299] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.7: attempt to clear invalid blocks 1 len 1 [ 67.448131][ T4299] EXT4-fs (loop0): Remounting filesystem read-only [ 67.465792][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.478299][ T4299] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 67.520310][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.531502][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.543537][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.549716][ T4303] process 'syz.1.2' launched '/dev/fd/5' with NULL argv: empty string added [ 67.553501][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.569945][ T4299] EXT4-fs (loop0): Remounting filesystem read-only [ 67.574891][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.586718][ T4299] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.7: invalid indirect mapped block 1819239214 (level 0) [ 67.591716][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.614910][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.616643][ T4299] EXT4-fs (loop0): Remounting filesystem read-only [ 67.626974][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.653193][ T4299] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.7: invalid indirect mapped block 1819239214 (level 1) [ 67.669072][ T4299] EXT4-fs (loop0): Remounting filesystem read-only [ 67.677961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.679406][ T4299] EXT4-fs (loop0): 1 truncate cleaned up [ 67.695345][ T4299] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,resuid=0x0000000000000000,jqfmt=vfsv1,errors=remount-ro,nobh,usrjquota=... Quota mode: writeback. [ 67.695652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.746841][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.759434][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.773748][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.788441][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.865706][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.876218][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.912362][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.958773][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.992036][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.009873][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.024709][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.048008][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.074221][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.084735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.103155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.112988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.169500][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.182522][ T4279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.208470][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.230805][ T4279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.272157][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.291385][ T4311] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5'. [ 68.292755][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.531597][ T4314] loop3: detected capacity change from 0 to 512 [ 68.559035][ T4315] loop4: detected capacity change from 0 to 512 [ 68.645223][ T4314] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.4: inode has both inline data and extents flags [ 68.678213][ T4324] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.678594][ T4314] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.4: couldn't read orphan inode 15 (err -117) [ 68.810525][ T4314] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,user_xattr,,errors=continue. Quota mode: writeback. [ 68.841063][ T4291] Bluetooth: hci1: command 0x0419 tx timeout [ 68.925226][ T4291] Bluetooth: hci2: command 0x0419 tx timeout [ 68.943008][ T4315] EXT4-fs (loop4): Test dummy encryption mode enabled [ 68.951213][ T4315] EXT4-fs (loop4): Test dummy encryption mode enabled [ 68.959092][ T4291] Bluetooth: hci3: command 0x0419 tx timeout [ 69.007840][ T4315] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,user_xattr,inode_readahead_blks=0x0000000000000800,barrier=0x000000000100000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x00. Quota mode: none. [ 69.043428][ T4291] Bluetooth: hci0: command 0x0419 tx timeout [ 69.049680][ T4291] Bluetooth: hci4: command 0x0419 tx timeout [ 69.325938][ T4315] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 69.354685][ T4347] loop2: detected capacity change from 0 to 1024 [ 69.389069][ T4347] EXT4-fs (loop2): Ignoring removed orlov option [ 69.459586][ T4347] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 69.604084][ T26] audit: type=1804 audit(1763619187.976:2): pid=4347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.17" name="/newroot/2/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 70.249482][ T4366] ======================================================= [ 70.249482][ T4366] WARNING: The mand mount option has been deprecated and [ 70.249482][ T4366] and is ignored by this kernel. Remove the mand [ 70.249482][ T4366] option from the mount to silence this warning. [ 70.249482][ T4366] ======================================================= [ 70.315010][ T4366] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 70.324228][ T4366] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 71.038382][ T4372] loop4: detected capacity change from 0 to 512 [ 71.113014][ T4374] loop2: detected capacity change from 0 to 128 [ 71.187920][ T4374] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.254520][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.261108][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.282823][ T4372] EXT4-fs (loop4): orphan cleanup on readonly fs [ 71.289271][ T4372] EXT4-fs error (device loop4): ext4_find_extent:893: inode #4: comm syz.4.24: inode has invalid extent depth: 7 [ 71.338372][ T4374] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.348611][ T4372] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117 [ 71.427723][ T4372] EXT4-fs warning (device loop4): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 71.483946][ T4372] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 71.498638][ T4372] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 71.889676][ T4386] tipc: Started in network mode [ 71.919784][ T4386] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 71.982530][ T4386] tipc: Enabled bearer , priority 10 [ 72.190559][ T4339] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.460280][ T4339] usb 5-1: Using ep0 maxpacket: 16 [ 72.600655][ T4339] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.640474][ T4339] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 72.700247][ T4339] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 72.772397][ T4403] device veth2 entered promiscuous mode [ 72.850750][ T4339] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.890276][ T4339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 72.898364][ T4339] usb 5-1: SerialNumber: syz [ 73.104659][ T4256] tipc: Node number set to 4269801488 [ 73.230004][ T4411] bridge0: port 3(erspan0) entered blocking state [ 73.253803][ T4411] bridge0: port 3(erspan0) entered disabled state [ 73.277482][ T4411] device erspan0 entered promiscuous mode [ 73.295638][ T4339] usb 5-1: USB disconnect, device number 2 [ 73.303752][ T4411] bridge0: port 3(erspan0) entered blocking state [ 73.310534][ T4411] bridge0: port 3(erspan0) entered forwarding state [ 73.700078][ T26] audit: type=1326 audit(1763619192.066:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4421 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa8e77c749 code=0x7ffc0000 [ 73.787000][ T26] audit: type=1326 audit(1763619192.066:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4421 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7faa8e77c749 code=0x7ffc0000 [ 73.880376][ T26] audit: type=1326 audit(1763619192.066:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4421 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa8e77c749 code=0x7ffc0000 [ 73.986927][ T26] audit: type=1326 audit(1763619192.066:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4421 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7faa8e77c749 code=0x7ffc0000 [ 74.058990][ T26] audit: type=1326 audit(1763619192.066:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4421 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa8e77c749 code=0x7ffc0000 [ 74.945122][ T4445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.52'. [ 74.960257][ T4432] netlink: 17 bytes leftover after parsing attributes in process `syz.4.49'. [ 76.231202][ T4443] bridge0: port 3(erspan0) entered disabled state [ 77.560352][ T4443] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.568459][ T4443] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.896569][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.941412][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.391668][ T4443] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.405741][ T4443] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.417136][ T4443] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.426380][ T4443] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.612455][ T4460] netlink: 'syz.0.57': attribute type 4 has an invalid length. [ 79.653867][ T4443] syz.2.53 (4443) used greatest stack depth: 20000 bytes left [ 79.735019][ T1324] cfg80211: failed to load regulatory.db [ 81.082717][ T4512] netlink: 'syz.2.71': attribute type 13 has an invalid length. [ 81.274403][ T4512] gretap0: refused to change device tx_queue_len [ 81.282276][ T4512] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 82.385003][ T4504] syz.0.70 (4504) used greatest stack depth: 17824 bytes left [ 83.830196][ C1] sched: RT throttling activated [ 86.121491][ T4521] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.129066][ T4521] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.429813][ T4569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.92'. [ 86.681859][ T26] audit: type=1326 audit(1763619205.056:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81647b8749 code=0x7fc00000 [ 86.872664][ T4521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.922878][ T4521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.229912][ T4521] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.240594][ T4521] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.262576][ T4521] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.316097][ T4521] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.351776][ T26] audit: type=1326 audit(1763619205.726:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f81647b8749 code=0x7fc00000 [ 87.432766][ T26] audit: type=1326 audit(1763619205.726:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81647b8749 code=0x7fc00000 [ 87.462170][ T26] audit: type=1326 audit(1763619205.726:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81647b8749 code=0x7fc00000 [ 87.484843][ T26] audit: type=1326 audit(1763619205.726:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81647b8749 code=0x7fc00000 [ 87.507020][ T26] audit: type=1326 audit(1763619205.726:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81647b8749 code=0x7fc00000 [ 87.537409][ T26] audit: type=1326 audit(1763619205.726:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81647b8749 code=0x7fc00000 [ 87.567156][ T26] audit: type=1326 audit(1763619205.726:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81647b8749 code=0x7fc00000 [ 87.595833][ T26] audit: type=1326 audit(1763619205.726:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81647b8749 code=0x7fc00000 [ 87.624627][ T26] audit: type=1326 