last executing test programs: 8m45.709509557s ago: executing program 32 (id=66): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) dup(0xffffffffffffffff) 8m18.104844989s ago: executing program 33 (id=144): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000300)={0x8}) 7m16.137261216s ago: executing program 34 (id=275): openat$tun(0xffffffffffffff9c, 0x0, 0x2e0000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0), 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg(r5, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)=""/85, 0x55}, {0x0}], 0x2}, 0x4}], 0x100000, 0x10022, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, 0x0, &(0x7f0000000200)) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) unshare(0x6a040000) 6m26.861267782s ago: executing program 2 (id=422): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x500, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x8108}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x8) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, 0xffffffffffffffff, 0x0) ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, &(0x7f0000000380)) 6m24.564106377s ago: executing program 2 (id=425): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x88140, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) add_key(&(0x7f0000000000)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r4, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) read$dsp(r4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) epoll_create1(0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000000c0)=0x2) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) 6m24.258001029s ago: executing program 7 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x48084) r0 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 6m23.227136462s ago: executing program 7 (id=426): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000000)=0x3, 0x4) 6m22.242591535s ago: executing program 7 (id=428): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 6m21.06871256s ago: executing program 35 (id=428): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 6m21.033798396s ago: executing program 2 (id=431): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@host}) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper, 0x10400000}, @hyper, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7a5, &(0x7f0000000140)={{@host}, 0x1}) 6m20.468150388s ago: executing program 2 (id=436): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x48084) r0 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 6m20.122755773s ago: executing program 2 (id=437): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000000c0)=0x2, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700382cff20010000000000000000000000000001ff02000000000000000000000000000147d8f0c100000000020090780000000468cd85b50007840020010000000000000000000000000002fe8000000000000000000000000000bb"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) setns(r2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 6m16.031874651s ago: executing program 2 (id=443): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) sendmsg(0xffffffffffffffff, 0x0, 0x40000a4) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000006340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x0, 0x80087, 0xfffffffb, 0x40}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0xd, 0x0, 0x0) connect$inet(r3, &(0x7f00000004c0)={0x2, 0x4e21, @remote}, 0x10) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400c024) close_range(r2, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setitimer(0x0, 0x0, 0x0) 6m15.109760074s ago: executing program 36 (id=443): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) sendmsg(0xffffffffffffffff, 0x0, 0x40000a4) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000006340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x0, 0x80087, 0xfffffffb, 0x40}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0xd, 0x0, 0x0) connect$inet(r3, &(0x7f00000004c0)={0x2, 0x4e21, @remote}, 0x10) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400c024) close_range(r2, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setitimer(0x0, 0x0, 0x0) 4m6.081530298s ago: executing program 4 (id=791): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x5, 0x4, 0x7, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 4m5.768127529s ago: executing program 4 (id=795): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0) 4m5.106501145s ago: executing program 4 (id=798): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r3], 0x3c}}, 0x0) close(r3) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) unshare(0x8000000) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, 0x0, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) 4m4.418297689s ago: executing program 4 (id=801): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x20000014}) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) 4m2.99605606s ago: executing program 4 (id=806): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000300)=0x7, &(0x7f0000000340)=0x2) 3m54.867124118s ago: executing program 4 (id=830): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x1000}, 0x1c) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x65942126f3d7b6a8, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0x2c}, 0x1c) 3m39.499840553s ago: executing program 37 (id=830): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x1000}, 0x1c) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x65942126f3d7b6a8, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0x2c}, 0x1c) 2m6.025567183s ago: executing program 9 (id=1097): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x2, 0x1b4, &(0x7f0000000640)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) pread64(r0, &(0x7f0000001600)=""/4073, 0xfe9, 0x0) 2m5.797596503s ago: executing program 9 (id=1098): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r3], 0x3c}}, 0x0) close(r3) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) unshare(0x8000000) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, 0x0, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) 2m4.782860521s ago: executing program 9 (id=1102): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}, {@verity_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='./file0\x00') r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r3, &(0x7f00000002c0)='./file0\x00', 0x2) 2m3.725220656s ago: executing program 9 (id=1105): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan1\x00', &(0x7f0000000100)=@ethtool_rxfh={0x1, 0x974, 0x3000, 0x6, 0x9, "da1ca1", 0x1c1}}) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='mode=0x0000000000000800,cruft\x00nojoliet,overriderockperm,map=normal,sbsector=0x0000000000000b5aAcheck=strict,euid=', @ANYRESDEC=0x0, @ANYBLOB='ask=MAY_READ,\x00'], 0x0, 0x640, &(0x7f0000000e80)="$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") getdents(r1, 0x0, 0x0) 2m0.560144347s ago: executing program 9 (id=1121): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000002000010028bd7000000000000a0020400000000700000000050016002f00000008000a0005000000140002"], 0x40}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 1m59.988922596s ago: executing program 9 (id=1125): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x2, 0x1b4, &(0x7f0000000640)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) pread64(r0, &(0x7f0000001600)=""/4073, 0xfe9, 0x0) 1m58.708775953s ago: executing program 38 (id=1125): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x2, 0x1b4, &(0x7f0000000640)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) pread64(r0, &(0x7f0000001600)=""/4073, 0xfe9, 0x0) 1m7.132597954s ago: executing program 6 (id=1256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) getpgrp(0x0) 1m2.584025158s ago: executing program 6 (id=1271): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x1, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfe}}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000000740)}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe44, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x80800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1m0.794485432s ago: executing program 6 (id=1274): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m0.235335726s ago: executing program 6 (id=1278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) socket$key(0xf, 0x3, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) mkdir(&(0x7f0000000080)='./file0\x00', 0x104) 58.505828761s ago: executing program 6 (id=1282): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) creat(0x0, 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000180)={@hyper, 0x2}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x1}}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r4, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x24}}, 0x0) 54.626758632s ago: executing program 6 (id=1286): ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x20000000, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r0 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x2001}) ppoll(&(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0xd) 53.183612234s ago: executing program 39 (id=1286): ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x20000000, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r0 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x2001}) ppoll(&(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0xd) 21.532637061s ago: executing program 3 (id=1369): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00'}) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000100)=0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x80) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r5 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r5, 0x3518, 0xaddf, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) recvfrom(r1, 0x0, 0x0, 0x22, 0x0, 0x0) 18.889354287s ago: executing program 1 (id=1375): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r1, &(0x7f0000000740)={0x2020}, 0x2020) ppoll(&(0x7f00000001c0)=[{r1, 0x110}], 0x1, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000340), 0x11000) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x40000000002, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_delete(r4) socket$inet_tcp(0x2, 0x1, 0x0) 16.987913162s ago: executing program 1 (id=1378): memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f0000000040), 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) 16.480636937s ago: executing program 1 (id=1379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1}, 0x6e) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r5, &(0x7f0000000140), 0x0) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) r7 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000140)={'b', ' *:* ', 'm\x00'}, 0x8) write$cgroup_devices(r7, &(0x7f00000000c0)={'b', ' *:* ', 'rwm\x00'}, 0xa) open$dir(&(0x7f0000000300)='./file1\x00', 0x40040, 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 15.056290907s ago: executing program 1 (id=1382): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0xfffffffffffffffc}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf0}}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r4, {0x6, 0xfff2}, {0x5, 0x6}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 13.945286053s ago: executing program 3 (id=1387): syz_open_dev$loop(0x0, 0x47ffffa, 0x122c42) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) utime(&(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1000000, &(0x7f0000000200)=ANY=[]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="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", 0x2000, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x18102) 13.634142902s ago: executing program 0 (id=1388): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f0000000140)='./bus\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 13.576788425s ago: executing program 1 (id=1389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) open(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) landlock_restrict_self(0xffffffffffffffff, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create1(0x0) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) 11.180600943s ago: executing program 1 (id=1392): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfc}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x21700, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 9.261096394s ago: executing program 0 (id=1394): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x1, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfe}}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9070000000000", 0x9}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe44, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x80800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 7.50606976s ago: executing program 5 (id=1395): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x900, 0x12) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) 6.543760258s ago: executing program 5 (id=1396): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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") r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000040)='./file1\x00', 0x0, r1) 5.681593068s ago: executing program 8 (id=1398): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f003) truncate(&(0x7f0000000180)='./file1\x00', 0x400000f001) socket$netlink(0x10, 0x3, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) 5.680009238s ago: executing program 0 (id=1399): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) io_uring_setup(0xfc6, &(0x7f0000000180)) syz_io_uring_setup(0x42ba, &(0x7f0000000300)={0x0, 0xf36e, 0x4000, 0x2, 0xfffffffd}, &(0x7f0000000100), &(0x7f0000000140)) 5.442529325s ago: executing program 5 (id=1400): syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100003afe0620e6040b000001010203010902241654030310000904140002a024260009050602ff0300000009058202"], 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x51, 0x0, 0x0, 0x0, 0x0, 0x56a, 0xd1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0xf8, 0x1, 0x3, 0x1, 0x2, 0xe1, {0x9, 0x21, 0x8001, 0x3, 0x1, {0x22, 0x870}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1c, 0x8, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x6, 0x2, 0x4}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x411, 0x32, 0xd, 0x3, 0xff, 0x80}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x860}}]}) 5.441457615s ago: executing program 3 (id=1401): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) 5.016037227s ago: executing program 3 (id=1402): syz_usbip_server_init(0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file5\x00', 0x218085, &(0x7f0000000240), 0x43, 0x4d7, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000280)=0x9, 0x4) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = msgget$private(0x0, 0x1c0) msgctl$IPC_RMID(r3, 0x0) 4.14528606s ago: executing program 8 (id=1403): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(r2, &(0x7f0000000040)='net/ip6_tables_targets\x00') r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=0xffffffffffffffff, 0x4) close(r5) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c9", 0x1) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$netlink(r7, &(0x7f0000005240)={0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], 0x144}], 0x1, 0x0, 0x0, 0x800}, 0x84) ioctl$SIOCSIFHWADDR(r0, 0x8b34, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x21, 0x2}, 0x7) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getpriority(0x2, 0x80000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.600966765s ago: executing program 8 (id=1404): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001400110200000000fcdbdf25280068fdfa"], 0x28}}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/116, 0x74}], 0x1) 2.367992303s ago: executing program 3 (id=1405): r0 = socket(0x11, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) pselect6(0x40, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, 0xc69, 0x40, 0xfc13, 0x100000001, 0x7}, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 2.347780775s ago: executing program 0 (id=1406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) msync(&(0x7f0000c0e000/0x3000)=nil, 0x3000, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 2.31302194s ago: executing program 8 (id=1407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000700ff010000140002007767300000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5429c0008"], 0xf0}, 0x1, 0x0, 0x0, 0x24000855}, 0x20040004) 793.689743ms ago: executing program 0 (id=1408): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unlink(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) shutdown(r1, 0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200b}) 672.110762ms ago: executing program 5 (id=1409): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002", 0x8a) 510.207849ms ago: executing program 8 (id=1410): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6(0xa, 0x3, 0x5) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000000)=0xb1, 0x4) 364.101695ms ago: executing program 5 (id=1411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 299.254251ms ago: executing program 0 (id=1412): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 207.517693ms ago: executing program 8 (id=1413): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) 93.996391ms ago: executing program 3 (id=1414): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001400110200000000fcdbdf252800"], 0x28}}, 0x0) 0s ago: executing program 5 (id=1415): syz_usb_connect(0x6, 0x24, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r2, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r3) r4 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) preadv(r4, &(0x7f0000001200)=[{&(0x7f0000000c00)=""/113, 0x71}], 0x1, 0x4, 0xb) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) kernel console output (not intermixed with test programs): __kasan_kmalloc+0x93/0xb0 [ 389.640829][ T9094] vmalloc_user_noprof+0xad/0xf0 [ 389.640856][ T9094] ? vb2_vmalloc_alloc+0xef/0x340 [ 389.640875][ T9094] vb2_vmalloc_alloc+0xef/0x340 [ 389.640893][ T9094] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 389.640912][ T9094] __vb2_queue_alloc+0x9c2/0x15a0 [ 389.640972][ T9094] vb2_core_reqbufs+0xc31/0x1420 [ 389.641015][ T9094] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 389.641049][ T9094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.641071][ T9094] ? __vb2_init_fileio+0x1e8/0xff0 [ 389.641092][ T9094] __vb2_init_fileio+0x318/0xff0 [ 389.641116][ T9094] ? vb2_fop_read+0x101/0x360 [ 389.641147][ T9094] ? __pfx___mutex_lock+0x10/0x10 [ 389.641178][ T9094] __vb2_perform_fileio+0x284/0x1600 [ 389.641205][ T9094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.641231][ T9094] vb2_fop_read+0x273/0x360 [ 389.641266][ T9094] v4l2_read+0x19c/0x2c0 [ 389.641299][ T9094] vfs_readv+0x5aa/0x850 [ 389.641318][ T9094] ? __pfx_v4l2_read+0x10/0x10 [ 389.641348][ T9094] ? __pfx_vfs_readv+0x10/0x10 [ 389.641375][ T9094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.641399][ T9094] ? __fget_files+0x2a/0x420 [ 389.641430][ T9094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.641450][ T9094] ? __fget_files+0x3a0/0x420 [ 389.641477][ T9094] ? __fget_files+0x2a/0x420 [ 389.641507][ T9094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.641532][ T9094] __x64_sys_preadv+0x197/0x2a0 [ 389.641562][ T9094] ? __pfx___x64_sys_preadv+0x10/0x10 [ 389.641587][ T9094] ? rcu_is_watching+0x15/0xb0 [ 389.641610][ T9094] ? do_syscall_64+0xbe/0x3b0 [ 389.641641][ T9094] do_syscall_64+0xfa/0x3b0 [ 389.641668][ T9094] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.641694][ T9094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.641711][ T9094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.641732][ T9094] ? exc_page_fault+0x9f/0xf0 [ 389.641759][ T9094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.641777][ T9094] RIP: 0033:0x7f006bf8ebe9 [ 389.641794][ T9094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.641809][ T9094] RSP: 002b:00007f006cde1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 389.641828][ T9094] RAX: ffffffffffffffda RBX: 00007f006c1b6270 RCX: 00007f006bf8ebe9 [ 389.641842][ T9094] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000007 [ 389.641853][ T9094] RBP: 00007f006c011e19 R08: 000000000000000b R09: 0000000000000000 [ 389.641865][ T9094] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 389.641876][ T9094] R13: 00007f006c1b6308 R14: 00007f006c1b6270 R15: 00007ffe3c6cb558 [ 389.641904][ T9094] [ 389.641912][ T9094] Mem-Info: [ 390.077234][ T9094] active_anon:13787 inactive_anon:0 isolated_anon:0 [ 390.077234][ T9094] active_file:4047 inactive_file:39993 isolated_file:0 [ 390.077234][ T9094] unevictable:769 dirty:249 writeback:0 [ 390.077234][ T9094] slab_reclaimable:11396 slab_unreclaimable:102158 [ 390.077234][ T9094] mapped:42162 shmem:6313 pagetables:1439 [ 390.077234][ T9094] sec_pagetables:0 bounce:0 [ 390.077234][ T9094] kernel_misc_reclaimable:0 [ 390.077234][ T9094] free:1284129 free_pcp:17809 free_cma:0 [ 390.195043][ T9094] Node 0 active_anon:54964kB inactive_anon:0kB active_file:16188kB inactive_file:159768kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:168696kB dirty:812kB writeback:200kB shmem:23612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12896kB pagetables:5728kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 390.269047][ T9094] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 390.325153][ T9094] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 390.369698][ T9094] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 390.420196][ T9094] Node 0 DMA32 free:1230336kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:55016kB inactive_anon:0kB active_file:16188kB inactive_file:158192kB unevictable:1540kB writepending:812kB present:3129332kB managed:2557452kB mlocked:4kB bounce:0kB free_pcp:50716kB local_pcp:28020kB free_cma:0kB [ 390.592096][ T9094] lowmem_reserve[]: 0 0 1 1 1 [ 390.617208][ T9094] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 390.710820][ T9115] tipc: Started in network mode [ 390.714735][ T9094] lowmem_reserve[]: 0 0 0 0 0 [ 390.729772][ T9094] Node 1 Normal free:3888640kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20844kB local_pcp:11084kB free_cma:0kB [ 390.764037][ T9115] tipc: Node identity d2ca6f952dcd, cluster identity 4711 [ 390.784144][ T9115] tipc: Enabled bearer , priority 0 [ 390.839019][ T9118] syzkaller0: entered promiscuous mode [ 390.855289][ T9094] lowmem_reserve[]: 0 0 0 0 0 [ 390.877571][ T9094] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 390.900540][ T9118] syzkaller0: entered allmulticast mode [ 390.940557][ T9094] Node 0 DMA32: 393*4kB (UM) 42*8kB (UME) 8*16kB (UME) 5*32kB (UME) 64*64kB (UME) 35*128kB (ME) 6*256kB (M) 5*512kB (ME) 3*1024kB (UM) 2*2048kB (UE) 295*4096kB (M) = 1230356kB [ 391.048211][ T9094] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 391.091501][ T9114] tipc: Resetting bearer [ 391.150137][ T9094] Node 1 Normal: 188*4kB (UE) 66*8kB (UME) 36*16kB (UME) 78*32kB (UME) 26*64kB (UME) 7*128kB (UME) 5*256kB (UME) 5*512kB (UME) 3*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3888640kB [ 391.229529][ T9130] netlink: 12 bytes leftover after parsing attributes in process `syz.9.735'. [ 391.260422][ T9114] tipc: Disabling bearer [ 391.269306][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.9.735'. [ 391.299744][ T9094] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 391.340327][ T9094] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 391.405048][ T9133] random: crng reseeded on system resumption [ 391.430254][ T9094] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 391.526829][ T9094] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 391.653609][ T9094] 50199 total pagecache pages [ 391.658362][ T9094] 0 pages in swap cache [ 391.667134][ T9137] program syz.0.738 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 391.713249][ T9094] Free swap = 124996kB [ 391.821608][ T9094] Total swap = 124996kB [ 391.866847][ T9094] 2097051 pages RAM [ 391.918186][ T9094] 0 pages HighMem/MovableOnly [ 391.960635][ T9094] 425662 pages reserved [ 391.964813][ T9094] 0 pages cma reserved [ 392.610807][ T5952] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 392.971983][ T5952] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.540121][ T5952] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 393.726865][ T9175] tipc: Enabled bearer , priority 0 [ 393.837253][ T9175] syzkaller0: entered promiscuous mode [ 393.867681][ T9175] syzkaller0: entered allmulticast mode [ 393.908388][ T5952] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 393.953560][ T5952] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 393.967687][ T5952] usb 10-1: SerialNumber: syz [ 394.089258][ T9174] tipc: Resetting bearer [ 394.314135][ T5874] Bluetooth: to_multiplier 0 < 10 [ 394.917446][ T9174] tipc: Disabling bearer [ 395.346561][ T9189] netlink: 200 bytes leftover after parsing attributes in process `syz.4.753'. [ 396.520222][ T5874] Bluetooth: hci3: command tx timeout [ 396.573752][ T9199] random: crng reseeded on system resumption [ 399.089866][ T5952] usb 10-1: 0:2 : does not exist [ 400.447549][ T5861] Bluetooth: hci2: command 0x0401 tx timeout [ 400.779555][ T5952] usb 10-1: USB disconnect, device number 2 [ 402.471262][ T9258] random: crng reseeded on system resumption [ 403.937183][ T9229] syz.8.762: vmalloc error: size 566231040, failed to allocated page array size 1105920, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 404.030301][ T9229] CPU: 1 UID: 0 PID: 9229 Comm: syz.8.762 Not tainted syzkaller #0 PREEMPT(full) [ 404.030334][ T9229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 404.030346][ T9229] Call Trace: [ 404.030354][ T9229] [ 404.030362][ T9229] dump_stack_lvl+0x189/0x250 [ 404.030391][ T9229] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.030414][ T9229] ? __pfx__printk+0x10/0x10 [ 404.030440][ T9229] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 404.030463][ T9229] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 404.030485][ T9229] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.030506][ T9229] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 404.030530][ T9229] warn_alloc+0x214/0x310 [ 404.030564][ T9229] ? __pfx_warn_alloc+0x10/0x10 [ 404.030598][ T9229] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.030619][ T9229] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.030639][ T9229] ? __get_vm_area_node+0x28f/0x300 [ 404.030673][ T9229] ? vb2_vmalloc_alloc+0xef/0x340 [ 404.030704][ T9229] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 404.030760][ T9229] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 404.030791][ T9229] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.030812][ T9229] ? __kasan_kmalloc+0x93/0xb0 [ 404.030840][ T9229] vmalloc_user_noprof+0xad/0xf0 [ 404.030866][ T9229] ? vb2_vmalloc_alloc+0xef/0x340 [ 404.030885][ T9229] vb2_vmalloc_alloc+0xef/0x340 [ 404.030904][ T9229] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 404.030922][ T9229] __vb2_queue_alloc+0x9c2/0x15a0 [ 404.030978][ T9229] vb2_core_reqbufs+0xc31/0x1420 [ 404.031022][ T9229] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 404.031056][ T9229] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.031078][ T9229] ? __vb2_init_fileio+0x1e8/0xff0 [ 404.031099][ T9229] __vb2_init_fileio+0x318/0xff0 [ 404.031122][ T9229] ? vb2_fop_read+0x101/0x360 [ 404.031154][ T9229] ? __pfx___mutex_lock+0x10/0x10 [ 404.031185][ T9229] __vb2_perform_fileio+0x284/0x1600 [ 404.031211][ T9229] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.031237][ T9229] vb2_fop_read+0x273/0x360 [ 404.031272][ T9229] v4l2_read+0x19c/0x2c0 [ 404.031305][ T9229] vfs_readv+0x5aa/0x850 [ 404.031323][ T9229] ? __pfx_v4l2_read+0x10/0x10 [ 404.031354][ T9229] ? __pfx_vfs_readv+0x10/0x10 [ 404.031381][ T9229] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.031404][ T9229] ? __fget_files+0x2a/0x420 [ 404.031435][ T9229] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.031455][ T9229] ? __fget_files+0x3a0/0x420 [ 404.031482][ T9229] ? __fget_files+0x2a/0x420 [ 404.031513][ T9229] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.031537][ T9229] __x64_sys_preadv+0x197/0x2a0 [ 404.031567][ T9229] ? __pfx___x64_sys_preadv+0x10/0x10 [ 404.031592][ T9229] ? rcu_is_watching+0x15/0xb0 [ 404.031615][ T9229] ? do_syscall_64+0xbe/0x3b0 [ 404.031647][ T9229] do_syscall_64+0xfa/0x3b0 [ 404.031673][ T9229] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.031699][ T9229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.031716][ T9229] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.031736][ T9229] ? exc_page_fault+0x9f/0xf0 [ 404.031763][ T9229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.031781][ T9229] RIP: 0033:0x7f8419b8ebe9 [ 404.031798][ T9229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.031813][ T9229] RSP: 002b:00007f841a9b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 404.031832][ T9229] RAX: ffffffffffffffda RBX: 00007f8419db6270 RCX: 00007f8419b8ebe9 [ 404.031846][ T9229] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000007 [ 404.031858][ T9229] RBP: 00007f8419c11e19 R08: 000000000000000b R09: 0000000000000000 [ 404.031869][ T9229] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 404.031880][ T9229] R13: 00007f8419db6308 R14: 00007f8419db6270 R15: 00007ffdac1fb2f8 [ 404.031908][ T9229] [ 404.039277][ T9229] Mem-Info: [ 404.464196][ T9279] sctp: [Deprecated]: syz.9.774 (pid 9279) Use of int in maxseg socket option. [ 404.464196][ T9279] Use struct sctp_assoc_value instead [ 404.588906][ T9229] active_anon:13477 inactive_anon:0 isolated_anon:0 [ 404.588906][ T9229] active_file:4047 inactive_file:39999 isolated_file:0 [ 404.588906][ T9229] unevictable:2342 dirty:95 writeback:0 [ 404.588906][ T9229] slab_reclaimable:11395 slab_unreclaimable:101607 [ 404.588906][ T9229] mapped:44754 shmem:6720 pagetables:1489 [ 404.588906][ T9229] sec_pagetables:0 bounce:0 [ 404.588906][ T9229] kernel_misc_reclaimable:0 [ 404.588906][ T9229] free:1285658 free_pcp:15508 free_cma:0 [ 404.875250][ T9229] Node 0 active_anon:60008kB inactive_anon:0kB active_file:16188kB inactive_file:159792kB unevictable:7832kB isolated(anon):0kB isolated(file):0kB mapped:183116kB dirty:380kB writeback:0kB shmem:29444kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13064kB pagetables:5800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 405.074515][ T9229] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 405.320027][ T9229] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 405.348951][ C1] vkms_vblank_simulate: vblank timer overrun [ 405.476855][ T9229] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 405.523343][ T9229] Node 0 DMA32 free:1228480kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:62744kB inactive_anon:0kB active_file:16188kB inactive_file:158216kB unevictable:7904kB writepending:392kB present:3129332kB managed:2557452kB mlocked:6384kB bounce:0kB free_pcp:43248kB local_pcp:24492kB free_cma:0kB [ 405.556468][ C1] vkms_vblank_simulate: vblank timer overrun [ 405.569598][ T5861] Bluetooth: hci3: command 0x0406 tx timeout [ 405.584865][ T9229] lowmem_reserve[]: 0 0 1 1 1 [ 405.594329][ T9229] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 405.663804][ T9229] lowmem_reserve[]: 0 0 0 0 0 [ 405.668690][ T9229] Node 1 Normal free:3888640kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20844kB local_pcp:9760kB free_cma:0kB [ 405.699901][ C1] vkms_vblank_simulate: vblank timer overrun [ 405.707158][ T9229] lowmem_reserve[]: 0 0 0 0 0 [ 405.712075][ T9229] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 405.726313][ T9229] Node 0 DMA32: 2*4kB (UM) 3*8kB (UE) 1*16kB (M) 190*32kB (UM) 32*64kB (UME) 11*128kB (UME) 3*256kB (M) 15*512kB (UME) 10*1024kB (UM) 2*2048kB (UE) 292*4096kB (M) = 1228400kB [ 405.744271][ T9229] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 405.850318][ T9229] Node 1 Normal: 188*4kB (UE) 66*8kB (UME) 36*16kB (UME) 78*32kB (UME) 26*64kB (UME) 7*128kB (UME) 5*256kB (UME) 5*512kB (UME) 3*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3888640kB [ 406.036015][ T9229] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 406.058875][ T9229] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 406.141585][ T9229] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 406.194591][ T9229] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 406.226408][ T9229] 53199 total pagecache pages [ 406.244552][ T9229] 0 pages in swap cache [ 406.248733][ T9229] Free swap = 124996kB [ 406.280207][ T9229] Total swap = 124996kB [ 406.301159][ T9229] 2097051 pages RAM [ 406.304962][ T9229] 0 pages HighMem/MovableOnly [ 406.309611][ T9229] 425662 pages reserved [ 406.383671][ T9229] 0 pages cma reserved [ 406.937081][ T9317] random: crng reseeded on system resumption [ 409.831116][ T9364] random: crng reseeded on system resumption [ 410.110483][ T9366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.797'. [ 410.129520][ T9366] netlink: 'syz.0.797': attribute type 4 has an invalid length. [ 413.414576][ T9411] loop5: detected capacity change from 0 to 256 [ 413.479999][ T9411] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 413.564584][ T9411] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 413.620185][ T9411] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 413.839722][ T9411] exFAT-fs (loop5): error, invalid access to FAT (entry 0xffffffff) [ 413.878242][ T9411] exFAT-fs (loop5): Filesystem has been set read-only [ 414.840005][ T5944] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 415.279249][ T5944] usb 1-1: Using ep0 maxpacket: 8 [ 415.872801][ T5944] usb 1-1: config 1 has an invalid descriptor of length 23, skipping remainder of the config [ 415.930085][ T5944] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 416.048115][ T5944] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 416.169363][ T5944] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 416.190106][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.246978][ T5944] usb 1-1: Product: syz [ 416.268993][ T5944] usb 1-1: Manufacturer: syz [ 416.289709][ T5944] usb 1-1: SerialNumber: syz [ 416.352901][ T5944] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 416.413116][ T5944] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 416.451006][ T5944] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 417.768133][ T1205] usb 1-1: USB disconnect, device number 10 [ 417.861045][ T9476] netlink: 4 bytes leftover after parsing attributes in process `syz.9.821'. [ 418.236563][ T9479] fuse: Bad value for 'fd' [ 423.021579][ T5861] Bluetooth: hci3: command 0x0406 tx timeout [ 423.040750][ T9547] fuse: Bad value for 'fd' [ 423.545576][ T9560] loop0: detected capacity change from 0 to 512 [ 423.882821][ T9560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.990149][ T9560] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 424.181211][ T9560] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.840: corrupted inode contents [ 424.827971][ T9560] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.840: mark_inode_dirty error [ 424.905462][ T9560] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.840: corrupted inode contents [ 424.954555][ T9560] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.840: mark_inode_dirty error [ 426.716621][ T5863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.040084][ T5944] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 428.463175][ T5944] usb 6-1: Using ep0 maxpacket: 8 [ 428.530882][ T5944] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 429.320005][ T5944] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 429.425871][ T5944] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 429.515027][ T9613] loop6: detected capacity change from 0 to 256 [ 429.520106][ T5944] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 429.535237][ T9616] loop9: detected capacity change from 0 to 164 [ 429.635903][ T9616] ISOFS: unable to read i-node block [ 429.655529][ T5944] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 429.669442][ T9616] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 429.746499][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.157626][ T5944] usb 6-1: GET_CAPABILITIES returned 0 [ 430.207732][ T5944] usbtmc 6-1:16.0: can't read capabilities [ 430.300277][ T9624] fuse: Bad value for 'fd' [ 430.431809][ T5951] usb 6-1: USB disconnect, device number 6 [ 431.629158][ T9643] netlink: 24 bytes leftover after parsing attributes in process `syz.5.856'. [ 434.100734][ T9668] loop2: detected capacity change from 0 to 7 [ 434.140106][ T9668] Dev loop2: unable to read RDB block 7 [ 434.160241][ T9668] loop2: unable to read partition table [ 434.210533][ T9668] loop2: partition table beyond EOD, truncated [ 434.240075][ T9668] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 435.452642][ T5861] Bluetooth: hci7: command 0x0c1a tx timeout [ 437.544854][ T9705] netlink: 200 bytes leftover after parsing attributes in process `syz.5.873'. [ 437.563192][ T9705] netlink: 12 bytes leftover after parsing attributes in process `syz.5.873'. [ 438.191534][ T5951] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 438.382684][ T9717] loop5: detected capacity change from 0 to 256 [ 438.410393][ T5951] usb 10-1: Using ep0 maxpacket: 8 [ 438.421602][ T9717] ======================================================= [ 438.421602][ T9717] WARNING: The mand mount option has been deprecated and [ 438.421602][ T9717] and is ignored by this kernel. Remove the mand [ 438.421602][ T9717] option from the mount to silence this warning. [ 438.421602][ T9717] ======================================================= [ 438.482710][ T5951] usb 10-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config [ 438.530088][ T5951] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 51200, setting to 64 [ 438.568384][ T5951] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 438.662203][ T9717] exfat: Invalid uid '0x00000000ffffffff' [ 438.697116][ T5951] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 438.716949][ T5951] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.717253][ T5874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 438.771970][ T5874] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 438.780246][ T5874] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 438.815487][ T5874] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 438.832875][ T5874] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 438.833514][ T5951] usb 10-1: Product: syz [ 438.873332][ T9717] loop5: detected capacity change from 0 to 1024 [ 438.932339][ T9717] hfsplus: Bad value for 'session' [ 438.961398][ T5951] usb 10-1: Manufacturer: syz [ 439.011711][ T9717] loop5: detected capacity change from 0 to 256 [ 439.035466][ T9717] exfat: Bad value for 'uid' [ 439.055213][ T9717] exfat: Bad value for 'uid' [ 439.075050][ T5951] usb 10-1: SerialNumber: syz [ 439.132616][ T5951] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 439.175184][ T5951] usbtest 10-1:1.0: couldn't get endpoints, -22 [ 439.181871][ T5951] usbtest 10-1:1.0: probe with driver usbtest failed with error -22 [ 439.210023][ T9717] loop5: detected capacity change from 0 to 1024 [ 439.250441][ T9717] EXT4-fs: Ignoring removed nobh option [ 439.288665][ T9717] EXT4-fs (loop5): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 439.324272][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.330779][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.370997][ T9717] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 439.644578][ T1053] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.549257][ T1053] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.835545][ T1053] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.920643][ T5861] Bluetooth: hci4: command tx timeout [ 441.681945][ T1053] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.977457][ T9774] netlink: 200 bytes leftover after parsing attributes in process `syz.5.887'. [ 442.025636][ T9774] netlink: 12 bytes leftover after parsing attributes in process `syz.5.887'. [ 442.990290][ T5874] Bluetooth: hci4: command tx timeout [ 443.231510][ T1053] bridge_slave_1: left allmulticast mode [ 443.239543][ T1053] bridge_slave_1: left promiscuous mode [ 443.252101][ T1053] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.431762][ T10] usb 10-1: USB disconnect, device number 3 [ 443.486389][ T9741] syz.8.880: vmalloc error: size 566231040, failed to allocated page array size 1105920, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 443.578568][ T9741] CPU: 1 UID: 0 PID: 9741 Comm: syz.8.880 Not tainted syzkaller #0 PREEMPT(full) [ 443.578602][ T9741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 443.578618][ T9741] Call Trace: [ 443.578628][ T9741] [ 443.578638][ T9741] dump_stack_lvl+0x189/0x250 [ 443.578678][ T9741] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.578708][ T9741] ? __pfx__printk+0x10/0x10 [ 443.578744][ T9741] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 443.578775][ T9741] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 443.578806][ T9741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.578835][ T9741] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 443.578867][ T9741] warn_alloc+0x214/0x310 [ 443.578913][ T9741] ? __pfx_warn_alloc+0x10/0x10 [ 443.578959][ T9741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.578988][ T9741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.579039][ T9741] ? __get_vm_area_node+0x28f/0x300 [ 443.579075][ T9741] ? vb2_vmalloc_alloc+0xef/0x340 [ 443.579105][ T9741] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 443.579176][ T9741] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 443.579219][ T9741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.579247][ T9741] ? __kasan_kmalloc+0x93/0xb0 [ 443.579284][ T9741] vmalloc_user_noprof+0xad/0xf0 [ 443.579321][ T9741] ? vb2_vmalloc_alloc+0xef/0x340 [ 443.579347][ T9741] vb2_vmalloc_alloc+0xef/0x340 [ 443.579372][ T9741] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 443.579398][ T9741] __vb2_queue_alloc+0x9c2/0x15a0 [ 443.579467][ T9741] vb2_core_reqbufs+0xc31/0x1420 [ 443.579526][ T9741] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 443.579572][ T9741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.579606][ T9741] ? __vb2_init_fileio+0x1e8/0xff0 [ 443.579635][ T9741] __vb2_init_fileio+0x318/0xff0 [ 443.579667][ T9741] ? vb2_fop_read+0x101/0x360 [ 443.579709][ T9741] ? __pfx___mutex_lock+0x10/0x10 [ 443.579751][ T9741] __vb2_perform_fileio+0x284/0x1600 [ 443.579787][ T9741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.579823][ T9741] vb2_fop_read+0x273/0x360 [ 443.579871][ T9741] v4l2_read+0x19c/0x2c0 [ 443.579915][ T9741] vfs_readv+0x5aa/0x850 [ 443.579942][ T9741] ? __pfx_v4l2_read+0x10/0x10 [ 443.579984][ T9741] ? __pfx_vfs_readv+0x10/0x10 [ 443.580041][ T9741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.580073][ T9741] ? __fget_files+0x2a/0x420 [ 443.580115][ T9741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.580143][ T9741] ? __fget_files+0x3a0/0x420 [ 443.580180][ T9741] ? __fget_files+0x2a/0x420 [ 443.580222][ T9741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.580255][ T9741] __x64_sys_preadv+0x197/0x2a0 [ 443.580296][ T9741] ? __pfx___x64_sys_preadv+0x10/0x10 [ 443.580331][ T9741] ? rcu_is_watching+0x15/0xb0 [ 443.580362][ T9741] ? do_syscall_64+0xbe/0x3b0 [ 443.580405][ T9741] do_syscall_64+0xfa/0x3b0 [ 443.580441][ T9741] ? lockdep_hardirqs_on+0x9c/0x150 [ 443.580476][ T9741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.580499][ T9741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.580527][ T9741] ? exc_page_fault+0x9f/0xf0 [ 443.580565][ T9741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.580588][ T9741] RIP: 0033:0x7f8419b8ebe9 [ 443.580609][ T9741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.580631][ T9741] RSP: 002b:00007f841a9f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 443.580656][ T9741] RAX: ffffffffffffffda RBX: 00007f8419db6090 RCX: 00007f8419b8ebe9 [ 443.580675][ T9741] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000008 [ 443.580691][ T9741] RBP: 00007f8419c11e19 R08: 000000000000000b R09: 0000000000000000 [ 443.580707][ T9741] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 443.580723][ T9741] R13: 00007f8419db6128 R14: 00007f8419db6090 R15: 00007ffdac1fb2f8 [ 443.580761][ T9741] [ 444.048810][ T9741] Mem-Info: [ 444.140793][ T9741] active_anon:13282 inactive_anon:0 isolated_anon:0 [ 444.140793][ T9741] active_file:13255 inactive_file:40015 isolated_file:0 [ 444.140793][ T9741] unevictable:768 dirty:149 writeback:0 [ 444.140793][ T9741] slab_reclaimable:11415 slab_unreclaimable:103239 [ 444.140793][ T9741] mapped:40211 shmem:6314 pagetables:1584 [ 444.140793][ T9741] sec_pagetables:0 bounce:0 [ 444.140793][ T9741] kernel_misc_reclaimable:0 [ 444.140793][ T9741] free:1264548 free_pcp:26150 free_cma:0 [ 444.186933][ T9741] Node 0 active_anon:53128kB inactive_anon:0kB active_file:53020kB inactive_file:159856kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:160844kB dirty:596kB writeback:0kB shmem:23720kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13384kB pagetables:6180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 444.219124][ T9741] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 444.249268][ T9741] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 444.278697][ T9741] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 444.284499][ T9741] Node 0 DMA32 free:1154180kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53080kB inactive_anon:0kB active_file:53020kB inactive_file:158280kB unevictable:1536kB writepending:596kB present:3129332kB managed:2557452kB mlocked:0kB bounce:0kB free_pcp:83716kB local_pcp:24552kB free_cma:0kB [ 444.317386][ T9741] lowmem_reserve[]: 0 0 1 1 1 [ 444.322134][ T9741] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 444.351425][ T9741] lowmem_reserve[]: 0 0 0 0 0 [ 444.356158][ T9741] Node 1 Normal free:3888640kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20844kB local_pcp:9760kB free_cma:0kB [ 444.403102][ T1053] bridge_slave_0: left allmulticast mode [ 444.429061][ T1053] bridge_slave_0: left promiscuous mode [ 444.446062][ T9741] lowmem_reserve[]: 0 0 0 0 0 [ 444.452302][ T1053] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.469785][ T9741] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 444.491716][ T9741] Node 0 DMA32: 1043*4kB (UME) 539*8kB (UME) 164*16kB (ME) 86*32kB (ME) 89*64kB (UM) 58*128kB (UME) 47*256kB (UM) 10*512kB (ME) 12*1024kB (UM) 8*2048kB (UME) 264*4096kB (M) = 1154148kB [ 444.749651][ T9741] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 444.805917][ T9741] Node 1 Normal: 188*4kB (UE) 66*8kB (UME) 36*16kB (UME) 78*32kB (UME) 26*64kB (UME) 7*128kB (UME) 5*256kB (UME) 5*512kB (UME) 3*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3888640kB [ 444.866717][ T9741] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 444.918667][ T9741] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 444.956559][ T9741] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 444.999544][ T9741] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 445.035166][ T9741] 59558 total pagecache pages [ 445.048071][ T9741] 0 pages in swap cache [ 445.059253][ T9741] Free swap = 124996kB [ 445.069244][ T9741] Total swap = 124996kB [ 445.080110][ T5874] Bluetooth: hci4: command 0x040f tx timeout [ 445.080927][ T9741] 2097051 pages RAM [ 445.117921][ T9741] 0 pages HighMem/MovableOnly [ 445.125507][ T9741] 425662 pages reserved [ 445.129760][ T9741] 0 pages cma reserved [ 446.122205][ T9823] loop8: detected capacity change from 0 to 128 [ 446.236834][ T9823] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 446.393384][ T9823] ext4 filesystem being mounted at /95/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 446.584963][ T9823] EXT4-fs error (device loop8): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.8.894: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 446.620536][ T1053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.647754][ T1053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.667248][ T1053] bond0 (unregistering): Released all slaves [ 446.713273][ T9726] chnl_net:caif_netlink_parms(): no params data found [ 446.751619][ T9798] tipc: Started in network mode [ 446.873454][ T9798] tipc: Node identity 6a09e0dc305b, cluster identity 4711 [ 446.883883][ T9798] tipc: Enabled bearer , priority 0 [ 446.898259][ T7233] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 446.948357][ T9840] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.896' sets config #1 [ 446.968661][ T9800] syzkaller0: entered promiscuous mode [ 446.974377][ T9800] syzkaller0: entered allmulticast mode [ 447.150253][ T5861] Bluetooth: hci4: command 0x040f tx timeout [ 447.312435][ T1053] tipc: Left network mode [ 447.321689][ T9810] tipc: Resetting bearer [ 447.406111][ T9810] tipc: Disabling bearer [ 449.110213][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 449.282033][ T5861] Bluetooth: hci4: command 0x040f tx timeout [ 449.337892][ T9726] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.355331][ T9726] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.366463][ T9726] bridge_slave_0: entered allmulticast mode [ 449.396960][ T9726] bridge_slave_0: entered promiscuous mode [ 449.630633][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 449.717022][ T9726] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.765515][ T10] usb 7-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 449.795538][ T9726] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.833214][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 58624, setting to 64 [ 449.864637][ T9726] bridge_slave_1: entered allmulticast mode [ 449.897331][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 449.926773][ T9726] bridge_slave_1: entered promiscuous mode [ 450.159535][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 450.184387][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.257617][ T10] usb 7-1: Product: syz [ 450.270635][ T10] usb 7-1: Manufacturer: syz [ 452.259969][ T10] usb 7-1: SerialNumber: syz [ 452.853519][ T9726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.492764][ T9726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.749530][ T9899] loop2: detected capacity change from 0 to 7 [ 453.790345][ T9899] Dev loop2: unable to read RDB block 7 [ 453.828811][ T9899] loop2: unable to read partition table [ 453.840635][ T9899] loop2: partition table beyond EOD, truncated [ 453.846871][ T9899] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 453.927034][ T1053] hsr_slave_0: left promiscuous mode [ 453.986755][ T1053] hsr_slave_1: left promiscuous mode [ 455.030954][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.038351][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.969886][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.977736][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.216748][ T1053] veth1_macvtap: left promiscuous mode [ 456.535643][ T1053] veth0_macvtap: left promiscuous mode [ 456.588312][ T1053] veth1_vlan: left promiscuous mode [ 456.755232][ T1053] veth0_vlan: left promiscuous mode [ 457.272397][ T10] usb 7-1: can't set config #1, error -71 [ 457.302618][ T9889] syz.5.905: vmalloc error: size 566231040, failed to allocated page array size 1105920, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 457.308442][ T10] usb 7-1: USB disconnect, device number 5 [ 457.348779][ T9889] CPU: 0 UID: 0 PID: 9889 Comm: syz.5.905 Not tainted syzkaller #0 PREEMPT(full) [ 457.348807][ T9889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 457.348819][ T9889] Call Trace: [ 457.348827][ T9889] [ 457.348835][ T9889] dump_stack_lvl+0x189/0x250 [ 457.348865][ T9889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.348888][ T9889] ? __pfx__printk+0x10/0x10 [ 457.348915][ T9889] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 457.348937][ T9889] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 457.348959][ T9889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.348980][ T9889] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 457.349004][ T9889] warn_alloc+0x214/0x310 [ 457.349037][ T9889] ? __pfx_warn_alloc+0x10/0x10 [ 457.349073][ T9889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.349094][ T9889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.349114][ T9889] ? __get_vm_area_node+0x28f/0x300 [ 457.349141][ T9889] ? vb2_vmalloc_alloc+0xef/0x340 [ 457.349163][ T9889] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 457.349216][ T9889] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 457.349247][ T9889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.349267][ T9889] ? __kasan_kmalloc+0x93/0xb0 [ 457.349296][ T9889] vmalloc_user_noprof+0xad/0xf0 [ 457.349326][ T9889] ? vb2_vmalloc_alloc+0xef/0x340 [ 457.349345][ T9889] vb2_vmalloc_alloc+0xef/0x340 [ 457.349363][ T9889] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 457.349382][ T9889] __vb2_queue_alloc+0x9c2/0x15a0 [ 457.349431][ T9889] vb2_core_reqbufs+0xc31/0x1420 [ 457.349475][ T9889] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 457.349508][ T9889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.349530][ T9889] ? __vb2_init_fileio+0x1e8/0xff0 [ 457.349552][ T9889] __vb2_init_fileio+0x318/0xff0 [ 457.349575][ T9889] ? vb2_fop_read+0x101/0x360 [ 457.349607][ T9889] ? __pfx___mutex_lock+0x10/0x10 [ 457.349637][ T9889] __vb2_perform_fileio+0x284/0x1600 [ 457.349660][ T9889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.349684][ T9889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.349710][ T9889] vb2_fop_read+0x273/0x360 [ 457.349744][ T9889] v4l2_read+0x19c/0x2c0 [ 457.349777][ T9889] vfs_readv+0x5aa/0x850 [ 457.349795][ T9889] ? __pfx_v4l2_read+0x10/0x10 [ 457.349826][ T9889] ? __pfx_vfs_readv+0x10/0x10 [ 457.349853][ T9889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.349876][ T9889] ? __fget_files+0x2a/0x420 [ 457.349916][ T9889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.349946][ T9889] ? __fget_files+0x3a0/0x420 [ 457.349983][ T9889] ? __fget_files+0x2a/0x420 [ 457.350026][ T9889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.350060][ T9889] __x64_sys_preadv+0x197/0x2a0 [ 457.350100][ T9889] ? __pfx___x64_sys_preadv+0x10/0x10 [ 457.350135][ T9889] ? rcu_is_watching+0x15/0xb0 [ 457.350166][ T9889] ? do_syscall_64+0xbe/0x3b0 [ 457.350213][ T9889] do_syscall_64+0xfa/0x3b0 [ 457.350251][ T9889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.350275][ T9889] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 457.350311][ T9889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.350335][ T9889] RIP: 0033:0x7f9b2d98ebe9 [ 457.350356][ T9889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.350377][ T9889] RSP: 002b:00007f9b2b791038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 457.350402][ T9889] RAX: ffffffffffffffda RBX: 00007f9b2dbb6270 RCX: 00007f9b2d98ebe9 [ 457.350421][ T9889] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000008 [ 457.350438][ T9889] RBP: 00007f9b2da11e19 R08: 000000000000000b R09: 0000000000000000 [ 457.350453][ T9889] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 457.350468][ T9889] R13: 00007f9b2dbb6308 R14: 00007f9b2dbb6270 R15: 00007fffd8318c38 [ 457.350506][ T9889] [ 458.100214][ T9889] Mem-Info: [ 458.103344][ T9889] active_anon:13086 inactive_anon:282 isolated_anon:0 [ 458.103344][ T9889] active_file:15047 inactive_file:40021 isolated_file:0 [ 458.103344][ T9889] unevictable:768 dirty:45 writeback:0 [ 458.103344][ T9889] slab_reclaimable:11422 slab_unreclaimable:103148 [ 458.103344][ T9889] mapped:38692 shmem:6410 pagetables:1509 [ 458.103344][ T9889] sec_pagetables:0 bounce:0 [ 458.103344][ T9889] kernel_misc_reclaimable:0 [ 458.103344][ T9889] free:1253468 free_pcp:37007 free_cma:0 [ 458.301172][ T9889] Node 0 active_anon:51948kB inactive_anon:2368kB active_file:60188kB inactive_file:159884kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:154780kB dirty:148kB writeback:0kB shmem:24996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13256kB pagetables:5992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 458.403364][ T9889] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 458.503512][ T9889] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 458.620039][ T9889] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 458.635620][ T9889] Node 0 DMA32 free:1116188kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52200kB inactive_anon:4368kB active_file:60188kB inactive_file:158308kB unevictable:1536kB writepending:148kB present:3129332kB managed:2557452kB mlocked:0kB bounce:0kB free_pcp:117044kB local_pcp:29356kB free_cma:0kB [ 458.762962][ T9889] lowmem_reserve[]: 0 0 1 1 1 [ 458.790472][ T9889] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 458.878554][ T9889] lowmem_reserve[]: 0 0 0 0 0 [ 458.906295][ T9889] Node 1 Normal free:3888640kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20876kB local_pcp:9792kB free_cma:0kB [ 459.096388][ T9889] lowmem_reserve[]: 0 0 0 0 0 [ 459.140351][ T9889] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 459.259971][ T9889] Node 0 DMA32: 787*4kB (ME) 485*8kB (UME) 189*16kB (ME) 49*32kB (UME) 4*64kB (UME) 3*128kB (UME) 2*256kB (UM) 2*512kB (UE) 9*1024kB (U) 6*2048kB (UME) 265*4096kB (UM) = 1120740kB [ 459.350682][ T9889] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 459.410535][ T9889] Node 1 Normal: 188*4kB (UE) 66*8kB (UME) 36*16kB (UME) 78*32kB (UME) 26*64kB (UME) 7*128kB (UME) 5*256kB (UME) 5*512kB (UME) 3*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3888640kB [ 459.484339][ T9889] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 459.512478][ T9889] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 459.533483][ T9889] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 459.579669][ T9889] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 459.607054][ T9889] 59706 total pagecache pages [ 459.626313][ T9889] 0 pages in swap cache [ 459.644565][ T9889] Free swap = 124996kB [ 459.659232][ T9889] Total swap = 124996kB [ 459.668500][ T9889] 2097051 pages RAM [ 459.679297][ T9889] 0 pages HighMem/MovableOnly [ 459.688839][ T9889] 425662 pages reserved [ 459.702645][ T9889] 0 pages cma reserved [ 459.889083][ T9951] loop9: detected capacity change from 0 to 128 [ 463.597887][ T1053] team0 (unregistering): Port device team_slave_1 removed [ 463.667684][ T1053] team0 (unregistering): Port device team_slave_0 removed [ 464.636406][ T9726] team0: Port device team_slave_0 added [ 464.644792][ T9726] team0: Port device team_slave_1 added [ 464.696885][ T9925] tipc: Enabled bearer , priority 0 [ 464.711671][ T9968] netlink: 8 bytes leftover after parsing attributes in process `syz.8.922'. [ 464.743977][ T9927] syzkaller0: entered promiscuous mode [ 464.763878][ T9927] syzkaller0: entered allmulticast mode [ 465.558123][ T9726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.577074][ T9726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.658386][ T9726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.674844][ T9726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.682328][ T9726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.710865][ T9726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.814584][ T5851] tipc: Node number set to 4278677397 [ 466.170244][ T9927] tipc: Resetting bearer [ 466.399851][ T9927] tipc: Disabling bearer [ 467.709942][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.759947][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.789936][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.859934][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.889427][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.946190][ C0] vkms_vblank_simulate: vblank timer overrun [ 468.019969][ C0] vkms_vblank_simulate: vblank timer overrun [ 468.049147][ C0] vkms_vblank_simulate: vblank timer overrun [ 469.637104][ T9726] hsr_slave_0: entered promiscuous mode [ 469.753141][ T9726] hsr_slave_1: entered promiscuous mode [ 469.770693][ T9726] debugfs: 'hsr0' already exists in 'hsr' [ 469.798483][ T9726] Cannot create hsr debugfs directory [ 472.933034][T10043] 9pnet_fd: Insufficient options for proto=fd [ 473.750542][T10057] loop8: detected capacity change from 0 to 2048 [ 473.799839][T10057] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 473.870711][T10053] tipc: Enabled bearer , priority 0 [ 473.877421][T10051] sctp: [Deprecated]: syz.6.941 (pid 10051) Use of int in maxseg socket option. [ 473.877421][T10051] Use struct sctp_assoc_value instead [ 473.956946][T10060] syzkaller0: entered promiscuous mode [ 473.998526][T10060] syzkaller0: entered allmulticast mode [ 474.183197][T10053] tipc: Resetting bearer [ 474.455662][T10052] tipc: Resetting bearer [ 474.535675][T10052] tipc: Disabling bearer [ 475.980926][ T9726] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 476.067490][ T9726] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 476.309681][ T9726] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 476.402327][ T9726] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 477.727713][ T9726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.804412][ T9726] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.861234][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.868411][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.942508][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.949663][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.853701][T10113] loop9: detected capacity change from 0 to 1024 [ 479.203647][ T9726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.225973][ T3496] hfsplus: b-tree write err: -5, ino 3 [ 479.469211][ T9726] veth0_vlan: entered promiscuous mode [ 479.621934][T10118] sctp: [Deprecated]: syz.5.957 (pid 10118) Use of int in maxseg socket option. [ 479.621934][T10118] Use struct sctp_assoc_value instead [ 479.652875][ T9726] veth1_vlan: entered promiscuous mode [ 480.068664][ T9726] veth0_macvtap: entered promiscuous mode [ 480.263278][ T9726] veth1_macvtap: entered promiscuous mode [ 480.363048][ T9726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.464680][ T9726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.584075][ T3496] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.616162][ T3496] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.654128][ T3496] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.060760][ T3496] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.308164][ T6280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.343079][ T6280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.514388][ T6280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.559282][ T6280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.946762][T10143] Bluetooth: MGMT ver 1.23 [ 483.992497][T10173] loop0: detected capacity change from 0 to 256 [ 484.038222][T10173] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012c80, chksum : 0x0ff561db, utbl_chksum : 0xe619d30d) [ 485.269983][ T30] audit: type=1800 audit(1755997941.838:8): pid=10173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.967" name="bus" dev="loop0" ino=1048629 res=0 errno=0 [ 488.315303][T10200] sctp: [Deprecated]: syz.6.971 (pid 10200) Use of int in maxseg socket option. [ 488.315303][T10200] Use struct sctp_assoc_value instead [ 489.771474][T10229] netlink: 200 bytes leftover after parsing attributes in process `syz.9.979'. [ 494.473386][T10273] sctp: [Deprecated]: syz.1.990 (pid 10273) Use of int in maxseg socket option. [ 494.473386][T10273] Use struct sctp_assoc_value instead [ 494.820195][ T43] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 494.900190][ T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 495.103036][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 495.120575][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 495.138213][ T9] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 495.169745][ T9] usb 9-1: config 0 has no interface number 0 [ 495.217988][ T9] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 495.273204][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.323239][ T9] usb 9-1: Product: syz [ 495.334208][ T9] usb 9-1: Manufacturer: syz [ 495.354987][ T9] usb 9-1: SerialNumber: syz [ 495.373778][ T43] usb 1-1: config 1 has an invalid descriptor of length 22, skipping remainder of the config [ 495.389013][ T9] usb 9-1: config 0 descriptor?? [ 495.413963][ T9] smsc95xx v2.0.0 [ 495.532453][ T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 10240, setting to 64 [ 495.574865][ T43] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 495.720388][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 495.773349][ T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 495.799081][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.827074][ T9] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 495.861298][ T43] usb 1-1: Product: syz [ 495.865475][ T43] usb 1-1: Manufacturer: syz [ 495.883364][ T9] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 495.891738][ T43] usb 1-1: SerialNumber: syz [ 496.088766][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 496.097536][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 496.106697][ T10] usb 6-1: config 4 has an invalid interface number: 30 but max is 0 [ 496.123639][ T10] usb 6-1: config 4 has no interface number 0 [ 496.129956][ T10] usb 6-1: config 4 interface 30 has no altsetting 0 [ 496.162469][ T43] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 496.188501][ T43] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 497.073097][ T43] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 497.121864][ T10] usb 6-1: string descriptor 0 read error: -22 [ 497.156602][ T10] usb 6-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 497.258157][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.312002][T10310] loop6: detected capacity change from 0 to 256 [ 497.347436][T10310] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 497.370543][T10310] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 497.723361][ T9] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 497.744447][ T10] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 497.759151][ T9] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 497.770077][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 497.776159][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 497.907000][ T9] usb 9-1: USB disconnect, device number 5 [ 497.931809][T10310] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 497.964038][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 497.994468][ T10] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 498.010425][ T10] usb 6-1: media controller created [ 498.015804][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 498.021822][ T10] dw2102: i2c transfer failed. [ 498.026757][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 498.202556][T10317] exFAT-fs (loop6): error, invalid access to FAT (entry 0xffffffff) [ 498.210671][T10317] exFAT-fs (loop6): Filesystem has been set read-only [ 498.450205][ T10] dw2102: i2c transfer failed. [ 498.455496][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 498.469460][ T10] dw2102: i2c transfer failed. [ 498.490682][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 498.507508][T10317] exFAT-fs (loop6): error, invalid access to FAT (entry 0xffffffff) [ 498.518995][T10317] exFAT-fs (loop6): error, invalid access to FAT (entry 0xffffffff) [ 498.619443][ T10] dw2102: i2c transfer failed. [ 498.633409][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 498.659477][ T10] dw2102: i2c transfer failed. [ 498.700278][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 498.709373][ T10] dw2102: i2c transfer failed. [ 498.741407][ T10] dvb-usb: MAC address: 02:02:02:02:02:02 [ 498.768270][ T9] usb 1-1: USB disconnect, device number 11 [ 498.973122][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 499.028318][T10323] netlink: 'syz.5.1001': attribute type 1 has an invalid length. [ 499.106253][T10323] netlink: 'syz.5.1001': attribute type 2 has an invalid length. [ 499.118962][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 499.136558][ T10] dw2102: command 0x0e transfer failed. [ 499.177023][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 499.231356][ T10] dw2102: command 0x0e transfer failed. [ 499.561977][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 499.574963][ T10] dw2102: command 0x0e transfer failed. [ 499.659997][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 499.705864][ T10] dw2102: command 0x0e transfer failed. [ 499.728145][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 499.749433][ T10] dw2102: command 0x51 transfer failed. [ 499.777417][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 499.862993][ T10] dw2102: i2c probe for address 0x68 failed. [ 499.910233][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 499.959482][ T10] dw2102: i2c probe for address 0x69 failed. [ 500.020354][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 500.046798][ T10] dw2102: i2c probe for address 0x6a failed. [ 500.073961][ T10] dw2102: probing for demodulator failed. Is the external power switched on? [ 500.131115][ T10] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 500.320159][ T10] rc_core: IR keymap rc-tt-1500 not found [ 500.336183][ T10] Registered IR keymap rc-empty [ 500.384372][ T10] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 500.462929][ T10] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input13 [ 500.533812][ T10] dvb-usb: schedule remote query interval to 250 msecs. [ 500.579040][ T10] dw2102: su3000_power_ctrl: 0, initialized 1 [ 500.609748][ T10] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 500.800649][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.808328][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.840209][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 500.870858][T10351] sctp: [Deprecated]: syz.0.1008 (pid 10351) Use of int in maxseg socket option. [ 500.870858][T10351] Use struct sctp_assoc_value instead [ 500.883167][ T9] dw2102: i2c transfer failed. [ 501.077643][ T10] usb 6-1: USB disconnect, device number 7 [ 501.473720][ T10] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 501.718592][T10367] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 501.725262][T10367] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 501.789376][T10367] vhci_hcd vhci_hcd.0: Device attached [ 501.833182][T10371] loop0: detected capacity change from 0 to 512 [ 502.130314][ T9] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 504.237056][T10394] 9pnet_fd: Insufficient options for proto=fd [ 504.292118][ T6004] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 504.754951][ T6004] usb 2-1: Using ep0 maxpacket: 8 [ 504.851881][ T6004] usb 2-1: unable to get BOS descriptor or descriptor too short [ 504.942052][ T6004] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 505.224332][ T6004] usb 2-1: config 4 has no interface number 0 [ 505.278429][ T6004] usb 2-1: config 4 interface 30 has no altsetting 0 [ 505.338043][ T6004] usb 2-1: string descriptor 0 read error: -22 [ 505.380983][ T6004] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 505.426647][ T6004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.674452][ T6004] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 505.690706][ T6004] dw2102: su3000_power_ctrl: 1, initialized 0 [ 505.697026][ T6004] dvb-usb: bulk message failed: -22 (2/0) [ 505.780926][ T6004] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 505.820856][ T6004] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 505.849067][ T6004] usb 2-1: media controller created [ 505.864213][T10389] dvb-usb: bulk message failed: -22 (3/0) [ 505.912369][T10389] dw2102: i2c transfer failed. [ 505.917394][ T6004] dvb-usb: bulk message failed: -22 (6/0) [ 505.957968][ T6004] dw2102: i2c transfer failed. [ 505.979990][ T6004] dvb-usb: bulk message failed: -22 (6/0) [ 506.015396][ T6004] dw2102: i2c transfer failed. [ 506.057851][ T6004] dvb-usb: bulk message failed: -22 (6/0) [ 506.142913][ T6004] dw2102: i2c transfer failed. [ 506.147729][ T6004] dvb-usb: bulk message failed: -22 (6/0) [ 506.220035][ T6004] dw2102: i2c transfer failed. [ 506.253448][ T6004] dvb-usb: bulk message failed: -22 (6/0) [ 506.297714][ T6004] dw2102: i2c transfer failed. [ 506.335015][ T6004] dvb-usb: bulk message failed: -22 (6/0) [ 506.348757][ T6004] dw2102: i2c transfer failed. [ 506.375904][ T6004] dvb-usb: MAC address: 02:02:02:02:02:02 [ 506.485882][ T6004] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 506.699819][ T6004] dvb-usb: bulk message failed: -22 (3/0) [ 506.739337][ T6004] dw2102: command 0x0e transfer failed. [ 506.790050][ T6004] dvb-usb: bulk message failed: -22 (3/0) [ 506.806509][ T6004] dw2102: command 0x0e transfer failed. [ 507.352809][ T6004] dvb-usb: bulk message failed: -22 (3/0) [ 507.384636][ T6004] dw2102: command 0x0e transfer failed. [ 507.486565][ T6004] dvb-usb: bulk message failed: -22 (3/0) [ 507.522560][ T6004] dw2102: command 0x0e transfer failed. [ 507.528202][ T6004] dvb-usb: bulk message failed: -22 (1/0) [ 507.593720][ T6004] dw2102: command 0x51 transfer failed. [ 507.730001][ T6004] dvb-usb: bulk message failed: -22 (5/0) [ 507.735775][ T6004] dw2102: i2c probe for address 0x68 failed. [ 507.742208][ T6004] dvb-usb: bulk message failed: -22 (5/0) [ 507.747964][ T6004] dw2102: i2c probe for address 0x69 failed. [ 507.757522][ T6004] dvb-usb: bulk message failed: -22 (5/0) [ 507.763507][ T6004] dw2102: i2c probe for address 0x6a failed. [ 507.769483][ T6004] dw2102: probing for demodulator failed. Is the external power switched on? [ 507.778816][ T6004] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 508.760109][ T6004] rc_core: IR keymap rc-tt-1500 not found [ 508.765877][ T6004] Registered IR keymap rc-empty [ 508.858019][ T6004] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 508.991606][ T6004] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input14 [ 509.046618][ T6004] dvb-usb: schedule remote query interval to 250 msecs. [ 509.128343][ T6004] dw2102: su3000_power_ctrl: 0, initialized 1 [ 509.149490][ T6004] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 509.226430][ T6004] usb 2-1: USB disconnect, device number 2 [ 511.529296][ T6004] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 512.362615][T10487] loop2: detected capacity change from 0 to 7 [ 512.402027][T10487] Dev loop2: unable to read RDB block 7 [ 512.430570][ T5951] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 512.438150][T10487] loop2: unable to read partition table [ 512.482527][T10487] loop2: partition table beyond EOD, truncated [ 512.518520][T10487] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 512.799984][ T5951] usb 2-1: Using ep0 maxpacket: 8 [ 512.821068][ T5951] usb 2-1: unable to get BOS descriptor or descriptor too short [ 512.860959][ T5951] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 512.928694][ T5951] usb 2-1: config 4 has no interface number 0 [ 512.983226][ T5951] usb 2-1: config 4 interface 30 has no altsetting 0 [ 513.025485][ T5951] usb 2-1: string descriptor 0 read error: -22 [ 513.041452][ T5951] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 513.088161][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.166189][ T5951] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 513.200296][ T5951] dw2102: su3000_power_ctrl: 1, initialized 0 [ 513.216628][ T5951] dvb-usb: bulk message failed: -22 (2/0) [ 513.257336][ T5951] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 513.430284][T10484] dvb-usb: bulk message failed: -22 (3/0) [ 513.436040][T10484] dw2102: i2c transfer failed. [ 513.450589][ T5951] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 513.488544][ T5951] usb 2-1: media controller created [ 513.529173][ T5951] dvb-usb: bulk message failed: -22 (6/0) [ 513.570180][ T5951] dw2102: i2c transfer failed. [ 513.590754][ T5951] dvb-usb: bulk message failed: -22 (6/0) [ 513.635725][ T5951] dw2102: i2c transfer failed. [ 513.662017][ T5951] dvb-usb: bulk message failed: -22 (6/0) [ 513.667738][ T5951] dw2102: i2c transfer failed. [ 513.687783][ T5951] dvb-usb: bulk message failed: -22 (6/0) [ 513.724937][ T5951] dw2102: i2c transfer failed. [ 513.754212][ T5951] dvb-usb: bulk message failed: -22 (6/0) [ 513.793083][ T5951] dw2102: i2c transfer failed. [ 513.832475][ T5951] dvb-usb: bulk message failed: -22 (6/0) [ 513.873516][ T5951] dw2102: i2c transfer failed. [ 513.913453][ T5951] dvb-usb: MAC address: 02:02:02:02:02:02 [ 514.030240][ T5951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 514.154324][ T5951] dvb-usb: bulk message failed: -22 (3/0) [ 514.286539][ T5951] dw2102: command 0x0e transfer failed. [ 514.342685][ T5951] dvb-usb: bulk message failed: -22 (3/0) [ 514.404520][ T5951] dw2102: command 0x0e transfer failed. [ 515.445838][ T5951] dvb-usb: bulk message failed: -22 (3/0) [ 515.457596][T10537] loop0: detected capacity change from 0 to 4096 [ 515.500203][ T5951] dw2102: command 0x0e transfer failed. [ 515.506184][ T5951] dvb-usb: bulk message failed: -22 (3/0) [ 515.512117][ T5951] dw2102: command 0x0e transfer failed. [ 515.517803][ T5951] dvb-usb: bulk message failed: -22 (1/0) [ 515.526482][ T5951] dw2102: command 0x51 transfer failed. [ 515.532535][ T5951] dvb-usb: bulk message failed: -22 (5/0) [ 515.538295][ T5951] dw2102: i2c probe for address 0x68 failed. [ 515.544552][ T5951] dvb-usb: bulk message failed: -22 (5/0) [ 515.866749][ T5951] dw2102: i2c probe for address 0x69 failed. [ 516.153892][ T5951] dvb-usb: bulk message failed: -22 (5/0) [ 516.159637][ T5951] dw2102: i2c probe for address 0x6a failed. [ 516.301367][ T5951] dw2102: probing for demodulator failed. Is the external power switched on? [ 516.319943][ T5951] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 516.372128][T10537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.890457][ T5951] rc_core: IR keymap rc-tt-1500 not found [ 516.915506][ T5863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.938814][ T5951] Registered IR keymap rc-empty [ 516.991312][ T5951] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 517.056568][ T5951] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input15 [ 517.212677][ T5951] dvb-usb: schedule remote query interval to 250 msecs. [ 517.302228][ T5951] dw2102: su3000_power_ctrl: 0, initialized 1 [ 517.368505][ T5951] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 517.446196][ T5951] usb 2-1: USB disconnect, device number 3 [ 517.563358][T10556] random: crng reseeded on system resumption [ 517.748988][T10558] loop2: detected capacity change from 0 to 7 [ 517.920508][T10558] Dev loop2: unable to read RDB block 7 [ 518.141342][ T5951] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 518.237696][T10558] loop2: unable to read partition table [ 518.316244][T10558] loop2: partition table beyond EOD, truncated [ 518.342979][T10568] netlink: 200 bytes leftover after parsing attributes in process `wޣ'. [ 518.430071][T10558] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 519.300352][ T6004] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 519.970779][ T6004] usb 9-1: Using ep0 maxpacket: 8 [ 519.989705][ T6004] usb 9-1: unable to get BOS descriptor or descriptor too short [ 520.001800][ T6004] usb 9-1: config 4 has an invalid interface number: 30 but max is 0 [ 520.013284][ T6004] usb 9-1: config 4 has no interface number 0 [ 520.019578][ T6004] usb 9-1: config 4 interface 30 has no altsetting 0 [ 520.084057][ T6004] usb 9-1: string descriptor 0 read error: -22 [ 520.107395][ T6004] usb 9-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 520.135763][ T6004] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.191480][ T6004] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 520.224877][ T6004] dw2102: su3000_power_ctrl: 1, initialized 0 [ 520.277535][ T6004] dvb-usb: bulk message failed: -22 (2/0) [ 520.305596][ T6004] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 520.343617][ T6004] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 520.368286][ T6004] usb 9-1: media controller created [ 520.376077][T10574] dvb-usb: bulk message failed: -22 (3/0) [ 520.389258][T10574] dw2102: i2c transfer failed. [ 520.403322][ T6004] dvb-usb: bulk message failed: -22 (6/0) [ 520.433010][ T6004] dw2102: i2c transfer failed. [ 520.452141][ T6004] dvb-usb: bulk message failed: -22 (6/0) [ 520.580095][ T43] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 520.596939][T10368] vhci_hcd: connection reset by peer [ 520.630013][ T6004] dw2102: i2c transfer failed. [ 520.634826][ T6004] dvb-usb: bulk message failed: -22 (6/0) [ 520.640000][ T6891] vhci_hcd: stop threads [ 520.653760][ T6004] dw2102: i2c transfer failed. [ 520.658560][ T6004] dvb-usb: bulk message failed: -22 (6/0) [ 520.668906][ T6891] vhci_hcd: release socket [ 520.712876][ T6891] vhci_hcd: disconnect device [ 520.738028][ T6004] dw2102: i2c transfer failed. [ 520.759888][ T6004] dvb-usb: bulk message failed: -22 (6/0) [ 520.765936][ T6004] dw2102: i2c transfer failed. [ 520.770070][ T9] vhci_hcd: vhci_device speed not set [ 520.776823][ T43] usb 7-1: Using ep0 maxpacket: 8 [ 520.891344][ T43] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 520.947024][ T6004] dvb-usb: bulk message failed: -22 (6/0) [ 520.970357][ T6004] dw2102: i2c transfer failed. [ 520.975157][ T6004] dvb-usb: MAC address: 02:02:02:02:02:02 [ 520.981526][ T43] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 521.070484][ T43] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 521.127006][T10602] random: crng reseeded on system resumption [ 521.170656][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.193668][ T6004] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 521.273995][ T43] usbtmc 7-1:16.0: bulk endpoints not found [ 521.454375][ T6004] dvb-usb: bulk message failed: -22 (3/0) [ 521.470184][ T6004] dw2102: command 0x0e transfer failed. [ 521.486572][ T6004] dvb-usb: bulk message failed: -22 (3/0) [ 521.492588][ T6004] dw2102: command 0x0e transfer failed. [ 521.568173][T10608] overlayfs: failed to resolve './file0': -2 [ 521.813146][ T6004] dvb-usb: bulk message failed: -22 (3/0) [ 521.818913][ T6004] dw2102: command 0x0e transfer failed. [ 521.930021][ T6004] dvb-usb: bulk message failed: -22 (3/0) [ 521.943512][ T6004] dw2102: command 0x0e transfer failed. [ 521.960020][ T6004] dvb-usb: bulk message failed: -22 (1/0) [ 521.969196][ T6004] dw2102: command 0x51 transfer failed. [ 521.984840][ T6004] dvb-usb: bulk message failed: -22 (5/0) [ 522.023657][ T6004] dw2102: i2c probe for address 0x68 failed. [ 522.221165][ T6004] dvb-usb: bulk message failed: -22 (5/0) [ 522.227537][ T6004] dw2102: i2c probe for address 0x69 failed. [ 522.235307][ T6004] dvb-usb: bulk message failed: -22 (5/0) [ 522.250002][ T6004] dw2102: i2c probe for address 0x6a failed. [ 522.255980][ T6004] dw2102: probing for demodulator failed. Is the external power switched on? [ 522.265095][ T6004] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 523.370016][ T6004] rc_core: IR keymap rc-tt-1500 not found [ 523.377079][ T5951] usb 7-1: USB disconnect, device number 6 [ 523.398281][ T6004] Registered IR keymap rc-empty [ 523.474823][ T6004] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 523.618381][ T6004] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input16 [ 523.630840][ T6004] dvb-usb: schedule remote query interval to 250 msecs. [ 523.637872][ T6004] dw2102: su3000_power_ctrl: 0, initialized 1 [ 523.644043][ T6004] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 523.656713][ T6004] usb 9-1: USB disconnect, device number 6 [ 524.515895][ T6004] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 524.770585][T10663] random: crng reseeded on system resumption [ 524.941231][ T6004] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 525.100113][ T6004] usb 9-1: Using ep0 maxpacket: 8 [ 525.287320][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1086'. [ 525.387914][ T6004] usb 9-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 525.406491][ T6004] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 64256, setting to 64 [ 525.471985][ T6004] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 525.638280][ T6004] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 525.667675][ T6004] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.707061][ T6004] usb 9-1: Product: syz [ 525.727812][T10681] overlayfs: failed to resolve './file0': -2 [ 525.795312][ T6004] usb 9-1: Manufacturer: syz [ 525.830235][ T6004] usb 9-1: SerialNumber: syz [ 525.953101][ T6004] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 526.058610][ T6004] usbtest 9-1:1.0: couldn't get endpoints, -22 [ 526.100337][ T6004] usbtest 9-1:1.0: probe with driver usbtest failed with error -22 [ 526.374807][T10694] loop0: detected capacity change from 0 to 16 [ 526.441385][T10694] erofs (device loop0): blkszbits 3 isn't supported [ 526.750126][ T5851] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 526.920018][ T5851] usb 7-1: Using ep0 maxpacket: 8 [ 526.944780][ T5851] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 526.972303][ T5851] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 527.087126][ T5851] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 527.131521][ T5851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.183424][ T5851] usbtmc 7-1:16.0: bulk endpoints not found [ 528.275386][T10710] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1095'. [ 528.714769][T10714] loop9: detected capacity change from 0 to 8 [ 529.508769][T10726] random: crng reseeded on system resumption [ 529.703486][ T43] usb 7-1: USB disconnect, device number 7 [ 529.850276][ T5851] usb 9-1: USB disconnect, device number 7 [ 530.015071][T10736] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1100'. [ 530.089480][T10741] overlayfs: failed to resolve './file1': -2 [ 531.192792][T10759] loop9: detected capacity change from 0 to 512 [ 531.223596][T10759] EXT4-fs: Ignoring removed nobh option [ 531.274187][T10759] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 531.417348][T10759] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #3: comm syz.9.1105: corrupted inode contents [ 531.541546][T10759] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #3: comm syz.9.1105: mark_inode_dirty error [ 531.811260][T10759] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #3: comm syz.9.1105: corrupted inode contents [ 532.224274][T10759] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #3: comm syz.9.1105: mark_inode_dirty error [ 532.282872][T10765] 9pnet_fd: Insufficient options for proto=fd [ 532.412860][T10759] Quota error (device loop9): write_blk: dquota write failed [ 532.462504][T10759] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 532.565910][T10759] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.1105: Failed to acquire dquot type 0 [ 532.660531][T10781] loop0: detected capacity change from 0 to 8 [ 532.764745][T10759] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.1105: corrupted inode contents [ 532.883990][T10759] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #16: comm syz.9.1105: mark_inode_dirty error [ 532.997294][T10759] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.1105: corrupted inode contents [ 533.089824][T10759] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.1105: mark_inode_dirty error [ 533.109879][ T9] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 533.167894][T10759] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.1105: corrupted inode contents [ 533.240018][T10759] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 533.281083][T10759] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.1105: corrupted inode contents [ 533.298643][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 533.332482][T10759] EXT4-fs error (device loop9): ext4_truncate:4666: inode #16: comm syz.9.1105: mark_inode_dirty error [ 533.349917][ T9] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 533.380346][ T9] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 533.395760][T10759] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 533.450497][ T9] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 533.487420][T10759] EXT4-fs (loop9): 1 truncate cleaned up [ 533.504644][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.540664][T10793] random: crng reseeded on system resumption [ 533.560627][T10759] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.613953][ T9] usbtmc 9-1:16.0: bulk endpoints not found [ 533.618669][T10759] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.054827][T10803] overlayfs: failed to resolve './file1': -2 [ 534.584583][ T7877] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.812582][T10824] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1123'. [ 535.206676][ T3496] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.303949][T10830] tipc: Enabling of bearer rejected, failed to enable media [ 535.482793][ T3496] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.675473][ T3496] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.782674][ T3496] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.885869][ T5964] usb 9-1: USB disconnect, device number 8 [ 536.288473][T10851] random: crng reseeded on system resumption [ 536.304710][T10852] overlayfs: failed to resolve './file1': -2 [ 536.338100][T10853] loop6: detected capacity change from 0 to 512 [ 536.409769][T10853] EXT4-fs: Ignoring removed oldalloc option [ 536.441547][ T3496] bridge_slave_1: left allmulticast mode [ 536.466979][ T3496] bridge_slave_1: left promiscuous mode [ 536.472789][ T3496] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.502401][T10853] EXT4-fs (loop6): 1 truncate cleaned up [ 536.560793][T10853] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.701969][ T3496] bridge_slave_0: left allmulticast mode [ 536.763691][ T3496] bridge_slave_0: left promiscuous mode [ 536.815297][ T3496] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.992700][T10870] 9pnet_fd: Insufficient options for proto=fd [ 538.583179][T10891] loop1: detected capacity change from 0 to 1024 [ 538.819260][ T5874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 538.830031][ T5874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 538.837877][ T5874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 538.847540][ T5874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 538.855337][ T5874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 538.874989][ T30] audit: type=1800 audit(1755998251.412:9): pid=10891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1139" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 540.117598][ T3496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.346212][T10903] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1141'. [ 540.449899][ T3496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.528668][ T3496] bond0 (unregistering): Released all slaves [ 540.577359][ T3496] bond1 (unregistering): Released all slaves [ 540.655828][T10907] tipc: Enabled bearer , priority 0 [ 540.785813][ T7595] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.862836][T10907] tipc: Resetting bearer [ 541.164019][ T5874] Bluetooth: hci2: command tx timeout [ 541.179400][T10921] loop1: detected capacity change from 0 to 1024 [ 541.285749][T10921] EXT4-fs: Ignoring removed nomblk_io_submit option [ 541.316133][T10928] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1144'. [ 541.426940][T10921] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 541.490504][T10921] System zones: 0-1, 3-36 [ 541.644627][T10921] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.667037][T10905] tipc: Disabling bearer [ 541.795508][T10921] capability: warning: `syz.1.1146' uses deprecated v2 capabilities in a way that may be insecure [ 542.074287][ T9726] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.096649][ T5874] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 543.226178][ T5874] Bluetooth: hci2: command tx timeout [ 543.301329][ T5874] Bluetooth: hci1: unexpected event for opcode 0x0c23 [ 543.647847][T10951] 9pnet_fd: Insufficient options for proto=fd [ 543.662072][ T3496] hsr_slave_0: left promiscuous mode [ 543.739100][ T3496] hsr_slave_1: left promiscuous mode [ 543.812786][ T3496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.932109][ T3496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.297252][ T3496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.345900][ T3496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.398117][ T5874] Bluetooth: hci2: command tx timeout [ 546.320515][ T3496] veth1_macvtap: left promiscuous mode [ 546.339061][ T3496] veth0_macvtap: left promiscuous mode [ 546.349676][ T3496] veth1_vlan: left promiscuous mode [ 546.359252][ T3496] veth0_vlan: left promiscuous mode [ 546.574942][T10984] netlink: 200 bytes leftover after parsing attributes in process `wޣ'. [ 546.585780][T10984] netlink: 12 bytes leftover after parsing attributes in process `wޣ'. [ 547.323983][T10999] sctp: [Deprecated]: syz.8.1165 (pid 10999) Use of int in maxseg socket option. [ 547.323983][T10999] Use struct sctp_assoc_value instead [ 547.339288][T11008] loop5: detected capacity change from 0 to 136 [ 547.481861][ T5874] Bluetooth: hci2: command tx timeout [ 551.139262][T11045] loop0: detected capacity change from 0 to 8 [ 551.160132][T11045] SQUASHFS error: Failed to read block 0x1e8: -5 [ 551.166683][T11045] unable to read xattr id index table [ 551.270079][ T3496] team0 (unregistering): Port device team_slave_1 removed [ 552.630769][ T3496] team0 (unregistering): Port device team_slave_0 removed [ 553.035674][T11060] loop8: detected capacity change from 0 to 512 [ 554.201637][T11070] loop8: detected capacity change from 0 to 1024 [ 554.266549][T11070] ext4: Unknown parameter 'fscontext' [ 557.818198][T11086] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1184'. [ 557.848827][T11086] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1184'. [ 557.885333][T11088] loop6: detected capacity change from 0 to 512 [ 557.904311][T11088] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 557.924403][T11088] EXT4-fs (loop6): blocks per group (34) and clusters per group (32768) inconsistent [ 559.100510][T11100] 9pnet_fd: Insufficient options for proto=fd [ 559.828634][T11109] input: syz1 as /devices/virtual/input/input17 [ 561.195332][T11114] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1191'. [ 561.386654][T10892] chnl_net:caif_netlink_parms(): no params data found [ 562.190229][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.196819][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.585637][T10892] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.623374][T10892] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.670174][T10892] bridge_slave_0: entered allmulticast mode [ 562.701290][T10892] bridge_slave_0: entered promiscuous mode [ 562.782822][T10892] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.811405][T10892] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.841614][T10892] bridge_slave_1: entered allmulticast mode [ 562.890684][T10892] bridge_slave_1: entered promiscuous mode [ 563.370406][T10892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.375938][T11157] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1200'. [ 563.439536][T10892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.447710][T11157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1200'. [ 564.263220][ T5861] Bluetooth: hci4: command 0x040f tx timeout [ 564.687355][T10892] team0: Port device team_slave_0 added [ 564.975247][T10892] team0: Port device team_slave_1 added [ 565.403824][T11167] 9pnet_fd: Insufficient options for proto=fd [ 565.649809][T10892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.700018][T10892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.906782][T10892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.977301][T10892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.025875][T10892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.180741][T10892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.591470][T11174] syzkaller0: entered promiscuous mode [ 566.597025][T11174] syzkaller0: entered allmulticast mode [ 568.216230][ T5874] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 568.280256][T11197] binder: 11196:11197 ioctl 4018620d 0 returned -22 [ 568.287459][T11197] binder: 11196:11197 ioctl c0046209 200000000000000 returned -22 [ 568.931972][T11201] loop5: detected capacity change from 0 to 512 [ 569.023986][T11201] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 569.068311][T11205] loop2: detected capacity change from 0 to 7 [ 571.012609][T11205] Dev loop2: unable to read RDB block 7 [ 571.029782][T11205] loop2: unable to read partition table [ 571.037561][T11205] loop2: partition table beyond EOD, truncated [ 571.050032][T11205] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 571.419524][T11212] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1214'. [ 571.600762][T11212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1214'. [ 571.654334][T11219] loop5: detected capacity change from 0 to 1024 [ 571.698961][T11219] EXT4-fs: quotafile must be on filesystem root [ 574.133535][T11229] loop8: detected capacity change from 0 to 128 [ 574.217650][T11229] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 574.258668][T11229] ext4 filesystem being mounted at /165/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 574.414793][ T7233] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 576.994752][T10892] hsr_slave_0: entered promiscuous mode [ 577.055525][T10892] hsr_slave_1: entered promiscuous mode [ 577.081609][T10892] debugfs: 'hsr0' already exists in 'hsr' [ 577.107485][T10892] Cannot create hsr debugfs directory [ 577.820087][T11269] loop6: detected capacity change from 0 to 512 [ 577.956956][T11269] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.996239][T11269] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 578.344415][T11269] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1230: corrupted inode contents [ 578.395574][T11269] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.1230: mark_inode_dirty error [ 578.464717][T11269] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1230: corrupted inode contents [ 578.542209][T11269] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.1230: mark_inode_dirty error [ 580.588914][ T7595] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.839699][T11321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1240'. [ 582.923864][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1240'. [ 583.135116][T10892] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 583.175579][T10892] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 583.212763][T10892] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 583.375143][T10892] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 583.412220][T11327] netlink: 200 bytes leftover after parsing attributes in process `syz.5.1241'. [ 583.442929][T11327] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1241'. [ 583.764404][ T5851] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 583.851556][T10892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.946645][ T5851] usb 2-1: Using ep0 maxpacket: 8 [ 583.992559][ T5851] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 584.035954][ T5851] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 584.048432][T10892] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.092608][ T5851] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 584.127671][ T6280] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.134826][ T6280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.150019][ T5851] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 584.191101][ T5851] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 584.205779][ T6891] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.207102][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.212950][ T6891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.284260][ T5851] usbtmc 2-1:16.0: bulk endpoints not found [ 584.515968][T11353] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1246'. [ 584.574759][T11353] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1246'. [ 585.525769][T11360] loop6: detected capacity change from 0 to 1764 [ 587.116215][T10892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.267296][ T5851] usb 2-1: USB disconnect, device number 4 [ 587.579623][T11396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1254'. [ 587.589121][T11396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1254'. [ 587.613250][T10892] veth0_vlan: entered promiscuous mode [ 587.656357][T10892] veth1_vlan: entered promiscuous mode [ 587.974990][T10892] veth0_macvtap: entered promiscuous mode [ 588.054915][T10892] veth1_macvtap: entered promiscuous mode [ 588.325854][T10892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.487230][T10892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.851951][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.908283][T11419] Invalid option length (7055) for dns_resolver key [ 589.516264][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.636671][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.657696][T11423] loop0: detected capacity change from 0 to 512 [ 589.673923][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.736423][ T30] audit: type=1326 audit(1755998302.348:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11421 comm="syz.0.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd118d8ebe9 code=0x7ffc0000 [ 589.865600][ T30] audit: type=1326 audit(1755998302.348:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11421 comm="syz.0.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd118d8ebe9 code=0x7ffc0000 [ 589.988561][T11426] loop1: detected capacity change from 0 to 1024 [ 590.010172][ T30] audit: type=1326 audit(1755998302.348:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11421 comm="syz.0.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fd118d8ebe9 code=0x7ffc0000 [ 590.110199][ T30] audit: type=1326 audit(1755998302.348:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11421 comm="syz.0.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd118d8ebe9 code=0x7ffc0000 [ 590.155038][ T3496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.200991][ T3496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.394837][ T6280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.467300][ T6280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.976617][ T6280] hfsplus: b-tree write err: -5, ino 4 [ 591.952255][T11459] loop8: detected capacity change from 0 to 128 [ 592.049174][ T43] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 592.057064][T11459] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 592.280374][T11459] ext4 filesystem being mounted at /179/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 592.312204][ C1] vkms_vblank_simulate: vblank timer overrun [ 592.384780][T11466] loop2: detected capacity change from 0 to 7 [ 592.401418][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 593.064084][T11466] Dev loop2: unable to read RDB block 7 [ 593.095845][T11466] loop2: unable to read partition table [ 593.143096][T11466] loop2: partition table beyond EOD, truncated [ 593.453594][T11466] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 593.838455][ T43] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 593.895859][T11479] overlayfs: missing 'lowerdir' [ 593.905527][ T43] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 594.003502][ T43] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 594.074488][ T43] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 594.142676][ T7233] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 594.154137][ T43] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 594.238772][ T43] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 594.247837][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.379515][ T43] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 594.790448][T11495] loop3: detected capacity change from 0 to 8 [ 594.793401][ T10] usb 2-1: USB disconnect, device number 5 [ 594.826236][T11497] loop8: detected capacity change from 0 to 16 [ 595.055011][T11497] erofs (device loop8): mounted with root inode @ nid 36. [ 600.840699][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.470726][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.885246][T11545] overlayfs: missing 'lowerdir' [ 601.922387][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.515460][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.691736][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 602.707607][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 602.716150][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 602.740456][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 602.758067][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 602.815540][T11553] loop5: detected capacity change from 0 to 8 [ 602.877653][T11555] loop0: detected capacity change from 0 to 128 [ 602.896044][T11553] SQUASHFS error: Failed to read block 0x4de: -5 [ 602.902906][T11553] SQUASHFS error: Failed to read block 0x4de: -5 [ 602.981740][T11555] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 603.007335][ T30] audit: type=1800 audit(1755998315.634:14): pid=11553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1285" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 603.032592][T11555] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 603.078677][T11555] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 603.149606][T11555] UDF-fs: Scanning with blocksize 512 failed [ 603.210236][T11555] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 603.276716][T11555] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 603.323722][T11555] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 603.335272][T11555] UDF-fs: Scanning with blocksize 1024 failed [ 603.384045][T11555] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 603.488010][T11555] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 603.653380][ T5964] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 603.794760][ T13] bridge_slave_1: left allmulticast mode [ 603.800426][ T13] bridge_slave_1: left promiscuous mode [ 603.803448][T11555] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 603.827918][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.859545][T11555] UDF-fs: Scanning with blocksize 2048 failed [ 603.881251][ T13] bridge_slave_0: left allmulticast mode [ 603.917023][ T13] bridge_slave_0: left promiscuous mode [ 603.923604][T11555] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 603.953435][ T5964] usb 6-1: Using ep0 maxpacket: 8 [ 603.962437][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.982064][ T5964] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 604.009791][T11555] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 604.021091][ T5964] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 604.061535][ T5964] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 604.083592][ T5964] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 604.103089][ T5964] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 604.118062][T11555] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 604.152944][T11555] UDF-fs: Scanning with blocksize 4096 failed [ 604.183217][T11555] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 604.211975][ T5964] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 604.262698][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.287377][T11555] loop0: detected capacity change from 0 to 512 [ 604.351534][ T5964] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22 [ 604.368152][T11555] EXT4-fs (loop0): Test dummy encryption mode enabled [ 604.420478][T11555] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 604.578981][T11555] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 604.740035][T11555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 606.636684][T11498] Bluetooth: hci0: command tx timeout [ 606.787701][ T10] usb 6-1: USB disconnect, device number 8 [ 607.024006][ T5863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.077182][T11588] loop5: detected capacity change from 0 to 512 [ 607.120780][T11589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1298'. [ 607.212805][T11588] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1296: iget: bad i_size value: 38620345925642 [ 607.326105][T11588] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1296: couldn't read orphan inode 15 (err -117) [ 607.393254][T11588] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 607.567958][T11588] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.1296: iget: bad i_size value: 38620345925642 [ 608.067537][ T5875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.225875][T11601] overlayfs: missing 'lowerdir' [ 608.441879][T11605] loop0: detected capacity change from 0 to 2048 [ 608.461680][T11605] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 608.535580][T11605] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 608.728990][T11498] Bluetooth: hci0: command tx timeout [ 609.301103][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.371902][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.414763][ T13] bond0 (unregistering): Released all slaves [ 609.567989][ T13] tipc: Left network mode [ 609.857756][T11619] netlink: 'syz.3.1295': attribute type 1 has an invalid length. [ 610.430001][ T5952] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 610.441550][ T13] hsr_slave_0: left promiscuous mode [ 610.495243][ T13] hsr_slave_1: left promiscuous mode [ 610.515769][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.535758][T11629] loop1: detected capacity change from 0 to 1764 [ 610.547246][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.646502][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.655299][ T5952] usb 4-1: Using ep0 maxpacket: 8 [ 610.678994][ T5952] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 610.696006][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.742359][ T5952] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 610.790618][T11498] Bluetooth: hci0: command tx timeout [ 610.822992][ T5952] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 610.886384][ T13] veth1_macvtap: left promiscuous mode [ 610.913212][ T5952] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 610.931525][T11635] 9pnet_fd: Insufficient options for proto=fd [ 610.939903][ T13] veth0_macvtap: left promiscuous mode [ 610.953910][ T13] veth1_vlan: left promiscuous mode [ 610.977192][ T5952] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 610.991421][ T13] veth0_vlan: left promiscuous mode [ 611.049863][ T5952] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 611.069142][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.554379][ T5952] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 612.703654][T11647] loop5: detected capacity change from 0 to 512 [ 612.828797][T11647] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 612.869317][T11498] Bluetooth: hci0: command tx timeout [ 612.989719][T11647] EXT4-fs (loop5): 1 orphan inode deleted [ 612.995481][T11647] EXT4-fs (loop5): 1 truncate cleaned up [ 613.070720][T11647] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 613.239025][T11647] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 613.388228][ T9] usb 4-1: USB disconnect, device number 2 [ 613.422125][T11647] EXT4-fs (loop5): Remounting filesystem read-only [ 613.672494][ T5875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.744507][T11664] overlayfs: missing 'lowerdir' [ 617.219672][T11690] 9pnet_fd: Insufficient options for proto=fd [ 618.468140][ T56] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 618.655824][ T56] usb 9-1: Using ep0 maxpacket: 8 [ 618.673097][ T56] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 618.705524][ T56] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 618.821072][ T56] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 618.860700][ T56] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 618.931994][ T56] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 618.998781][ T56] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.087340][ T13] team0 (unregistering): Port device team_slave_1 removed [ 619.222246][ T13] team0 (unregistering): Port device team_slave_0 removed [ 619.262171][ T56] usb 9-1: usb_control_msg returned -32 [ 619.282258][ T56] usbtmc 9-1:16.0: can't read capabilities [ 619.347077][ T56] usb 9-1: USB disconnect, device number 9 [ 619.448517][T11711] overlayfs: missing 'lowerdir' [ 619.849942][T11714] 9pnet_fd: Insufficient options for proto=fd [ 623.530231][T11753] overlayfs: missing 'lowerdir' [ 623.588673][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.599850][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.641879][T11751] loop0: detected capacity change from 0 to 2048 [ 623.715322][T11751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.818886][T11751] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 624.425130][T11751] fscrypt (loop0, inode 13): Error -61 getting encryption context [ 624.598880][ T5863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.742779][T11767] loop3: detected capacity change from 0 to 512 [ 625.760520][T11767] ext2: Unknown parameter 'smackfstransmute' [ 626.944748][T11670] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1315'. [ 627.418535][T11674] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1315'. [ 627.581428][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 627.652334][T11783] loop0: detected capacity change from 0 to 512 [ 627.683257][T11783] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 627.727673][T11550] chnl_net:caif_netlink_parms(): no params data found [ 627.772061][T11783] EXT4-fs (loop0): invalid journal inode [ 627.777761][T11783] EXT4-fs (loop0): can't get journal size [ 627.804425][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 627.823790][ T9] usb 4-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config [ 627.887018][T11783] EXT4-fs (loop0): 1 truncate cleaned up [ 627.893247][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 51200, setting to 64 [ 627.919840][T11783] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 627.933373][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 627.950686][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 627.959840][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.970067][ T9] usb 4-1: Product: syz [ 627.981234][ T9] usb 4-1: Manufacturer: syz [ 627.985830][ T9] usb 4-1: SerialNumber: syz [ 628.052800][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 628.367497][ T9] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 628.459269][ T9] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 628.763863][ T5863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.200826][T11550] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.222625][T11550] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.260284][T11550] bridge_slave_0: entered allmulticast mode [ 629.292173][T11550] bridge_slave_0: entered promiscuous mode [ 629.355572][T11550] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.439624][T11550] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.470629][T11550] bridge_slave_1: entered allmulticast mode [ 