audit(1763619205.726:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81647b8749 code=0x7fc00000 [ 87.690538][ T4234] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.440372][ T4556] netlink: 'syz.2.87': attribute type 5 has an invalid length. [ 88.447989][ T4556] netlink: 45 bytes leftover after parsing attributes in process `syz.2.87'. [ 89.065066][ T4234] usb 4-1: Using ep0 maxpacket: 8 [ 89.230574][ T4234] usb 4-1: unable to get BOS descriptor or descriptor too short [ 89.380906][ T4234] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 89.398685][ T4234] usb 4-1: can't read configurations, error -71 [ 90.876497][ T4623] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.884245][ T4623] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.193116][ T4623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.306188][ T4623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.457271][ T4623] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.466603][ T4623] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.477021][ T4623] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.486543][ T4623] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.753750][ T4633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'. [ 95.680034][ T4730] tipc: Trying to set illegal importance in message [ 95.941786][ T4737] netlink: 'syz.2.146': attribute type 4 has an invalid length. [ 96.259886][ T4751] loop0: detected capacity change from 0 to 16 [ 97.038510][ T4755] loop2: detected capacity change from 0 to 256 [ 97.399056][ T4755] FAT-fs (loop2): bogus number of FAT sectors [ 97.405618][ T4755] FAT-fs (loop2): Can't find a valid FAT filesystem [ 97.658416][ T4751] erofs: (device loop0): mounted with root inode @ nid 36. [ 98.260891][ T4775] xt_hashlimit: size too large, truncated to 1048576 [ 99.335327][ T4800] overlayfs: missing 'workdir' [ 99.586085][ T4806] loop0: detected capacity change from 0 to 256 [ 99.862906][ T4806] FAT-fs (loop0): bogus number of FAT sectors [ 99.869146][ T4806] FAT-fs (loop0): Can't find a valid FAT filesystem [ 101.056289][ T4832] loop1: detected capacity change from 0 to 512 [ 101.149401][ T4832] __quota_error: 50 callbacks suppressed [ 101.149419][ T4832] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=2 [ 101.176789][ T4832] EXT4-fs warning (device loop1): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 101.276847][ T4832] EXT4-fs (loop1): mount failed [ 101.492407][ T4847] loop3: detected capacity change from 0 to 256 [ 101.659739][ T4847] FAT-fs (loop3): bogus number of FAT sectors [ 101.666010][ T4847] FAT-fs (loop3): Can't find a valid FAT filesystem [ 102.216408][ T4241] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.300874][ T26] audit: type=1326 audit(1763619220.676:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4851 comm="syz.3.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d5cf749 code=0x7ffc0000 [ 102.428710][ T26] audit: type=1326 audit(1763619220.676:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4851 comm="syz.3.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d5cf749 code=0x7ffc0000 [ 102.510277][ T4241] usb 3-1: Using ep0 maxpacket: 8 [ 102.538777][ T26] audit: type=1326 audit(1763619220.716:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4851 comm="syz.3.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fdd7d5cf749 code=0x7ffc0000 [ 102.593261][ T26] audit: type=1326 audit(1763619220.716:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4851 comm="syz.3.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d5cf749 code=0x7ffc0000 [ 102.597434][ T4858] IPv6: sit1: Disabled Multicast RS [ 102.625874][ T26] audit: type=1326 audit(1763619220.716:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4851 comm="syz.3.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d5cf749 code=0x7ffc0000 [ 102.706102][ T4241] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 102.717878][ T4241] usb 3-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 102.746536][ T4241] usb 3-1: config 0 has no interface number 0 [ 102.960429][ T4241] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 102.982679][ T4241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.000475][ T4241] usb 3-1: Product: syz [ 103.009343][ T4241] usb 3-1: Manufacturer: syz [ 103.019890][ T4241] usb 3-1: SerialNumber: syz [ 103.058143][ T4241] usb 3-1: config 0 descriptor?? [ 103.413571][ T4256] usb 3-1: USB disconnect, device number 2 [ 105.118451][ T4885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'. [ 105.190422][ T4887] loop1: detected capacity change from 0 to 256 [ 105.245931][ T26] audit: type=1326 audit(1763619223.616:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa8e77c749 code=0x7ffc0000 [ 105.286646][ T4887] FAT-fs (loop1): bogus number of FAT sectors [ 105.293001][ T4887] FAT-fs (loop1): Can't find a valid FAT filesystem [ 105.305040][ T26] audit: type=1326 audit(1763619223.636:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa8e77c749 code=0x7ffc0000 [ 105.371669][ T4890] loop0: detected capacity change from 0 to 2048 [ 105.398397][ T26] audit: type=1326 audit(1763619223.676:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7faa8e77c749 code=0x7ffc0000 [ 105.482580][ T26] audit: type=1326 audit(1763619223.676:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faa8e77c783 code=0x7ffc0000 [ 106.588582][ T4907] loop0: detected capacity change from 0 to 256 [ 106.649810][ T4907] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.707136][ T4907] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 106.733221][ T4907] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 109.035138][ T4939] loop2: detected capacity change from 0 to 256 [ 109.076458][ T4939] FAT-fs (loop2): bogus number of FAT sectors [ 109.082789][ T4939] FAT-fs (loop2): Can't find a valid FAT filesystem [ 109.321708][ T4947] futex_wake_op: syz.3.213 tries to shift op by -1; fix this program [ 109.339898][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 109.339913][ T26] audit: type=1326 audit(1763619227.706:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d5cf749 code=0x7ffc0000 [ 109.386469][ T4945] netlink: 'syz.0.212': attribute type 1 has an invalid length. [ 109.468103][ T26] audit: type=1326 audit(1763619227.716:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fdd7d5cf749 code=0x7ffc0000 [ 109.565408][ T26] audit: type=1326 audit(1763619227.716:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d5cf749 code=0x7ffc0000 [ 109.659913][ T26] audit: type=1326 audit(1763619227.716:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fdd7d5cf749 code=0x7ffc0000 [ 109.785205][ T26] audit: type=1326 audit(1763619227.716:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d5cf749 code=0x7ffc0000 [ 111.116808][ T4932] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.124542][ T4932] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.423491][ T4986] loop0: detected capacity change from 0 to 256 [ 111.470646][ T4987] loop1: detected capacity change from 0 to 256 [ 111.515228][ T4987] FAT-fs (loop1): bogus number of FAT sectors [ 111.521891][ T4987] FAT-fs (loop1): Can't find a valid FAT filesystem [ 111.874164][ T4932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.936483][ T4932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.115123][ T4932] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.124348][ T4932] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.133975][ T4932] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.143616][ T4932] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.595772][ T5015] loop1: detected capacity change from 0 to 512 [ 113.603177][ T5011] loop4: detected capacity change from 0 to 2048 [ 113.720936][ T5011] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 113.810034][ T5015] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 114.002861][ T5033] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 114.042512][ T5033] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 96 with error 28 [ 114.055328][ T5033] EXT4-fs (loop4): This should not happen!! Data will be lost [ 114.055328][ T5033] [ 114.065537][ T5033] EXT4-fs (loop4): Total free blocks count 0 [ 114.071688][ T5033] EXT4-fs (loop4): Free/Dirty block details [ 114.077669][ T5033] EXT4-fs (loop4): free_blocks=2415919104 [ 114.084317][ T5033] EXT4-fs (loop4): dirty_blocks=112 [ 114.089547][ T5033] EXT4-fs (loop4): Block reservation details [ 114.095998][ T5033] EXT4-fs (loop4): i_reserved_data_blocks=7 [ 114.917367][ T5045] netlink: 60 bytes leftover after parsing attributes in process `syz.1.247'. [ 115.008143][ T4225] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 115.058163][ T4225] EXT4-fs (loop4): This should not happen!! Data will be lost [ 115.058163][ T4225] [ 115.933630][ T5056] overlayfs: failed to resolve './file2': -2 [ 117.242887][ T5081] loop1: detected capacity change from 0 to 512 [ 117.259358][ T5085] netlink: 104 bytes leftover after parsing attributes in process `syz.3.261'. [ 117.369842][ T5081] EXT4-fs (loop1): orphan cleanup on readonly fs [ 117.379005][ T5081] EXT4-fs error (device loop1): ext4_find_extent:893: inode #4: comm syz.1.259: inode has invalid extent depth: 7 [ 117.397884][ T5081] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 117.407771][ T5081] EXT4-fs warning (device loop1): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 117.480359][ T5081] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 117.487786][ T5081] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 119.551024][ T5112] overlayfs: failed to resolve './file2': -2 [ 120.410240][ T4654] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 120.690502][ T4654] usb 5-1: Using ep0 maxpacket: 32 [ 120.741140][ T4234] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.867587][ T4654] usb 5-1: config 0 has no interfaces? [ 120.875389][ T4654] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 120.929696][ T4654] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.043738][ T4234] usb 1-1: Using ep0 maxpacket: 32 [ 121.226305][ T4234] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 121.320568][ T4654] usb 5-1: config 0 descriptor?? [ 121.709458][ T4234] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.721068][ T4654] usb 5-1: USB disconnect, device number 3 [ 121.727609][ T4234] usb 1-1: config 0 has no interface number 0 [ 121.734012][ T4234] usb 1-1: config 0 interface 196 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 121.744689][ T4234] usb 1-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.762176][ T4234] usb 1-1: config 0 interface 196 has no altsetting 0 [ 121.840000][ T5149] fuse: Bad value for 'fd' [ 121.940668][ T4234] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 121.958731][ T4234] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 121.968269][ T4234] usb 1-1: Product: syz [ 121.979520][ T4234] usb 1-1: Manufacturer: syz [ 121.984401][ T4234] usb 1-1: SerialNumber: syz [ 122.016778][ T4234] usb 1-1: config 0 descriptor?? [ 122.186120][ T5157] overlayfs: failed to resolve './file2': -2 [ 122.981198][ T4234] ipheth 1-1:0.196: Unable to find endpoints [ 123.001809][ T4234] usb 1-1: USB disconnect, device number 2 [ 125.105963][ T5203] 9pnet_virtio: no channels available for device syz [ 125.170563][ T4234] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 125.440371][ T4234] usb 5-1: Using ep0 maxpacket: 16 [ 125.483927][ T5210] loop3: detected capacity change from 0 to 1024 [ 125.580091][ T5210] EXT4-fs (loop3): Ignoring removed nobh option [ 125.589269][ T5210] EXT4-fs (loop3): Ignoring removed bh option [ 125.602844][ T5210] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 125.654786][ T5210] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,data_err=abort,barrier=0x0000000000000001,dioread_nolock,grpjquota=,quota,data_err=ignore,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue. Quota mode: writeback. [ 125.791160][ T4234] usb 5-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 125.839300][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.887998][ T4234] usb 5-1: Product: syz [ 125.907247][ T4234] usb 5-1: Manufacturer: syz [ 125.916489][ T4234] usb 5-1: SerialNumber: syz [ 125.931297][ T4234] usb 5-1: config 0 descriptor?? [ 125.981435][ T4234] usb-storage 5-1:0.0: USB Mass Storage device detected [ 126.018005][ T4234] usb-storage 5-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 126.217587][ T4234] usb 5-1: USB disconnect, device number 4 [ 127.406623][ T5244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.319'. [ 127.437118][ T5244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.319'. [ 129.865038][ T5274] futex_wake_op: syz.4.328 tries to shift op by 32; fix this program [ 130.688272][ T5283] device wireguard0 entered promiscuous mode [ 131.850891][ T5298] netlink: 'syz.1.336': attribute type 12 has an invalid length. [ 132.921534][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.937202][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.460861][ T5327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.347'. [ 133.527252][ T5327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.347'. [ 134.956561][ T5366] loop1: detected capacity change from 0 to 256 [ 135.018852][ T5373] loop3: detected capacity change from 0 to 512 [ 135.069223][ T5366] exFAT-fs (loop1): invalid fs_name [ 135.086053][ T5366] exFAT-fs (loop1): failed to read boot sector [ 135.111455][ T5373] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 135.148443][ T5366] exFAT-fs (loop1): failed to recognize exfat type [ 135.156889][ T5373] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 135.202699][ T5373] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 135.248806][ T5373] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 135.260345][ T5373] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e041e01c, mo2=0000] [ 135.292680][ T5373] EXT4-fs (loop3): failed to initialize system zone (-117) [ 135.428761][ T5373] EXT4-fs (loop3): mount failed [ 136.675504][ T5395] netlink: 116 bytes leftover after parsing attributes in process `syz.1.374'. [ 136.716528][ T5395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'. [ 137.033409][ T5405] loop1: detected capacity change from 0 to 16 [ 137.950911][ T5406] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 138.240765][ T4576] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 138.614023][ T4576] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 138.627407][ T4576] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 138.650009][ T4576] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 138.673363][ T4576] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 138.726561][ T4576] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 139.020561][ T4576] usb 3-1: string descriptor 0 read error: -22 [ 139.029357][ T4576] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 139.090490][ T4576] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.160103][ T4576] usb 3-1: config 0 descriptor?? [ 139.211240][ T4576] hub 3-1:0.0: bad descriptor, ignoring hub [ 139.224076][ T4576] hub: probe of 3-1:0.0 failed with error -5 [ 139.248286][ T5447] capability: warning: `syz.0.390' uses deprecated v2 capabilities in a way that may be insecure [ 139.581040][ T4576] usb 3-1: USB disconnect, device number 3 [ 139.735049][ T26] audit: type=1326 audit(1763619258.106:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa8e77c749 code=0x7ffc0000 [ 139.786049][ T5467] netlink: 24 bytes leftover after parsing attributes in process `syz.4.400'. [ 139.796434][ T26] audit: type=1326 audit(1763619258.136:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7faa8e77c749 code=0x7ffc0000 [ 139.897685][ T26] audit: type=1326 audit(1763619258.136:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa8e77c749 code=0x7ffc0000 [ 139.933472][ T26] audit: type=1326 audit(1763619258.136:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7faa8e77c749 code=0x7ffc0000 [ 140.015436][ T26] audit: type=1326 audit(1763619258.136:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa8e77c749 code=0x7ffc0000 [ 140.058180][ T26] audit: type=1326 audit(1763619258.136:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7faa8e77c749 code=0x7ffc0000 [ 140.101045][ T26] audit: type=1326 audit(1763619258.136:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa8e77c749 code=0x7ffc0000 [ 140.165485][ T26] audit: type=1326 audit(1763619258.136:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7faa8e77c749 code=0x7ffc0000 [ 140.215996][ T26] audit: type=1326 audit(1763619258.136:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa8e77c749 code=0x7ffc0000 [ 140.319288][ T26] audit: type=1326 audit(1763619258.136:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7faa8e77c749 code=0x7ffc0000 [ 140.580941][ T5487] loop4: detected capacity change from 0 to 256 [ 140.645677][ T5487] FAT-fs (loop4): Unrecognized mount option "Socase" or missing value [ 141.012820][ T5496] syz.4.407[5496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.013409][ T5496] syz.4.407[5496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.289211][ T5550] xt_CT: No such helper "netbios-ns" [ 145.662442][ T5568] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 145.698306][ T5568] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 146.356761][ T5581] mmap: syz.2.440 (5581): VmData 49209344 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 147.007730][ T5598] netlink: 68 bytes leftover after parsing attributes in process `syz.0.448'. [ 147.284965][ T5605] syz.0.451[5605] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.285054][ T5605] syz.0.451[5605] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.538566][ T5620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.454'. [ 154.923147][ T5748] loop2: detected capacity change from 0 to 256 [ 155.033225][ T5748] FAT-fs (loop2): bogus number of FAT sectors [ 155.071175][ T5748] FAT-fs (loop2): Can't find a valid FAT filesystem [ 155.323374][ T5757] loop3: detected capacity change from 0 to 256 [ 155.435237][ T5757] FAT-fs (loop3): Directory bread(block 64) failed [ 155.470359][ T5757] FAT-fs (loop3): Directory bread(block 65) failed [ 155.477040][ T5757] FAT-fs (loop3): Directory bread(block 66) failed [ 155.500396][ T5757] FAT-fs (loop3): Directory bread(block 67) failed [ 155.507161][ T5757] FAT-fs (loop3): Directory bread(block 68) failed [ 155.520842][ T5757] FAT-fs (loop3): Directory bread(block 69) failed [ 155.537334][ T5757] FAT-fs (loop3): Directory bread(block 70) failed [ 155.577750][ T5757] FAT-fs (loop3): Directory bread(block 71) failed [ 155.630341][ T5757] FAT-fs (loop3): Directory bread(block 72) failed [ 155.637011][ T5757] FAT-fs (loop3): Directory bread(block 73) failed [ 159.579967][ T5824] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.526'. [ 159.616207][ T5824] netlink: 24 bytes leftover after parsing attributes in process `syz.1.526'. [ 160.172165][ T5824] Zero length message leads to an empty skb [ 161.328777][ T5855] loop3: detected capacity change from 0 to 256 [ 161.505065][ T5855] FAT-fs (loop3): bogus number of FAT sectors [ 161.541663][ T5855] FAT-fs (loop3): Can't find a valid FAT filesystem [ 162.423674][ T5874] device batadv_slave_0 entered promiscuous mode [ 162.439315][ T5874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.543'. [ 162.459156][ T5874] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 163.055753][ T5889] loop2: detected capacity change from 0 to 512 [ 163.158160][ T5889] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.549: inode has both inline data and extents flags [ 163.246969][ T5889] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.549: couldn't read orphan inode 15 (err -117) [ 163.271713][ T5889] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,user_xattr,,errors=continue. Quota mode: writeback. [ 163.531480][ T5914] loop4: detected capacity change from 0 to 2048 [ 163.548677][ T5919] loop2: detected capacity change from 0 to 512 [ 163.604235][ T5919] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 163.632620][ T5919] EXT4-fs (loop2): inline encryption not supported [ 163.673426][ T5914] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.677633][ T5919] EXT4-fs (loop2): Test dummy encryption mode enabled [ 163.691183][ T5919] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 163.698323][ T5919] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 163.730063][ T5919] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 163.751751][ T5919] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 163.777542][ T5919] System zones: 1-12 [ 163.807052][ T5919] EXT4-fs (loop2): 1 truncate cleaned up [ 163.813198][ T5919] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,,errors=continue. Quota mode: none. [ 164.748408][ T5977] loop0: detected capacity change from 0 to 256 [ 165.200843][ T5977] FAT-fs (loop0): bogus number of FAT sectors [ 165.522830][ T5977] FAT-fs (loop0): Can't find a valid FAT filesystem [ 169.196688][ T6042] loop1: detected capacity change from 0 to 512 [ 169.272977][ T6047] loop2: detected capacity change from 0 to 512 [ 169.304270][ T6042] EXT4-fs (loop1): Ignoring removed nobh option [ 169.367233][ T6042] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 169.376527][ T6047] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.576: inode has both inline data and extents flags [ 169.459352][ T6042] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.575: attempt to clear invalid blocks 1 len 1 [ 169.542786][ T6047] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.576: couldn't read orphan inode 15 (err -117) [ 169.551449][ T6042] EXT4-fs (loop1): Remounting filesystem read-only [ 169.577489][ T6047] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,user_xattr,,errors=continue. Quota mode: writeback. [ 169.583656][ T6042] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 169.641903][ T6042] EXT4-fs (loop1): Remounting filesystem read-only [ 169.680554][ T6042] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.575: invalid indirect mapped block 1819239214 (level 0) [ 169.719613][ T6042] EXT4-fs (loop1): Remounting filesystem read-only [ 169.739217][ T6042] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.575: invalid indirect mapped block 1819239214 (level 1) [ 169.779818][ T6042] EXT4-fs (loop1): Remounting filesystem read-only [ 169.799337][ T6042] EXT4-fs (loop1): 1 truncate cleaned up [ 169.809200][ T6042] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,resuid=0x0000000000000000,jqfmt=vfsv1,errors=remount-ro,nobh,usrjquota=... Quota mode: writeback. [ 171.125866][ T6082] loop3: detected capacity change from 0 to 1024 [ 171.179535][ T6082] EXT4-fs (loop3): Ignoring removed orlov option [ 171.215498][ T6082] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 171.260469][ T26] kauditd_printk_skb: 82 callbacks suppressed [ 171.260483][ T26] audit: type=1804 audit(1763619289.636:191): pid=6082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.583" name="/newroot/96/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 172.004541][ T6112] loop0: detected capacity change from 0 to 256 [ 172.687643][ T6112] FAT-fs (loop0): bogus number of FAT sectors [ 172.693856][ T6112] FAT-fs (loop0): Can't find a valid FAT filesystem [ 173.098701][ T6159] loop3: detected capacity change from 0 to 128 [ 173.154127][ T6159] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 173.185389][ T6159] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.711628][ T6189] netlink: 232 bytes leftover after parsing attributes in process `syz.3.601'. [ 173.923849][ T6196] loop1: detected capacity change from 0 to 1024 [ 174.052549][ T6203] loop0: detected capacity change from 0 to 256 [ 174.141914][ T6203] FAT-fs (loop0): bogus number of FAT sectors [ 174.148226][ T6203] FAT-fs (loop0): Can't find a valid FAT filesystem [ 174.166172][ T6196] EXT4-fs (loop1): Ignoring removed orlov option [ 174.493222][ T6196] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 174.778786][ T26] audit: type=1804 audit(1763619293.146:192): pid=6196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.606" name="/newroot/139/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 174.911051][ T6218] overlayfs: failed to resolve './file2': -2 [ 175.026219][ T6223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.609'. [ 175.171264][ T6225] overlayfs: failed to resolve './file2': -2 [ 177.212467][ T6303] overlayfs: overlapping lowerdir path [ 179.062098][ T6376] loop1: detected capacity change from 0 to 16 [ 179.079337][ T6370] netlink: 96 bytes leftover after parsing attributes in process `syz.4.641'. [ 179.144902][ T6376] erofs: (device loop1): mounted with root inode @ nid 36. [ 179.898487][ T6462] loop2: detected capacity change from 0 to 512 [ 180.026127][ T6462] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 180.048873][ T6462] EXT4-fs (loop2): inline encryption not supported [ 180.080649][ T6462] EXT4-fs (loop2): Test dummy encryption mode enabled [ 180.101391][ T6462] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 180.126187][ T6462] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 180.275434][ T6494] netlink: 'syz.0.658': attribute type 2 has an invalid length. [ 180.317237][ T6462] EXT4-fs (loop2): 1 truncate cleaned up [ 180.328158][ T6462] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 181.558531][ T6532] loop3: detected capacity change from 0 to 16 [ 181.703673][ T6532] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 181.729217][ T6548] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 181.816798][ T6540] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 181.828689][ T6540] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 182.163593][ T6571] loop2: detected capacity change from 0 to 2048 [ 182.310682][ T6571] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 182.490125][ T6587] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 182.509051][ T6587] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 442 with error 28 [ 182.524757][ T6587] EXT4-fs (loop2): This should not happen!! Data will be lost [ 182.524757][ T6587] [ 182.544716][ T6587] EXT4-fs (loop2): Total free blocks count 0 [ 182.585847][ T6587] EXT4-fs (loop2): Free/Dirty block details [ 182.592162][ T6587] EXT4-fs (loop2): free_blocks=2415919104 [ 182.599492][ T6587] EXT4-fs (loop2): dirty_blocks=448 [ 182.606558][ T6587] EXT4-fs (loop2): Block reservation details [ 182.614391][ T6587] EXT4-fs (loop2): i_reserved_data_blocks=28 [ 182.650489][ T6589] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 182.685515][ T6572] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.693080][ T6572] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.724143][ T6589] EXT4-fs (loop2): This should not happen!! Data will be lost [ 182.724143][ T6589] [ 184.144505][ T6614] futex_wake_op: syz.4.688 tries to shift op by -1; fix this program [ 184.154323][ T26] audit: type=1326 audit(1763619302.526:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe29a0b4749 code=0x7ffc0000 [ 184.177553][ T26] audit: type=1326 audit(1763619302.536:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fe29a0b4749 code=0x7ffc0000 [ 184.231565][ T26] audit: type=1326 audit(1763619302.536:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe29a0b4749 code=0x7ffc0000 [ 184.242567][ T6572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.270217][ T26] audit: type=1326 audit(1763619302.536:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fe29a0b4749 code=0x7ffc0000 [ 184.321513][ T26] audit: type=1326 audit(1763619302.536:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe29a0b4749 code=0x7ffc0000 [ 184.363217][ T6572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.640344][ T1324] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 184.793655][ T6572] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.802708][ T6572] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.811958][ T6572] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.821348][ T6572] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.945246][ T6581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.681'. [ 185.041030][ T6583] bridge1: port 1(veth3) entered blocking state [ 185.048498][ T6583] bridge1: port 1(veth3) entered disabled state [ 185.061629][ T6583] device veth3 entered promiscuous mode [ 185.075767][ T6585] bridge1: port 2(veth0_to_bond) entered blocking state [ 185.096745][ T6585] bridge1: port 2(veth0_to_bond) entered disabled state [ 185.106887][ T6585] device veth0_to_bond entered promiscuous mode [ 185.140516][ T1324] usb 5-1: config 192 has an invalid interface number: 162 but max is 0 [ 185.159100][ T1324] usb 5-1: config 192 has no interface number 0 [ 185.166706][ T1324] usb 5-1: config 192 interface 162 has no altsetting 0 [ 185.202810][ T6638] netlink: 'syz.1.692': attribute type 13 has an invalid length. [ 185.228131][ T6638] netlink: 24 bytes leftover after parsing attributes in process `syz.1.692'. [ 185.380506][ T1324] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3 [ 185.405838][ T1324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.455205][ T1324] usb 5-1: Product: syz [ 185.460523][ T1324] usb 5-1: Manufacturer: syz [ 185.465147][ T1324] usb 5-1: SerialNumber: syz [ 185.844368][ T1324] usb-storage 5-1:192.162: USB Mass Storage device detected [ 185.894545][ T1324] usb-storage 5-1:192.162: device ignored [ 185.991143][ T1324] usb 5-1: USB disconnect, device number 5 [ 186.058412][ T4482] Bluetooth: hci1: command 0x0406 tx timeout [ 186.066325][ T4482] Bluetooth: hci3: command 0x0406 tx timeout [ 186.081754][ T4482] Bluetooth: hci0: command 0x0406 tx timeout [ 186.082807][ T6727] netlink: 32 bytes leftover after parsing attributes in process `syz.3.701'. [ 186.104860][ T4482] Bluetooth: hci4: command 0x0406 tx timeout [ 186.362690][ T6817] netlink: 'syz.4.705': attribute type 27 has an invalid length. [ 186.397615][ T6817] device batadv_slave_0 left promiscuous mode [ 186.492546][ T6648] chnl_net:caif_netlink_parms(): no params data found [ 186.558715][ T6821] netlink: 36 bytes leftover after parsing attributes in process `syz.1.707'. [ 187.490390][ T1324] Bluetooth: hci2: command 0x0409 tx timeout [ 187.500866][ T6846] netlink: 20 bytes leftover after parsing attributes in process `syz.3.709'. [ 187.512774][ T6853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'. [ 187.531393][ T6853] device bridge_slave_1 left promiscuous mode [ 187.538346][ T6853] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.554029][ T6853] device bridge_slave_0 left promiscuous mode [ 187.560537][ T6853] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.931541][ T6648] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.931576][ T6648] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.932711][ T6648] device bridge_slave_0 entered promiscuous mode [ 187.934424][ T6648] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.934455][ T6648] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.935324][ T6648] device bridge_slave_1 entered promiscuous mode [ 188.103526][ T6648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.111768][ T6648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.195402][ T6648] team0: Port device team_slave_0 added [ 189.197704][ T6648] team0: Port device team_slave_1 added [ 189.399347][ T6648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.399366][ T6648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.399391][ T6648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.428980][ T6648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.428998][ T6648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.429023][ T6648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.669716][ T6648] device hsr_slave_0 entered promiscuous mode [ 189.687503][ T6648] device hsr_slave_1 entered promiscuous mode [ 189.730536][ T6648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.730645][ T6648] Cannot create hsr debugfs directory [ 190.200911][ T1324] Bluetooth: hci2: command 0x041b tx timeout [ 190.481152][ T6648] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 190.547603][ T6648] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 190.642693][ T6648] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 190.682163][ T6648] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 191.036680][ T6648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.124433][ T6648] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.240692][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.257797][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.314049][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.366793][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.421241][ T4438] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.428422][ T4438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.436367][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.445280][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.459409][ T4438] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.466628][ T4438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.490586][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.501390][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.551848][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.584129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.622950][ T7175] capability: warning: `syz.2.737' uses 32-bit capabilities (legacy support in use) [ 191.638664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.691342][ T6648] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 191.722809][ T6648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.753108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.791821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.837765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.888914][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.951298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.981183][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.012846][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.067797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.291196][ T4263] Bluetooth: hci2: command 0x040f tx timeout [ 192.621711][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.642621][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.700583][ T6648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.087283][ T7248] xt_bpf: check failed: parse error [ 193.571882][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.584761][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.504571][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.510918][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.560871][ T4263] Bluetooth: hci2: command 0x0419 tx timeout [ 194.774906][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.834371][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.861874][ T6648] device veth0_vlan entered promiscuous mode [ 195.309085][ T6648] device veth1_vlan entered promiscuous mode [ 195.684995][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 195.707937][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 195.773666][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.804328][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.820441][ T6648] device veth0_macvtap entered promiscuous mode [ 195.838504][ T6648] device veth1_macvtap entered promiscuous mode [ 195.866418][ T6648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.904162][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 195.923660][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.975768][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.035199][ T6648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.068370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.079742][ T7308] netlink: 348 bytes leftover after parsing attributes in process `syz.2.770'. [ 196.108763][ T7308] netlink: 20 bytes leftover after parsing attributes in process `syz.2.770'. [ 196.109349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.132789][ T7308] netlink: 20 bytes leftover after parsing attributes in process `syz.2.770'. [ 196.191000][ T6648] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.235474][ T6648] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.244963][ T6648] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.254053][ T6648] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.456078][ T4438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.495552][ T4438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.522869][ T4225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.533508][ T4225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.545723][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 196.578095][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 198.087639][ T7387] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 198.812033][ T7429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.785'. [ 198.937922][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.785'. [ 199.192215][ T7457] loop3: detected capacity change from 0 to 512 [ 200.228784][ T7513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.801'. [ 201.854328][ T7571] loop1: detected capacity change from 0 to 16 [ 201.929637][ T7571] erofs: (device loop1): mounted with root inode @ nid 36. [ 201.954352][ T4338] device hsr_slave_0 left promiscuous mode [ 201.954973][ T4338] device hsr_slave_1 left promiscuous mode [ 201.955687][ T4338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.956801][ T4338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.959995][ T4338] device bridge_slave_1 left promiscuous mode [ 201.961516][ T4338] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.033122][ T4338] device bridge_slave_0 left promiscuous mode [ 202.033276][ T4338] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.628161][ T7603] loop2: detected capacity change from 0 to 256 [ 202.667824][ T4338] team0 (unregistering): Port device team_slave_1 removed [ 203.233259][ T4338] team0 (unregistering): Port device team_slave_0 removed [ 203.479770][ T4338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.497649][ T4338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.932321][ T4338] bond0 (unregistering): Released all slaves [ 204.038871][ T7592] netlink: 12 bytes leftover after parsing attributes in process `syz.5.814'. [ 204.060839][ T7598] device batadv_slave_1 entered promiscuous mode [ 204.157434][ T7606] device batadv_slave_1 left promiscuous mode [ 204.446464][ T7661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.454222][ T7661] IPv6: NLM_F_CREATE should be set when creating new route [ 204.461513][ T7661] IPv6: NLM_F_CREATE should be set when creating new route [ 204.744410][ T7696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.834'. [ 206.830258][ T4291] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 207.190406][ T4291] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 207.203946][ T4291] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 207.231069][ T4291] usb 4-1: config 179 has no interface number 0 [ 207.256318][ T4291] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 207.297631][ T4291] usb 4-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 207.355864][ T4291] usb 4-1: config 179 interface 65 has no altsetting 0 [ 207.380931][ T4291] usb 4-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 207.409067][ T4291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.722900][ T4482] usb 4-1: USB disconnect, device number 4 [ 208.008669][ T7784] loop4: detected capacity change from 0 to 40427 [ 208.016915][ T7819] loop1: detected capacity change from 0 to 512 [ 208.110031][ T7784] F2FS-fs (loop4): quotafile must be on filesystem root [ 208.166590][ T7819] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #11: comm syz.1.855: ea_inode with extended attributes [ 208.280467][ T7819] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.855: error while reading EA inode 11 err=-117 [ 208.328428][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.857'. [ 208.338457][ T7819] EXT4-fs (loop1): 1 orphan inode deleted [ 208.361945][ T7819] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 208.387627][ T7842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.857'. [ 208.450237][ T4291] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 208.810326][ T4291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.870394][ T4291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.900954][ T4291] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 208.972373][ T4291] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 208.984025][ T4291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.028260][ T4291] usb 3-1: config 0 descriptor?? [ 209.116896][ T7880] loop5: detected capacity change from 0 to 1024 [ 209.177943][ T7880] EXT4-fs (loop5): Ignoring removed bh option [ 209.198262][ T7880] EXT4-fs (loop5): Ignoring removed nobh option [ 209.222234][ T7880] EXT4-fs (loop5): Ignoring removed bh option [ 209.243088][ T7880] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 209.325992][ T7880] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,bh,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 209.351999][ T4482] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 209.600403][ T4482] usb 5-1: Using ep0 maxpacket: 8 [ 209.620957][ T4291] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 211.022005][ T4291] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 211.043686][ T4482] usb 5-1: unable to get BOS descriptor or descriptor too short [ 211.152267][ T4482] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 211.160806][ T4482] usb 5-1: can't read configurations, error -71 [ 211.171921][ T4256] usb 3-1: USB disconnect, device number 4 [ 211.309304][ T7945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.871'. [ 211.345359][ T26] audit: type=1326 audit(1763619329.716:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7953 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81647b8749 code=0x7ffc0000 [ 211.431688][ T7935] fido_id[7935]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 211.457632][ T26] audit: type=1326 audit(1763619329.756:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7953 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f81647b8749 code=0x7ffc0000 [ 211.553667][ T26] audit: type=1326 audit(1763619329.756:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7953 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81647b8749 code=0x7ffc0000 [ 211.668042][ T26] audit: type=1326 audit(1763619329.756:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7953 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81647b8749 code=0x7ffc0000 [ 213.899801][ T8088] netlink: 32 bytes leftover after parsing attributes in process `syz.5.895'. [ 214.607197][ T8122] x_tables: duplicate underflow at hook 1 [ 217.876012][ T8219] loop2: detected capacity change from 0 to 256 [ 218.068186][ T8219] FAT-fs (loop2): bogus number of FAT sectors [ 218.105063][ T8219] FAT-fs (loop2): Can't find a valid FAT filesystem [ 219.790260][ T26] audit: type=1326 audit(1763619338.136:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.5.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe766a1f749 code=0x7ffc0000 [ 219.889241][ T26] audit: type=1326 audit(1763619338.146:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.5.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe766a1f749 code=0x7ffc0000 [ 219.990275][ T26] audit: type=1326 audit(1763619338.146:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.5.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe766a1f749 code=0x7ffc0000 [ 220.084502][ T26] audit: type=1326 audit(1763619338.146:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.5.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe766a1f749 code=0x7ffc0000 [ 220.118619][ T8249] 9p: Unknown access argument a [ 220.190279][ T26] audit: type=1326 audit(1763619338.146:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.5.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe766a1f749 code=0x7ffc0000 [ 220.829573][ T26] audit: type=1326 audit(1763619339.196:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.5.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe766a1f749 code=0x7ffc0000 [ 221.370877][ T26] audit: type=1326 audit(1763619339.236:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.5.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe766a1f749 code=0x7ffc0000 [ 222.763138][ T8268] loop1: detected capacity change from 0 to 40427 [ 222.796309][ T8357] loop3: detected capacity change from 0 to 256 [ 222.957186][ T8357] FAT-fs (loop3): bogus number of FAT sectors [ 222.963417][ T8357] FAT-fs (loop3): Can't find a valid FAT filesystem [ 223.036698][ T8268] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff [ 223.087741][ T8268] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x2 [ 223.195138][ T8268] F2FS-fs (loop1): invalid crc value [ 223.284199][ T8268] F2FS-fs (loop1): Found nat_bits in checkpoint [ 223.412716][ T8383] loop2: detected capacity change from 0 to 7 [ 223.466865][ T8383] Dev loop2: unable to read RDB block 7 [ 223.510349][ T8383] loop2: unable to read partition table [ 223.546354][ T8383] loop2: partition table beyond EOD, truncated [ 223.575868][ T8390] binder: 8381:8390 ioctl 400c620e 200000000000 returned -22 [ 223.825374][ T8268] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 223.926965][ T8383] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 224.702749][ T3560] Dev loop2: unable to read RDB block 7 [ 224.722138][ T3560] loop2: unable to read partition table [ 224.727977][ T3560] loop2: partition table beyond EOD, truncated [ 224.938845][ T8425] loop4: detected capacity change from 0 to 512 [ 225.016746][ T8425] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 225.049096][ T8425] EXT4-fs (loop4): Ignoring removed orlov option [ 225.065752][ T8425] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 225.093085][ T8425] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002] [ 225.118543][ T8425] System zones: 1-12 [ 225.124186][ T8425] EXT4-fs (loop4): orphan cleanup on readonly fs [ 225.132528][ T8425] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.969: invalid indirect mapped block 12 (level 1) [ 225.157332][ T8425] EXT4-fs (loop4): Remounting filesystem read-only [ 225.167449][ T8425] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.969: invalid indirect mapped block 2 (level 2) [ 225.190918][ T8425] EXT4-fs (loop4): Remounting filesystem read-only [ 225.203858][ T8425] EXT4-fs (loop4): 1 truncate cleaned up [ 225.239144][ T8425] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,mblk_io_submit,noload,errors=remount-ro,orlov. Quota mode: none. [ 225.619306][ T8451] loop4: detected capacity change from 0 to 256 [ 226.684308][ T8451] FAT-fs (loop4): bogus