629.705201][T11550] bridge_slave_1: entered promiscuous mode [ 630.406323][T11550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.478088][T11550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.596032][ T24] usb 4-1: USB disconnect, device number 3 [ 631.754262][T11550] team0: Port device team_slave_0 added [ 631.877651][T11550] team0: Port device team_slave_1 added [ 631.883634][T11836] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 631.890164][T11836] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 631.907780][T11836] vhci_hcd vhci_hcd.0: Device attached [ 631.915567][T11838] loop1: detected capacity change from 0 to 512 [ 631.919675][ T24] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 632.240896][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 632.289690][ T6007] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 632.307643][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.343211][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 632.365154][T11550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.389262][T11550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.449464][ T24] usb 6-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00 [ 632.473095][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.494714][T11550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.540096][ T24] usb 6-1: config 0 descriptor?? [ 632.564073][T11858] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1367'. [ 632.589295][T11550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.621752][T11550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.760092][T11550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.064563][T11864] overlayfs: failed to resolve './file1': -2 [ 633.127089][T11550] hsr_slave_0: entered promiscuous mode [ 633.153607][T11550] hsr_slave_1: entered promiscuous mode [ 633.177026][T11550] debugfs: 'hsr0' already exists in 'hsr' [ 633.213363][T11550] Cannot create hsr debugfs directory [ 633.277593][ T24] usb 6-1: USB disconnect, device number 9 [ 634.488490][T11886] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1372'. [ 634.678301][T11885] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1372'. [ 634.847819][ T6004] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 635.177711][ T5951] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 635.423593][ T6004] usb 9-1: config 0 has an invalid interface number: 154 but max is 0 [ 635.507531][ T6004] usb 9-1: config 0 has no interface number 0 [ 635.613598][ T6004] usb 9-1: New USB device found, idVendor=0bda, idProduct=f179, bcdDevice=fd.4b [ 635.732607][ T6004] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.947178][ T5951] usb 6-1: Using ep0 maxpacket: 8 [ 635.960681][ T5951] usb 6-1: config 1 has an invalid descriptor of length 33, skipping remainder of the config [ 635.971249][ T5951] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 2048, setting to 64 [ 635.990503][ T6004] usb 9-1: config 0 descriptor?? [ 636.025353][ T5951] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 636.237114][ T5951] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 636.307011][ T5951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.421439][ T5951] usb 6-1: Product: syz [ 636.563975][ T5951] usb 6-1: Manufacturer: syz [ 636.652788][ T5951] usb 6-1: SerialNumber: syz [ 636.794051][ T5951] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 636.833535][ T5951] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 636.868530][ T5951] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 637.563193][ T5952] usb 9-1: USB disconnect, device number 10 [ 639.612327][T11550] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 639.642645][T11936] loop8: detected capacity change from 0 to 512 [ 639.735510][T11932] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 639.742040][T11932] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 639.789787][ T5952] usb 6-1: USB disconnect, device number 10 [ 639.799747][T11550] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 639.864874][T11932] vhci_hcd vhci_hcd.0: Device attached [ 639.981561][T11550] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 640.125681][T11550] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 640.138085][ T5964] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 640.398671][T11959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1382'. [ 641.371044][T11550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.451630][T11977] loop0: detected capacity change from 0 to 512 [ 641.507262][T11977] EXT4-fs (loop0): Test dummy encryption mode enabled [ 641.516659][T11550] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.409181][T11934] vhci_hcd: connection reset by peer [ 643.473493][T11977] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 643.489450][ T6275] vhci_hcd: stop threads [ 643.506854][ T6275] vhci_hcd: release socket [ 643.554007][ T6275] vhci_hcd: disconnect device [ 643.584056][ T6891] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.591205][ T6891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.622548][T11977] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1388: bad orphan inode 131083 [ 643.631272][ T6891] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.640011][ T6891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.750668][T11977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.845673][T11977] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 643.854499][T11989] tipc: Started in network mode [ 643.859377][T11989] tipc: Node identity d622d8fdf23a, cluster identity 4711 [ 643.878087][T11989] tipc: Enabled bearer , priority 0 [ 643.910871][T11986] tipc: Resetting bearer [ 645.102873][ T9] tipc: Node number set to 605608189 [ 647.132341][ T5964] vhci_hcd: vhci_device speed not set [ 647.276219][T11984] tipc: Disabling bearer [ 647.915670][ T5863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.236886][T12005] loop5: detected capacity change from 0 to 512 [ 648.328321][T12005] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 648.517431][T12005] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 648.597884][T12005] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 648.632300][T12013] loop2: detected capacity change from 0 to 7 [ 648.681655][T12013] Dev loop2: unable to read RDB block 7 [ 648.703338][T12013] loop2: unable to read partition table [ 648.731156][T12013] loop2: partition table beyond EOD, truncated [ 648.773958][T12013] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 648.841903][T12005] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1792 out of range 0-5 [ 648.920983][T12005] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 648.991861][T12005] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1396: Failed to acquire dquot type 1 [ 649.265671][T12026] loop8: detected capacity change from 0 to 2048 [ 649.315121][ T5875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.417851][T12026] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 649.548984][T11550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.784770][ T30] audit: type=1800 audit(1755998362.428:15): pid=12026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1398" name="file1" dev="loop8" ino=1415 res=0 errno=0 [ 649.900251][ T9] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 649.987868][T12046] loop3: detected capacity change from 0 to 512 [ 650.043793][T12044] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 650.050337][T12044] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 650.084764][ T9] usb 6-1: config index 0 descriptor too short (expected 5668, got 36) [ 650.106566][ T9] usb 6-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 650.129301][T12044] vhci_hcd vhci_hcd.0: Device attached [ 650.164682][ T9] usb 6-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 650.211267][ T9] usb 6-1: config 3 has no interface number 0 [ 650.242981][ T9] usb 6-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 650.490072][ T6004] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 650.494178][ T9] usb 6-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 650.578992][ T9] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 650.618631][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.637721][ T9] usb 6-1: Product: syz [ 650.724381][ T9] usb 6-1: Manufacturer: syz [ 650.729011][ T9] usb 6-1: SerialNumber: syz [ 650.823509][T12036] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 651.042866][T12036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.077658][T12036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.335122][ T9] usb-storage 6-1:3.20: USB Mass Storage device detected [ 652.190871][ T9] usb-storage 6-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 652.252538][ T9] scsi host1: usb-storage 6-1:3.20 [ 652.376874][ T9] usb 6-1: USB disconnect, device number 11 [ 653.676177][T11550] veth0_vlan: entered promiscuous mode [ 653.965738][T11550] veth1_vlan: entered promiscuous mode [ 654.156483][T11550] veth0_macvtap: entered promiscuous mode [ 654.220491][T11550] veth1_macvtap: entered promiscuous mode [ 654.370315][T11550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.435798][T11550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.587347][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.609989][T12100] loop7: detected capacity change from 0 to 7 [ 654.635285][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.651341][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 654.660795][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 654.673223][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 654.682471][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 654.704215][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 654.713385][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 654.725458][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 654.734591][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 654.768684][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.836741][T12102] [ 654.839092][T12102] ====================================================== [ 654.846096][T12102] WARNING: possible circular locking dependency detected [ 654.853100][T12102] syzkaller #0 Not tainted [ 654.857506][T12102] ------------------------------------------------------ [ 654.864510][T12102] syz.0.1412/12102 is trying to acquire lock: [ 654.870567][T12102] ffff88801b2f7a20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 654.880859][T12102] [ 654.880859][T12102] but task is already holding lock: [ 654.888207][T12102] ffff888142be62c8 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1610/0x1b30 [ 654.898018][T12102] [ 654.898018][T12102] which lock already depends on the new lock. [ 654.898018][T12102] [ 654.908424][T12102] [ 654.908424][T12102] the existing dependency chain (in reverse order) is: [ 654.917420][T12102] [ 654.917420][T12102] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 654.926024][T12102] lock_acquire+0x120/0x360 [ 654.931048][T12102] blk_alloc_queue+0x538/0x620 [ 654.936326][T12102] __blk_mq_alloc_disk+0x15c/0x340 [ 654.941954][T12102] loop_add+0x411/0xad0 [ 654.946617][T12102] loop_init+0xd9/0x170 [ 654.951274][T12102] do_one_initcall+0x236/0x820 [ 654.956547][T12102] do_initcall_level+0x104/0x190 [ 654.962004][T12102] do_initcalls+0x59/0xa0 [ 654.966841][T12102] kernel_init_freeable+0x334/0x4b0 [ 654.972569][T12102] kernel_init+0x1d/0x1d0 [ 654.977406][T12102] ret_from_fork+0x3fc/0x770 [ 654.982507][T12102] ret_from_fork_asm+0x1a/0x30 [ 654.987789][T12102] [ 654.987789][T12102] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 654.994994][T12102] lock_acquire+0x120/0x360 [ 655.000016][T12102] fs_reclaim_acquire+0x72/0x100 [ 655.005471][T12102] kmem_cache_alloc_noprof+0x44/0x3c0 [ 655.011354][T12102] __kernfs_iattrs+0xd9/0x320 [ 655.016536][T12102] kernfs_iop_setattr+0xea/0x3f0 [ 655.021976][T12102] notify_change+0xb36/0xe40 [ 655.027075][T12102] do_truncate+0x1a4/0x220 [ 655.032002][T12102] path_openat+0x306c/0x3830 [ 655.037101][T12102] do_filp_open+0x1fa/0x410 [ 655.042111][T12102] do_sys_openat2+0x121/0x1c0 [ 655.047295][T12102] __x64_sys_openat+0x138/0x170 [ 655.052652][T12102] do_syscall_64+0xfa/0x3b0 [ 655.057671][T12102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.064066][T12102] [ 655.064066][T12102] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 655.072570][T12102] validate_chain+0xb9b/0x2140 [ 655.077840][T12102] __lock_acquire+0xab9/0xd20 [ 655.083035][T12102] lock_acquire+0x120/0x360 [ 655.088055][T12102] down_read+0x46/0x2e0 [ 655.092716][T12102] kernfs_iop_getattr+0x9e/0x450 [ 655.098157][T12102] vfs_getattr_nosec+0x2e1/0x430 [ 655.103598][T12102] loop_assign_backing_file+0x222/0x400 [ 655.109654][T12102] lo_ioctl+0x167c/0x1b30 [ 655.114491][T12102] blkdev_ioctl+0x5a8/0x6d0 [ 655.119510][T12102] __se_sys_ioctl+0xfc/0x170 [ 655.124609][T12102] do_syscall_64+0xfa/0x3b0 [ 655.129630][T12102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.136025][T12102] [ 655.136025][T12102] other info that might help us debug this: [ 655.136025][T12102] [ 655.146226][T12102] Chain exists of: [ 655.146226][T12102] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 655.146226][T12102] [ 655.160661][T12102] Possible unsafe locking scenario: [ 655.160661][T12102] [ 655.168087][T12102] CPU0 CPU1 [ 655.173428][T12102] ---- ---- [ 655.178769][T12102] lock(&q->q_usage_counter(io)#24); [ 655.184137][T12102] lock(fs_reclaim); [ 655.190624][T12102] lock(&q->q_usage_counter(io)#24); [ 655.198513][T12102] rlock(&root->kernfs_iattr_rwsem); [ 655.203874][T12102] [ 655.203874][T12102] *** DEADLOCK *** [ 655.203874][T12102] [ 655.211992][T12102] 3 locks held by syz.0.1412/12102: [ 655.217164][T12102] #0: ffff888142f51400 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x10ef/0x1b30 [ 655.226229][T12102] #1: ffff888142be62c8 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1610/0x1b30 [ 655.236457][T12102] #2: ffff888142be6300 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: lo_ioctl+0x1610/0x1b30 [ 655.246830][T12102] [ 655.246830][T12102] stack backtrace: [ 655.252701][T12102] CPU: 1 UID: 0 PID: 12102 Comm: syz.0.1412 Not tainted syzkaller #0 PREEMPT(full) [ 655.252725][T12102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 655.252739][T12102] Call Trace: [ 655.252747][T12102] [ 655.252755][T12102] dump_stack_lvl+0x189/0x250 [ 655.252787][T12102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 655.252811][T12102] ? __pfx__printk+0x10/0x10 [ 655.252845][T12102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.252874][T12102] print_circular_bug+0x2ee/0x310 [ 655.252901][T12102] check_noncircular+0x134/0x160 [ 655.252927][T12102] validate_chain+0xb9b/0x2140 [ 655.252950][T12102] ? tomoyo_path_perm+0x1e3/0x4b0 [ 655.252989][T12102] __lock_acquire+0xab9/0xd20 [ 655.253023][T12102] ? kernfs_iop_getattr+0x9e/0x450 [ 655.253045][T12102] lock_acquire+0x120/0x360 [ 655.253074][T12102] ? kernfs_iop_getattr+0x9e/0x450 [ 655.253103][T12102] down_read+0x46/0x2e0 [ 655.253122][T12102] ? kernfs_iop_getattr+0x9e/0x450 [ 655.253145][T12102] kernfs_iop_getattr+0x9e/0x450 [ 655.253169][T12102] vfs_getattr_nosec+0x2e1/0x430 [ 655.253194][T12102] loop_assign_backing_file+0x222/0x400 [ 655.253224][T12102] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 655.253255][T12102] ? schedule+0x91/0x360 [ 655.253290][T12102] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 655.253332][T12102] lo_ioctl+0x167c/0x1b30 [ 655.253362][T12102] ? __pfx_lo_ioctl+0x10/0x10 [ 655.253389][T12102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.253419][T12102] ? __lock_acquire+0xab9/0xd20 [ 655.253458][T12102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.253484][T12102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.253510][T12102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.253534][T12102] ? __lock_acquire+0xab9/0xd20 [ 655.253567][T12102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.253590][T12102] ? __lock_acquire+0xab9/0xd20 [ 655.253624][T12102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.253650][T12102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.253674][T12102] ? __lock_acquire+0xab9/0xd20 [ 655.253707][T12102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.253734][T12102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.253758][T12102] ? __lock_acquire+0xab9/0xd20 [ 655.253797][T12102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.253822][T12102] ? is_bpf_text_address+0x26/0x2b0 [ 655.253857][T12102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.253880][T12102] ? is_bpf_text_address+0x292/0x2b0 [ 655.253911][T12102] ? is_bpf_text_address+0x26/0x2b0 [ 655.253943][T12102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.253967][T12102] ? kernel_text_address+0xa5/0xe0 [ 655.253997][T12102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.254020][T12102] ? __kernel_text_address+0xd/0x40 [ 655.254048][T12102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.254072][T12102] ? unwind_get_return_address+0x4d/0x90 [ 655.254096][T12102] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 655.254123][T12102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.254146][T12102] ? arch_stack_walk+0xfc/0x150 [ 655.254177][T12102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.254201][T12102] ? stack_trace_save+0x9c/0xe0 [ 655.254225][T12102] ? __pfx_stack_trace_save+0x10/0x10 [ 655.254252][T12102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.254276][T12102] ? stack_depot_save_flags+0x40/0x860 [ 655.254308][T12102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.254332][T12102] ? kasan_save_track+0x4f/0x80 [ 655.254357][T12102] ? kasan_save_track+0x3e/0x80 [ 655.254381][T12102] ? kasan_save_free_info+0x46/0x50 [ 655.254402][T12102] ? __kasan_slab_free+0x5b/0x80 [ 655.254432][T12102] ? kfree+0x18e/0x440 [ 655.254457][T12102] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 655.254485][T12102] ? security_file_ioctl+0xcb/0x2d0 [ 655.254511][T12102] ? __se_sys_ioctl+0x47/0x170 [ 655.254535][T12102] ? do_syscall_64+0xfa/0x3b0 [ 655.254566][T12102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.254598][T12102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.254622][T12102] ? __asan_memset+0x22/0x50 [ 655.254644][T12102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.254669][T12102] ? blk_get_meta_cap+0x140/0x710 [ 655.254702][T12102] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 655.254732][T12102] ? kasan_quarantine_put+0xdd/0x220 [ 655.254761][T12102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.254785][T12102] ? blkdev_common_ioctl+0xff7/0x2550 [ 655.254819][T12102] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 655.254850][T12102] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 655.254884][T12102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.254908][T12102] ? do_vfs_ioctl+0xbe8/0x1430 [ 655.254934][T12102] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 655.254961][T12102] ? __pfx_css_rstat_updated+0x10/0x10 [ 655.254985][T12102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.255008][T12102] ? __lock_acquire+0xab9/0xd20 [ 655.255048][T12102] ? __pfx_lo_ioctl+0x10/0x10 [ 655.255073][T12102] blkdev_ioctl+0x5a8/0x6d0 [ 655.255106][T12102] ? __pfx_blkdev_ioctl+0x10/0x10 [ 655.255137][T12102] ? __fget_files+0x2a/0x420 [ 655.255170][T12102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.255194][T12102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.255219][T12102] ? __pfx_blkdev_ioctl+0x10/0x10 [ 655.255253][T12102] __se_sys_ioctl+0xfc/0x170 [ 655.255280][T12102] do_syscall_64+0xfa/0x3b0 [ 655.255311][T12102] ? lockdep_hardirqs_on+0x9c/0x150 [ 655.255341][T12102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.255361][T12102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.255384][T12102] ? exc_page_fault+0x9f/0xf0 [ 655.255419][T12102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.255440][T12102] RIP: 0033:0x7fd118d8ebe9 [ 655.255459][T12102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.255477][T12102] RSP: 002b:00007fd119be5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 655.255499][T12102] RAX: ffffffffffffffda RBX: 00007fd118fb6090 RCX: 00007fd118d8ebe9 [ 655.255515][T12102] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 655.255529][T12102] RBP: 00007fd118e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 655.255542][T12102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.255555][T12102] R13: 00007fd118fb6128 R14: 00007fd118fb6090 R15: 00007ffe97204e78 [ 655.255578][T12102] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 655.927463][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.955122][T11839] vhci_hcd: connection reset by peer [ 655.967415][ T36] vhci_hcd: stop threads [ 655.971676][ T36] vhci_hcd: release socket [ 655.987631][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 655.996789][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 656.017230][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 656.026371][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 656.040693][T12100] ldm_validate_partition_table(): Disk read failed. [ 656.047760][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 656.056882][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 656.489340][ T36] vhci_hcd: disconnect device [ 656.526638][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 656.535808][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 656.554710][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 656.563864][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 656.573558][ T6007] vhci_hcd: vhci_device speed not set [ 656.588882][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 656.598035][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 656.623847][T12100] Dev loop7: unable to read RDB block 0 [ 656.679016][T12100] loop7: unable to read partition table [ 656.684793][T12100] loop7: partition table beyond EOD, truncated [ 656.716847][T12100] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 656.767487][T12000] ldm_validate_partition_table(): Disk read failed. [ 656.790802][T12045] vhci_hcd: connection reset by peer [ 656.830213][ T6001] vhci_hcd: stop threads [ 656.834503][ T6001] vhci_hcd: release socket [ 656.864046][T12000] Dev loop7: unable to read RDB block 0 [ 656.873541][ T6001] vhci_hcd: disconnect device [ 656.874285][T12000] loop7: unable to read partition table [ 656.901160][T12000] loop7: partition table beyond EOD, truncated [ 656.949307][ T6004] vhci_hcd: vhci_device speed not set [ 657.402558][T12109] syz.5.1415: vmalloc error: size 566231040, failed to allocated page array size 1105920, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 657.456466][T12109] CPU: 0 UID: 0 PID: 12109 Comm: syz.5.1415 Not tainted syzkaller #0 PREEMPT(full) [ 657.456492][T12109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 657.456504][T12109] Call Trace: [ 657.456510][T12109] [ 657.456518][T12109] dump_stack_lvl+0x189/0x250 [ 657.456546][T12109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 657.456568][T12109] ? __pfx__printk+0x10/0x10 [ 657.456591][T12109] ? lock_release+0x4b/0x3e0 [ 657.456619][T12109] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 657.456641][T12109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.456662][T12109] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 657.456684][T12109] warn_alloc+0x214/0x310 [ 657.456714][T12109] ? __pfx_warn_alloc+0x10/0x10 [ 657.456744][T12109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.456765][T12109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.456786][T12109] ? __get_vm_area_node+0x28f/0x300 [ 657.456811][T12109] ? vb2_vmalloc_alloc+0xef/0x340 [ 657.456831][T12109] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 657.456871][T12109] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 657.456900][T12109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.456920][T12109] ? __kasan_kmalloc+0x93/0xb0 [ 657.456946][T12109] vmalloc_user_noprof+0xad/0xf0 [ 657.456972][T12109] ? vb2_vmalloc_alloc+0xef/0x340 [ 657.456990][T12109] vb2_vmalloc_alloc+0xef/0x340 [ 657.457007][T12109] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 657.457025][T12109] __vb2_queue_alloc+0x9c2/0x15a0 [ 657.457063][T12109] vb2_core_reqbufs+0xc31/0x1420 [ 657.457099][T12109] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 657.457128][T12109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.457149][T12109] ? __vb2_init_fileio+0x1e8/0xff0 [ 657.457168][T12109] __vb2_init_fileio+0x318/0xff0 [ 657.457187][T12109] ? preempt_schedule_common+0x83/0xd0 [ 657.457212][T12109] ? vb2_fop_read+0x101/0x360 [ 657.457241][T12109] ? __pfx___mutex_lock+0x10/0x10 [ 657.457269][T12109] __vb2_perform_fileio+0x284/0x1600 [ 657.457289][T12109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.457312][T12109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.457335][T12109] vb2_fop_read+0x273/0x360 [ 657.457365][T12109] v4l2_read+0x19c/0x2c0 [ 657.457396][T12109] vfs_readv+0x5aa/0x850 [ 657.457418][T12109] ? __pfx_v4l2_read+0x10/0x10 [ 657.457446][T12109] ? __pfx_vfs_readv+0x10/0x10 [ 657.457468][T12109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.457488][T12109] ? lock_release+0x4b/0x3e0 [ 657.457518][T12109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.457538][T12109] ? __fget_files+0x3a0/0x420 [ 657.457565][T12109] ? __fget_files+0x2a/0x420 [ 657.457593][T12109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.457616][T12109] __x64_sys_preadv+0x197/0x2a0 [ 657.457643][T12109] ? __pfx___x64_sys_preadv+0x10/0x10 [ 657.457667][T12109] ? rcu_is_watching+0x15/0xb0 [ 657.457685][T12109] ? arch_syscall_is_vdso_sigreturn+0x120/0x1a0 [ 657.457714][T12109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.457734][T12109] ? syscall_user_dispatch+0x4f/0x90 [ 657.457761][T12109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.457784][T12109] do_syscall_64+0xfa/0x3b0 [ 657.457811][T12109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.457832][T12109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.457849][T12109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.457870][T12109] ? exc_page_fault+0x9f/0xf0 [ 657.457895][T12109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.457913][T12109] RIP: 0033:0x7f9b2d98ebe9 [ 657.457929][T12109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.457944][T12109] RSP: 002b:00007f9b2bbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 657.457964][T12109] RAX: ffffffffffffffda RBX: 00007f9b2dbb5fa0 RCX: 00007f9b2d98ebe9 [ 657.457977][T12109] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000008 [ 657.457989][T12109] RBP: 00007f9b2da11e19 R08: 000000000000000b R09: 0000000000000000 [ 657.458001][T12109] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 657.458012][T12109] R13: 00007f9b2dbb6038 R14: 00007f9b2dbb5fa0 R15: 00007fffd8318c38 [ 657.458033][T12109] [ 657.458039][T12109] Mem-Info: [ 657.931129][T12109] active_anon:4674 inactive_anon:0 isolated_anon:0 [ 657.931129][T12109] active_file:21445 inactive_file:40104 isolated_file:0 [ 657.931129][T12109] unevictable:768 dirty:65 writeback:0 [ 657.931129][T12109] slab_reclaimable:11612 slab_unreclaimable:100446 [ 657.931129][T12109] mapped:7701 shmem:1657 pagetables:952 [ 657.931129][T12109] sec_pagetables:0 bounce:0 [ 657.931129][T12109] kernel_misc_reclaimable:0 [ 657.931129][T12109] free:1331337 free_pcp:20201 free_cma:0 [ 657.977343][T12109] Node 0 active_anon:18696kB inactive_anon:0kB active_file:85780kB inactive_file:160212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:30804kB dirty:260kB writeback:0kB shmem:5092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12464kB pagetables:3652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 658.015043][T12109] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 658.057659][T12109] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 658.104613][T12109] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 658.112855][T12109] Node 0 DMA32 free:1430740kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17888kB inactive_anon:0kB active_file:85780kB inactive_file:158636kB unevictable:1536kB writepending:260kB present:3129332kB managed:2557452kB mlocked:0kB bounce:0kB free_pcp:56588kB local_pcp:28516kB free_cma:0kB [ 658.154764][T12109] lowmem_reserve[]: 0 0 1 1 1 [ 658.169579][T12109] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 658.180193][ T6001] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.225000][T12109] lowmem_reserve[]: 0 0 0 0 0 [ 658.235006][T12109] Node 1 Normal free:3888640kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20972kB local_pcp:9824kB free_cma:0kB [ 658.270571][T12109] lowmem_reserve[]: 0 0 0 0 0 [ 658.275286][T12109] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 658.298294][T12109] Node 0 DMA32: 5589*4kB (UM) 3621*8kB (UME) 2269*16kB (UME) 2385*32kB (UME) 1127*64kB (UME) 574*128kB (UME) 215*256kB (UM) 104*512kB (UM) 51*1024kB (UME) 25*2048kB (UM) 222*4096kB (UM) = 1430572kB [ 658.320283][T12109] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 658.332680][T12109] Node 1 Normal: 188*4kB (UE) 66*8kB (UME) 36*16kB (UME) 78*32kB (UME) 26*64kB (UME) 7*128kB (UME) 5*256kB (UME) 5*512kB (UME) 3*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3888640kB [ 658.350995][T12109] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 658.362671][T12109] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 658.372311][T12109] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 658.382119][T12109] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 658.392828][T12109] 62972 total pagecache pages [ 658.397819][T12109] 0 pages in swap cache [ 658.401985][T12109] Free swap = 124996kB [ 658.406489][T12109] Total swap = 124996kB [ 658.410625][T12109] 2097051 pages RAM [ 658.414399][T12109] 0 pages HighMem/MovableOnly [ 658.420585][T12109] 425662 pages reserved [ 658.424721][T12109] 0 pages cma reserved [ 658.438493][ T6001] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.588876][ T6001] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.726394][ T6001] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.921170][ T6001] bridge_slave_1: left allmulticast mode [ 658.945896][ T6001] bridge_slave_1: left promiscuous mode [ 658.951595][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.984066][ T6001] bridge_slave_0: left allmulticast mode [ 658.989846][ T6001] bridge_slave_0: left promiscuous mode [ 658.995515][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.173277][ T6001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.183949][ T6001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.193786][ T6001] bond0 (unregistering): Released all slaves [ 659.258695][ T6001] tipc: Left network mode [ 659.590506][ T6001] hsr_slave_0: left promiscuous mode [ 659.597995][ T6001] hsr_slave_1: left promiscuous mode [ 659.614266][ T6001] veth1_macvtap: left promiscuous mode [ 659.620786][ T6001] veth0_macvtap: left promiscuous mode [ 659.627924][ T6001] veth1_vlan: left promiscuous mode [ 659.633188][ T6001] veth0_vlan: left promiscuous mode [ 659.824132][ T6001] team0 (unregistering): Port device team_slave_1 removed [ 659.847138][ T6001] team0 (unregistering): Port device team_slave_0 removed [ 660.233614][ T6001] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.292910][ T6001] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.373410][ T6001] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.411621][ T6001] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.533133][ T6001] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.593153][ T6001] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.664408][ T6001] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.740382][ T6001] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.976275][ T6001] batman_adv: batadv0: Removing interface: netdevsim0 [ 661.072932][ T6001] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.130360][ T6001] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.183343][ T6001] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.262029][ T6001] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.371050][ T6001] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.432315][ T6001] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.491758][ T6001] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.551355][ T6001] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.660944][ T6001] bridge_slave_1: left allmulticast mode [ 661.672016][ T6001] bridge_slave_1: left promiscuous mode [ 661.680890][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.689710][ T6001] bridge_slave_0: left allmulticast mode [ 661.697282][ T6001] bridge_slave_0: left promiscuous mode [ 661.702950][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.713868][ T6001] bridge_slave_1: left allmulticast mode [ 661.721742][ T6001] bridge_slave_1: left promiscuous mode [ 661.728590][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.740193][ T6001] bridge_slave_0: left allmulticast mode [ 661.748228][ T6001] bridge_slave_0: left promiscuous mode [ 661.753914][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.763629][ T6001] bridge_slave_1: left promiscuous mode [ 661.770787][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.786026][ T6001] bridge_slave_0: left promiscuous mode [ 661.793953][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.809888][ T6001] bridge_slave_1: left allmulticast mode [ 661.816230][ T6001] bridge_slave_1: left promiscuous mode [ 661.821937][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.837314][ T6001] bridge_slave_0: left allmulticast mode [ 661.843796][ T6001] bridge_slave_0: left promiscuous mode [ 661.849633][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.860229][ T6001] bridge_slave_1: left allmulticast mode [ 661.867363][ T6001] bridge_slave_1: left promiscuous mode [ 661.872990][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.881413][ T6001] bridge_slave_0: left allmulticast mode [ 661.887271][ T6001] bridge_slave_0: left promiscuous mode [ 661.892893][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.098716][ T6001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.110356][ T6001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.119915][ T6001] bond0 (unregistering): Released all slaves [ 662.130509][ T6001] bond1 (unregistering): Released all slaves [ 662.209339][ T6001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.219556][ T6001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.229138][ T6001] bond0 (unregistering): Released all slaves [ 662.488889][ T6001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.497796][ T6001] bond_slave_0: left promiscuous mode [ 662.503974][ T6001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.512778][ T6001] bond_slave_1: left promiscuous mode [ 662.518743][ T6001] bond0 (unregistering): Released all slaves [ 662.528725][ T6001] bond1 (unregistering): Released all slaves [ 662.599047][ T6001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.609304][ T6001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.618690][ T6001] bond0 (unregistering): Released all slaves [ 662.708674][ T6001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.718959][ T6001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.728525][ T6001] bond0 (unregistering): Released all slaves [ 662.856886][ T6001] tipc: Left network mode [ 662.861999][ T6001] tipc: Left network mode [ 663.439861][ T6001] hsr_slave_0: left promiscuous mode [ 663.447072][ T6001] hsr_slave_1: left promiscuous mode [ 663.452837][ T6001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.462326][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.472125][ T6001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.481140][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.493318][ T6001] hsr_slave_0: left promiscuous mode [ 663.500113][ T6001] hsr_slave_1: left promiscuous mode [ 663.507465][ T6001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.516517][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.527639][ T6001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.535581][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.546090][ T6001] hsr_slave_0: left promiscuous mode [ 663.551832][ T6001] hsr_slave_1: left promiscuous mode [ 663.557618][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.565313][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.575509][ T6001] hsr_slave_0: left promiscuous mode [ 663.581238][ T6001] hsr_slave_1: left promiscuous mode [ 663.587079][ T6001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.594573][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.602206][ T6001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.612292][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.622736][ T6001] hsr_slave_0: left promiscuous mode [ 663.628968][ T6001] hsr_slave_1: left promiscuous mode [ 663.635806][ T6001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.643169][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.653061][ T6001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.660467][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.683108][ T6001] veth1_macvtap: left promiscuous mode [ 663.690435][ T6001] veth0_macvtap: left promiscuous mode [ 663.700590][ T6001] veth1_vlan: left promiscuous mode [ 663.708326][ T6001] veth0_vlan: left promiscuous mode [ 663.716632][ T6001] veth1_macvtap: left promiscuous mode [ 663.722139][ T6001] veth0_macvtap: left promiscuous mode [ 663.729573][ T6001] veth1_vlan: left promiscuous mode [ 663.735309][ T6001] veth0_vlan: left promiscuous mode [ 663.747515][ T6001] veth1_macvtap: left promiscuous mode [ 663.753013][ T6001] veth0_macvtap: left promiscuous mode [ 663.758975][ T6001] veth1_vlan: left promiscuous mode [ 663.766118][ T6001] veth0_vlan: left promiscuous mode [ 663.772328][ T6001] veth1_macvtap: left promiscuous mode [ 663.780475][ T6001] veth0_macvtap: left promiscuous mode [ 663.786856][ T6001] veth1_vlan: left promiscuous mode [ 663.792132][ T6001] veth0_vlan: left promiscuous mode [ 664.069126][ T6001] team0 (unregistering): Port device team_slave_1 removed [ 664.085637][ T6001] team0 (unregistering): Port device team_slave_0 removed [ 664.254664][ T6001] team0 (unregistering): Port device team_slave_1 removed [ 664.267290][ T6001] team0 (unregistering): Port device team_slave_0 removed [ 664.540970][ T6001] team0 (unregistering): Port device team_slave_1 removed [ 664.568641][ T6001] team0 (unregistering): Port device team_slave_0 removed