number of FAT sectors [ 226.690673][ T8451] FAT-fs (loop4): Can't find a valid FAT filesystem [ 226.767367][ T8470] loop3: detected capacity change from 0 to 8 [ 226.958835][ T8470] SQUASHFS error: zlib decompression failed, data probably corrupt [ 227.050627][ T8470] SQUASHFS error: Failed to read block 0x4de: -5 [ 227.098027][ T8490] loop1: detected capacity change from 0 to 1024 [ 227.141900][ T8470] SQUASHFS error: Failed to read block 0x4e2: -5 [ 227.171826][ T8490] JBD2: no valid journal superblock found [ 227.178073][ T8490] EXT4-fs (loop1): error loading journal [ 227.312258][ T8470] SQUASHFS error: Failed to read block 0x9ca: -5 [ 227.380406][ T8470] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 227.387086][ T8470] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 227.393836][ T8470] SQUASHFS error: Failed to read block 0x535f2: -5 [ 227.416101][ T26] audit: type=1800 audit(1763619345.784:209): pid=8470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.979" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 228.399383][ T8547] loop3: detected capacity change from 0 to 256 [ 229.366434][ T8547] FAT-fs (loop3): bogus number of FAT sectors [ 229.372824][ T8547] FAT-fs (loop3): Can't find a valid FAT filesystem [ 229.768629][ T8569] loop3: detected capacity change from 0 to 1024 [ 229.833664][ T8569] EXT4-fs (loop3): Ignoring removed orlov option [ 229.928980][ T8569] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,orlov,jqfmt=vfsold,nodelalloc,,errors=continue. Quota mode: none. [ 230.028093][ T8569] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.086870][ T8569] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.999: inode has both inline data and extents flags [ 231.799719][ T8615] loop2: detected capacity change from 0 to 1024 [ 233.482685][ T8634] loop3: detected capacity change from 0 to 256 [ 233.990732][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #300!!! [ 234.000185][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 234.010166][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 234.020167][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 234.030165][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 234.040159][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 234.049181][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 234.058185][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 234.067177][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 234.076311][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 234.181836][ T8634] FAT-fs (loop3): bogus number of FAT sectors [ 234.187985][ T8634] FAT-fs (loop3): Can't find a valid FAT filesystem [ 234.299428][ T8656] loop4: detected capacity change from 0 to 512 [ 234.411545][ T8656] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 234.429017][ T8656] EXT4-fs (loop4): Unrecognized mount option "seclabel" or missing value [ 238.958403][ T8745] loop4: detected capacity change from 0 to 512 [ 239.094518][ T8745] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 239.217947][ T8745] EXT4-fs (loop4): 1 orphan inode deleted [ 239.341162][ T8745] EXT4-fs (loop4): 1 truncate cleaned up [ 239.489949][ T8745] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 240.154102][ T8776] loop1: detected capacity change from 0 to 512 [ 240.787171][ T8776] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.1037: iget: bad i_size value: 360287970189639690 [ 240.946165][ T8776] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1037: couldn't read orphan inode 15 (err -117) [ 241.010672][ T8776] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 241.082932][ T8776] ext4 filesystem being mounted at /227/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.146664][ T8801] loop3: detected capacity change from 0 to 2048 [ 241.317227][ T8839] loop5: detected capacity change from 0 to 1024 [ 241.388604][ T8839] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 241.410881][ T8801] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 241.460370][ T6577] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 241.499540][ T8839] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 241.588232][ T6648] hfsplus: bad catalog entry type [ 241.600379][ T1324] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 241.615321][ T6648] hfsplus: bad catalog entry type [ 241.746328][ T6577] usb 5-1: Using ep0 maxpacket: 32 [ 242.640449][ T6577] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.660160][ T6577] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.680172][ T6577] usb 5-1: New USB device found, idVendor=046d, idProduct=c082, bcdDevice= 0.00 [ 242.689274][ T6577] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.707463][ T8871] loop3: detected capacity change from 0 to 2048 [ 242.710737][ T8875] loop2: detected capacity change from 0 to 256 [ 242.728535][ T6577] usb 5-1: config 0 descriptor?? [ 242.778670][ T8875] exFAT-fs (loop2): bogus number of FAT structure [ 242.793772][ T8875] exFAT-fs (loop2): failed to read boot sector [ 242.807359][ T8871] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.820743][ T1324] usb 2-1: config 1 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 242.834006][ T8875] exFAT-fs (loop2): failed to recognize exfat type [ 242.855663][ T1324] usb 2-1: config 1 interface 1 has no altsetting 0 [ 243.080751][ T1324] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 243.106046][ T1324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.156841][ T1324] usb 2-1: Product: syz [ 243.208218][ T1324] usb 2-1: Manufacturer: syz [ 243.229974][ T1324] usb 2-1: SerialNumber: syz [ 243.244592][ T6577] logitech-hidpp-device 0003:046D:C082.0002: hidraw0: USB HID v0.02 Device [HID 046d:c082] on usb-dummy_hcd.4-1/input0 [ 243.449395][ T6577] usb 5-1: USB disconnect, device number 8 [ 243.605131][ T8910] fido_id[8910]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 243.670667][ T1324] usb 2-1: 2:1 : invalid UAC_AS_GENERAL desc [ 243.806149][ T1324] usb 2-1: USB disconnect, device number 2 [ 244.172894][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.383956][ T9067] loop1: detected capacity change from 0 to 512 [ 244.536876][ T9067] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 244.583080][ T8920] chnl_net:caif_netlink_parms(): no params data found [ 245.650534][ T1324] Bluetooth: hci2: command 0x0409 tx timeout [ 245.810316][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 245.849261][ T8920] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.857984][ T8920] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.874331][ T8920] device bridge_slave_0 entered promiscuous mode [ 245.888220][ T8920] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.902261][ T8920] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.011705][ T8920] device bridge_slave_1 entered promiscuous mode [ 246.102799][ T9165] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1066'. [ 246.620322][ T23] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 246.647748][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.690200][ T23] usb 2-1: Product: syz [ 246.694467][ T23] usb 2-1: Manufacturer: syz [ 246.705066][ T23] usb 2-1: SerialNumber: syz [ 246.727199][ T23] r8152-cfgselector 2-1: config 0 descriptor?? [ 246.853095][ T8920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.928229][ T8920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.960235][ T4580] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 246.990380][ T23] r8152-cfgselector 2-1: Unknown version 0x0000 [ 247.010460][ T23] r8152-cfgselector 2-1: Unknown version 0x0000 [ 247.017032][ T23] r8152-cfgselector 2-1: bad CDC descriptors [ 247.060366][ T23] r8152-cfgselector 2-1: Unknown version 0x0000 [ 247.101901][ T23] r8152-cfgselector 2-1: USB disconnect, device number 3 [ 247.307994][ T8920] team0: Port device team_slave_0 added [ 248.511589][ T9250] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 248.934479][ T8920] team0: Port device team_slave_1 added [ 248.990440][ T4580] usb 5-1: New USB device found, idVendor=0a5c, idProduct=bd1f, bcdDevice=53.1a [ 249.009915][ T4580] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.052742][ T4256] Bluetooth: hci2: command 0x041b tx timeout [ 249.106665][ T4580] usb 5-1: Product: syz [ 249.135312][ T4580] usb 5-1: Manufacturer: syz [ 249.150227][ T4580] usb 5-1: SerialNumber: syz [ 249.172400][ T4580] usb 5-1: config 0 descriptor?? [ 249.220343][ T4580] usb 5-1: can't set config #0, error -71 [ 249.228865][ T4580] usb 5-1: USB disconnect, device number 9 [ 249.392665][ T6577] hid-generic 0005:0002:5508.0003: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 249.418189][ T8920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.448117][ T8920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.479724][ T8920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.494936][ T8920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.510451][ T8920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.552973][ T8920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.872751][ T9323] fido_id[9323]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory [ 250.322376][ T8920] device hsr_slave_0 entered promiscuous mode [ 250.548116][ T8920] device hsr_slave_1 entered promiscuous mode [ 250.830011][ T9385] loop4: detected capacity change from 0 to 512 [ 250.836029][ T9388] loop2: detected capacity change from 0 to 256 [ 250.872143][ T9385] EXT4-fs (loop4): Test dummy encryption mode enabled [ 250.879040][ T9385] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 250.909732][ T9390] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1087'. [ 250.938561][ T9388] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 250.950620][ T9409] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1087'. [ 250.959741][ T9409] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1087'. [ 250.989798][ T9388] FAT-fs (loop2): Directory bread(block 64) failed [ 251.000926][ T9388] FAT-fs (loop2): Directory bread(block 65) failed [ 251.003246][ T9385] EXT4-fs (loop4): 1 truncate cleaned up [ 251.015390][ T9388] FAT-fs (loop2): Directory bread(block 66) failed [ 251.029844][ T9388] FAT-fs (loop2): Directory bread(block 67) failed [ 251.030390][ T9385] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,journal_ioprio=0x0000000000000006,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none. [ 251.036675][ T9388] FAT-fs (loop2): Directory bread(block 68) failed [ 251.062237][ T9388] FAT-fs (loop2): Directory bread(block 69) failed [ 251.068848][ T9388] FAT-fs (loop2): Directory bread(block 70) failed [ 251.075469][ T9388] FAT-fs (loop2): Directory bread(block 71) failed [ 251.090172][ T4256] Bluetooth: hci2: command 0x040f tx timeout [ 251.096686][ T9388] FAT-fs (loop2): Directory bread(block 72) failed [ 251.103278][ T9388] FAT-fs (loop2): Directory bread(block 73) failed [ 251.309915][ T9385] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 251.550310][ T8920] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 251.570677][ T8920] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 251.580330][ T4256] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 251.596601][ T8920] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 251.612168][ T8920] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 251.840577][ T4256] usb 4-1: Using ep0 maxpacket: 16 [ 251.854704][ T8920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.901309][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.914725][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.948249][ T8920] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.982790][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.992621][ T4256] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.015662][ T4256] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 252.035464][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.058155][ T4225] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.065299][ T4225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.099334][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.112055][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.113329][ T4580] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 252.136130][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.148314][ T4225] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.155489][ T4225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.174578][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.212922][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.225199][ T4256] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 252.235912][ T4256] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.247715][ T4256] usb 4-1: Product: syz [ 252.252379][ T4256] usb 4-1: Manufacturer: syz [ 252.257217][ T4256] usb 4-1: SerialNumber: syz [ 252.275664][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 252.293746][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 252.306361][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.316331][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 252.333454][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 252.399370][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.434765][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 252.449422][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 252.458269][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.473164][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 252.482787][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.494934][ T9491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1093'. [ 252.496849][ T8920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 252.504733][ T4580] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 252.546738][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.557314][ T4580] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 252.620663][ T4256] usb 4-1: 0:2 : does not exist [ 252.664257][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.745746][ T4256] usb 4-1: USB disconnect, device number 5 [ 252.888576][ T4580] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 253.181553][ T4580] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.642800][ T1324] Bluetooth: hci2: command 0x0419 tx timeout [ 253.674449][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 253.679499][ T4580] usb 3-1: Product: syz [ 253.781515][ T4580] usb 3-1: Manufacturer: syz [ 253.786262][ T4580] usb 3-1: SerialNumber: syz [ 253.812930][ T4580] usb 3-1: config 0 descriptor?? [ 253.830542][ T9457] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 253.837984][ T9457] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 253.859154][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.868897][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.940060][ T8920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.136900][ T9457] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 254.156718][ T9564] loop1: detected capacity change from 0 to 256 [ 254.169470][ T9457] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 254.289313][ T9564] exfat: Deprecated parameter 'namecase' [ 254.366675][ T9564] exfat: Deprecated parameter 'namecase' [ 254.409439][ T9564] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 254.988236][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 255.005545][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 255.100637][ T4580] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 255.115744][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 255.131689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 255.144997][ T4580] usb 3-1: USB disconnect, device number 5 [ 255.268706][ T8920] device veth0_vlan entered promiscuous mode [ 255.291670][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 255.299683][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 255.357950][ T8920] device veth1_vlan entered promiscuous mode [ 255.528315][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 255.556066][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 255.563291][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.569710][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 255.569879][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.585774][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 255.623009][ T8920] device veth0_macvtap entered promiscuous mode [ 255.641460][ T8920] device veth1_macvtap entered promiscuous mode [ 255.728430][ T8920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.783916][ T8920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.806060][ T8920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.868662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 255.892029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 255.923190][ T9639] loop1: detected capacity change from 0 to 2048 [ 255.932172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 255.937058][ T9647] loop2: detected capacity change from 0 to 128 [ 255.941683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 256.016482][ T9] device hsr_slave_0 left promiscuous mode [ 256.062904][ T9647] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 256.073793][ T9] device hsr_slave_1 left promiscuous mode [ 256.080732][ T9647] ext4 filesystem being mounted at /225/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 256.142577][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.190519][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.238232][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.253899][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.277580][ T9] device bridge_slave_1 left promiscuous mode [ 256.290696][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.304485][ T9] device bridge_slave_0 left promiscuous mode [ 256.313470][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.329832][ T9] device veth1_macvtap left promiscuous mode [ 256.338085][ T9] device veth0_macvtap left promiscuous mode [ 256.362968][ T9] device veth1_vlan left promiscuous mode [ 256.427925][ T9] device veth0_vlan left promiscuous mode [ 256.558634][ T9676] loop4: detected capacity change from 0 to 1024 [ 256.647881][ T9676] EXT4-fs (loop4): quotafile must be on filesystem root [ 256.795456][ T9682] loop2: detected capacity change from 0 to 512 [ 256.981504][ T9682] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #3: comm syz.2.1119: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 257.026762][ T9682] EXT4-fs error (device loop2): ext4_quota_enable:6420: comm syz.2.1119: Bad quota inode: 3, type: 0 [ 257.044385][ T9682] EXT4-fs warning (device loop2): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 257.077999][ T9682] EXT4-fs (loop2): mount failed [ 257.220407][ T26] audit: type=1326 audit(1763619375.584:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9681 comm="syz.2.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7e0d2749 code=0x7ffc0000 [ 257.378691][ T26] audit: type=1326 audit(1763619375.614:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9681 comm="syz.2.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c7e0d2749 code=0x7ffc0000 [ 257.451710][ T26] audit: type=1326 audit(1763619375.614:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9681 comm="syz.2.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7e0d2749 code=0x7ffc0000 [ 257.459127][ T9703] loop4: detected capacity change from 0 to 512 [ 257.496039][ T26] audit: type=1326 audit(1763619375.614:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9681 comm="syz.2.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6c7e0d2749 code=0x7ffc0000 [ 257.529705][ T9707] loop2: detected capacity change from 0 to 256 [ 257.547169][ T26] audit: type=1326 audit(1763619375.614:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9681 comm="syz.2.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7e0d2749 code=0x7ffc0000 [ 257.562381][ T9703] EXT4-fs (loop4): fragment/cluster size (131072) != block size (4096) [ 257.571090][ T26] audit: type=1326 audit(1763619375.614:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9681 comm="syz.2.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f6c7e0d2749 code=0x7ffc0000 [ 257.605002][ T26] audit: type=1326 audit(1763619375.614:216): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=9681 comm="syz.2.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7e0d2749 code=0x7ffc0000 [ 257.649906][ T9707] FAT-fs (loop2): bogus number of FAT sectors [ 257.656392][ T9707] FAT-fs (loop2): Can't find a valid FAT filesystem [ 257.694397][ T26] audit: type=1326 audit(1763619375.614:217): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=9681 comm="syz.2.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f6c7e0d2749 code=0x7ffc0000 [ 257.776706][ T26] audit: type=1326 audit(1763619375.614:218): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=9681 comm="syz.2.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7e0d2749 code=0x7ffc0000 [ 257.879578][ T9] team0 (unregistering): Port device team_slave_1 removed [ 257.942783][ T9] team0 (unregistering): Port device team_slave_0 removed [ 257.977417][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.036090][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.211560][ T9] bond0 (unregistering): Released all slaves [ 258.342736][ T8920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.353378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 258.362565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 258.502271][ T8920] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.549799][ T8920] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.621401][ T8920] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.664971][ T8920] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.025469][ T4438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.046217][ T4438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.065053][ T9786] loop1: detected capacity change from 0 to 1024 [ 260.113187][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 260.162132][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.188462][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.254061][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 262.703828][ T9917] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 263.459159][ T9958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1172'. [ 263.570546][ T9964] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1171'. [ 263.610302][ T9964] tc_dump_action: action bad kind [ 264.130875][ T9992] loop3: detected capacity change from 0 to 8192 [ 265.350794][T10024] loop2: detected capacity change from 0 to 128 [ 265.559395][T10024] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 266.110385][T10024] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 266.367688][ T4439] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 266.581598][ T23] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 267.250429][ T23] usb 7-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 267.297181][ T23] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 267.547899][ T23] usb 7-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 267.557751][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.101589][T10108] loop2: detected capacity change from 0 to 1024 [ 268.299498][T10108] EXT4-fs (loop2): Ignoring removed orlov option [ 268.591011][T10108] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 268.766873][ T26] audit: type=1800 audit(1763619387.054:219): pid=10108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1203" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 269.471438][ T23] usb 7-1: config 0 descriptor?? [ 269.490277][ T23] usb 7-1: can't set config #0, error -71 [ 269.500331][ T23] usb 7-1: USB disconnect, device number 2 [ 269.551703][T10120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1205'. [ 270.497266][T10161] loop6: detected capacity change from 0 to 512 [ 270.542234][T10157] loop4: detected capacity change from 0 to 1024 [ 270.597846][T10161] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 270.683850][T10161] EXT4-fs error (device loop6): ext4_fill_super:4841: inode #2: comm syz.6.1214: inode has both inline data and extents flags [ 270.825398][T10161] EXT4-fs (loop6): get root inode failed [ 270.880384][T10179] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1219'. [ 270.927331][T10161] EXT4-fs (loop6): mount failed [ 271.998757][T10207] loop3: detected capacity change from 0 to 256 [ 272.114222][T10207] FAT-fs (loop3): bogus number of FAT sectors [ 272.120524][T10207] FAT-fs (loop3): Can't find a valid FAT filesystem [ 272.630281][ T4256] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 272.933690][ T4256] usb 2-1: Using ep0 maxpacket: 8 [ 273.190524][ T4256] usb 2-1: config 9 has an invalid interface number: 112 but max is 0 [ 273.190552][ T4256] usb 2-1: config 9 has no interface number 0 [ 273.190576][ T4256] usb 2-1: config 9 interface 112 has no altsetting 0 [ 273.391164][ T4256] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 8.d3 [ 273.409698][ T4256] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.426235][ T4256] usb 2-1: Product: syz [ 273.431090][T10315] loop6: detected capacity change from 0 to 256 [ 273.436942][ T4256] usb 2-1: Manufacturer: syz [ 273.440507][ T4580] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 273.442156][ T4256] usb 2-1: SerialNumber: syz [ 273.490856][T10315] FAT-fs (loop6): bogus number of FAT sectors [ 273.496995][T10315] FAT-fs (loop6): Can't find a valid FAT filesystem [ 273.831559][ T4256] r8152-cfgselector 2-1: Unknown version 0x0000 [ 273.891287][ T4256] r8152-cfgselector 2-1: Unknown version 0x0000 [ 273.928902][ T4256] r8152-cfgselector 2-1: USB disconnect, device number 4 [ 273.980411][ T4580] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 274.009957][ T4580] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.040487][ T4580] usb 5-1: Product: syz [ 274.044716][ T4580] usb 5-1: Manufacturer: syz [ 274.049338][ T4580] usb 5-1: SerialNumber: syz [ 274.080559][ T4580] usb 5-1: config 0 descriptor?? [ 274.134336][ T4580] ch341 5-1:0.0: ch341-uart converter detected [ 274.469061][T10375] [ 274.471520][T10375] ====================================================== [ 274.478636][T10375] WARNING: possible circular locking dependency detected [ 274.485677][T10375] syzkaller #0 Not tainted [ 274.490104][T10375] ------------------------------------------------------ [ 274.497137][T10375] syz.2.1258/10375 is trying to acquire lock: [ 274.503211][T10375] ffff88807b22cc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 274.514286][T10375] [ 274.514286][T10375] but task is already holding lock: [ 274.521738][T10375] ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 274.531407][T10375] [ 274.531407][T10375] which lock already depends on the new lock. [ 274.531407][T10375] [ 274.541814][T10375] [ 274.541814][T10375] the existing dependency chain (in reverse order) is: [ 274.550830][T10375] [ 274.550830][T10375] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 274.558823][T10375] __mutex_lock_common+0x1eb/0x2390 [ 274.564570][T10375] mutex_lock_nested+0x17/0x20 [ 274.569857][T10375] rfkill_register+0x33/0x8a0 [ 274.575064][T10375] hci_register_dev+0x452/0x970 [ 274.580440][T10375] vhci_create_device+0x32c/0x5c0 [ 274.585993][T10375] vhci_write+0x391/0x450 [ 274.590846][T10375] vfs_write+0x712/0xd00 [ 274.595609][T10375] ksys_write+0x14d/0x250 [ 274.600456][T10375] do_syscall_64+0x4c/0xa0 [ 274.605392][T10375] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 274.611806][T10375] [ 274.611806][T10375] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 274.619639][T10375] __mutex_lock_common+0x1eb/0x2390 [ 274.625378][T10375] mutex_lock_nested+0x17/0x20 [ 274.630674][T10375] vhci_send_frame+0x88/0x100 [ 274.635871][T10375] hci_send_frame+0x1a9/0x2e0 [ 274.641069][T10375] hci_tx_work+0x9f9/0x1710 [ 274.646091][T10375] process_one_work+0x863/0x1000 [ 274.651556][T10375] worker_thread+0xaa8/0x12a0 [ 274.656755][T10375] kthread+0x436/0x520 [ 274.661344][T10375] ret_from_fork+0x1f/0x30 [ 274.666283][T10375] [ 274.666283][T10375] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 274.675527][T10375] __flush_work+0xdd/0x1b0 [ 274.680466][T10375] hci_dev_do_close+0x1e7/0x1030 [ 274.685926][T10375] hci_unregister_dev+0x2d7/0x580 [ 274.691474][T10375] vhci_release+0x73/0xc0 [ 274.696336][T10375] __fput+0x234/0x930 [ 274.700875][T10375] task_work_run+0x125/0x1a0 [ 274.706002][T10375] do_exit+0x61e/0x20a0 [ 274.710687][T10375] do_group_exit+0x12e/0x300 [ 274.715805][T10375] __x64_sys_exit_group+0x3b/0x40 [ 274.721358][T10375] do_syscall_64+0x4c/0xa0 [ 274.726299][T10375] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 274.732727][T10375] [ 274.732727][T10375] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 274.740369][T10375] __mutex_lock_common+0x1eb/0x2390 [ 274.746086][T10375] mutex_lock_nested+0x17/0x20 [ 274.751371][T10375] bg_scan_update+0x44/0x3b0 [ 274.756483][T10375] process_one_work+0x863/0x1000 [ 274.761942][T10375] worker_thread+0xaa8/0x12a0 [ 274.767137][T10375] kthread+0x436/0x520 [ 274.771724][T10375] ret_from_fork+0x1f/0x30 [ 274.776664][T10375] [ 274.776664][T10375] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 274.786479][T10375] __lock_acquire+0x2c33/0x7c60 [ 274.791872][T10375] lock_acquire+0x197/0x3f0 [ 274.796906][T10375] __flush_work+0xdd/0x1b0 [ 274.801945][T10375] __cancel_work_timer+0x3ac/0x520 [ 274.807574][T10375] hci_request_cancel_all+0xcc/0x300 [ 274.813382][T10375] hci_dev_do_close+0x4e/0x1030 [ 274.818750][T10375] hci_rfkill_set_block+0x10a/0x190 [ 274.824473][T10375] rfkill_set_block+0x1c6/0x420 [ 274.829845][T10375] rfkill_fop_write+0x458/0x560 [ 274.835217][T10375] vfs_write+0x300/0xd00 [ 274.839976][T10375] ksys_write+0x14d/0x250 [ 274.844822][T10375] do_syscall_64+0x4c/0xa0 [ 274.849754][T10375] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 274.856167][T10375] [ 274.856167][T10375] other info that might help us debug this: [ 274.856167][T10375] [ 274.866386][T10375] Chain exists of: [ 274.866386][T10375] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 274.866386][T10375] [ 274.882109][T10375] Possible unsafe locking scenario: [ 274.882109][T10375] [ 274.889571][T10375] CPU0 CPU1 [ 274.894940][T10375] ---- ---- [ 274.900308][T10375] lock(rfkill_global_mutex); [ 274.905073][T10375] lock(&data->open_mutex); [ 274.912203][T10375] lock(rfkill_global_mutex); [ 274.919484][T10375] lock((work_completion)(&hdev->bg_scan_update)); [ 274.926072][T10375] [ 274.926072][T10375] *** DEADLOCK *** [ 274.926072][T10375] [ 274.934295][T10375] 1 lock held by syz.2.1258/10375: [ 274.939402][T10375] #0: ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 274.949517][T10375] [ 274.949517][T10375] stack backtrace: [ 274.955394][T10375] CPU: 1 PID: 10375 Comm: syz.2.1258 Not tainted syzkaller #0 [ 274.962842][T10375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 274.972905][T10375] Call Trace: [ 274.976184][T10375] [ 274.979113][T10375] dump_stack_lvl+0x168/0x230 [ 274.983787][T10375] ? load_image+0x3b0/0x3b0 [ 274.988296][T10375] ? show_regs_print_info+0x20/0x20 [ 274.993495][T10375] ? print_circular_bug+0x12b/0x1a0 [ 274.998693][T10375] check_noncircular+0x274/0x310 [ 275.003625][T10375] ? add_chain_block+0x940/0x940 [ 275.008557][T10375] ? lockdep_lock+0xdc/0x1e0 [ 275.013146][T10375] ? __lock_acquire+0x12d9/0x7c60 [ 275.018171][T10375] ? lockdep_lock+0x1e0/0x1e0 [ 275.022846][T10375] ? mark_lock+0x94/0x320 [ 275.027176][T10375] __lock_acquire+0x2c33/0x7c60 [ 275.032034][T10375] ? verify_lock_unused+0x140/0x140 [ 275.037239][T10375] ? verify_lock_unused+0x140/0x140 [ 275.042452][T10375] lock_acquire+0x197/0x3f0 [ 275.046955][T10375] ? __flush_work+0xc1/0x1b0 [ 275.051537][T10375] ? __lock_acquire+0x7c60/0x7c60 [ 275.056562][T10375] ? read_lock_is_recursive+0x10/0x10 [ 275.061936][T10375] ? start_flush_work+0x776/0x820 [ 275.066976][T10375] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 275.072869][T10375] ? _raw_spin_unlock+0x40/0x40 [ 275.077723][T10375] __flush_work+0xdd/0x1b0 [ 275.082138][T10375] ? __flush_work+0xc1/0x1b0 [ 275.086724][T10375] ? flush_work+0x20/0x20 [ 275.091049][T10375] ? try_to_grab_pending+0xf3/0x7e0 [ 275.096245][T10375] ? lockdep_hardirqs_off+0x70/0x100 [ 275.101556][T10375] ? mark_lock+0x94/0x320 [ 275.105886][T10375] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 275.111907][T10375] ? lock_chain_count+0x20/0x20 [ 275.116757][T10375] ? mark_lock+0x94/0x320 [ 275.121087][T10375] ? __cancel_work_timer+0x331/0x520 [ 275.126372][T10375] __cancel_work_timer+0x3ac/0x520 [ 275.131481][T10375] ? cancel_work_sync+0x20/0x20 [ 275.136346][T10375] ? __cancel_work+0x1f4/0x2d0 [ 275.141118][T10375] ? lockdep_hardirqs_on+0x94/0x140 [ 275.146322][T10375] ? __cancel_work+0x26f/0x2d0 [ 275.151088][T10375] ? cancel_work+0x20/0x20 [ 275.155503][T10375] ? lock_chain_count+0x20/0x20 [ 275.160355][T10375] hci_request_cancel_all+0xcc/0x300 [ 275.165647][T10375] hci_dev_do_close+0x4e/0x1030 [ 275.170499][T10375] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 275.176398][T10375] ? _raw_spin_unlock+0x40/0x40 [ 275.181254][T10375] hci_rfkill_set_block+0x10a/0x190 [ 275.186455][T10375] ? rcu_lock_release+0x20/0x20 [ 275.191305][T10375] rfkill_set_block+0x1c6/0x420 [ 275.196164][T10375] rfkill_fop_write+0x458/0x560 [ 275.201024][T10375] ? rfkill_fop_read+0x4b0/0x4b0 [ 275.205962][T10375] ? common_file_perm+0x130/0x1c0 [ 275.210992][T10375] ? fsnotify_perm+0x5d/0x560 [ 275.215671][T10375] ? security_file_permission+0x75/0xa0 [ 275.221216][T10375] ? rfkill_fop_read+0x4b0/0x4b0 [ 275.226167][T10375] vfs_write+0x300/0xd00 [ 275.230436][T10375] ? file_end_write+0x250/0x250 [ 275.235299][T10375] ? __fget_files+0x40f/0x480 [ 275.239979][T10375] ? __fdget_pos+0x1e2/0x370 [ 275.244585][T10375] ? ksys_write+0x71/0x250 [ 275.249002][T10375] ksys_write+0x14d/0x250 [ 275.253334][T10375] ? __ia32_sys_read+0x80/0x80 [ 275.258098][T10375] ? lockdep_hardirqs_on+0x94/0x140 [ 275.263298][T10375] do_syscall_64+0x4c/0xa0 [ 275.267713][T10375] ? clear_bhb_loop+0x30/0x80 [ 275.272477][T10375] ? clear_bhb_loop+0x30/0x80 [ 275.277156][T10375] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 275.283070][T10375] RIP: 0033:0x7f6c7e0d2749 [ 275.287481][T10375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.307087][T10375] RSP: 002b:00007f6c7c339038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 275.315496][T10375] RAX: ffffffffffffffda RBX: 00007f6c7e328fa0 RCX: 00007f6c7e0d2749 [ 275.323465][T10375] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 275.331449][T10375] RBP: 00007f6c7e156f91 R08: 0000000000000000 R09: 0000000000000000 [ 275.339415][T10375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.347393][T10375] R13: 00007f6c7e329038 R14: 00007f6c7e328fa0 R15: 00007fff898a6628 [ 275.355376][T10375] [ 275.667037][T10428] input: syz0 as /devices/virtual/input/input10 [ 275.840801][ T4580] usb 5-1: failed to send control message: -71 [ 275.847253][ T4580] ch341-uart: probe of ttyUSB0 failed with error -71 [ 275.872151][ T4580] usb 5-1: USB disconnect, device number 10 [ 275.900614][ T4580] ch341 5-1:0.0: device disconnected