last executing test programs: 13.021519813s ago: executing program 2 (id=142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x96, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x5c, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@srh={0x32, 0x8, 0x4, 0x4, 0xef, 0x40, 0x100, [@private1, @empty, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @adiantum, 0x0, @desc1}) chdir(&(0x7f0000000000)='./file0\x00') r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "615a091a556420589c6685d4982a83b71b906769e737201ac6b7a780c454156569cbf3a5be811debc957b5831b89b59d7002008c7c00", 0x35}, 0x48, r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) 10.97601543s ago: executing program 2 (id=146): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410017ff5d810009050f1f0504000000090583"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9c304bad897e0216795983be31b98b78a3cddf"}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) write(r2, &(0x7f00000002c0)="75a33cfa187943c188a4af529c3eb5ec3853012fc2215239fea9c75d3dfbbaa05f7989732f2356219489e03f2c556b6f8eb4e0252113fd10038458b8d7d25721dd", 0x41) r3 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) r4 = syz_open_pts(r2, 0x0) r5 = dup(r4) read$FUSE(r5, &(0x7f0000000380)={0x2020}, 0x2020) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) r7 = syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) symlinkat(&(0x7f0000000200)='./file0\x00', r6, &(0x7f0000000240)='./file0\x00') close(r7) 10.932086026s ago: executing program 3 (id=147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1282, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r5, 0x1}, 0x1c}}, 0x0) 10.532019603s ago: executing program 0 (id=150): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x800, &(0x7f0000000040)={[{@jqfmt_vfsv0}, {@test_dummy_encryption}]}, 0x1, 0x453, &(0x7f0000000a40)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_open_dev$sndpcmc(&(0x7f0000000380), 0x80, 0x131100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 8.819150104s ago: executing program 1 (id=153): ptrace(0x10, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) socket$l2tp6(0xa, 0x2, 0x73) accept$alg(r0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$alg(0x26, 0x5, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000875b0d20d81301002217010203010902"], 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void, @void}}}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x2c, 0x10, 0xc27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 8.785109172s ago: executing program 3 (id=154): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3b6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xb989) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f00000101c0)={0x0, 0x49dc1e16, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) r2 = syz_open_dev$sndpcmc(&(0x7f0000004c40), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc25c4110, &(0x7f0000000000)={0x0, [[0xfffffffe]]}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8) 8.048856532s ago: executing program 2 (id=155): r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xd8}}], 0x1, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="37f07353", 0x4, 0x4008000, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x34}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x4, 0x20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x80, 0x0, 0x1}}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000180)="501fffffffffffffedff8ef9a8dc057520b3172aacb9e10300", 0x3a}], 0x2}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @local}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 7.981773322s ago: executing program 0 (id=156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000019080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r3 = syz_open_procfs(r0, &(0x7f0000000040)='net/if_inet6\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) unshare(0x40000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 7.957169329s ago: executing program 3 (id=157): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000140)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, r2, 0x16, 0x0, @val=@tcx={@prog_fd}}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000870000008500000007000000950000000000000070ecccec10c8e6c257d727aec7"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0810", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$MRT_TABLE(r1, 0x0, 0xd0, &(0x7f0000000040), 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000300", @ANYBLOB, @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="e7040200", @ANYRES32=r5, @ANYBLOB], 0x50}}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r7, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000800000000000000000800090002000000", 0x24) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x7) ioctl$TIOCSLCKTRMIOS(r6, 0x8924, &(0x7f0000000180)) 7.770582974s ago: executing program 2 (id=158): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = dup(r1) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af21, &(0x7f00000001c0)={0x0, r2}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000099ffffffb702000005000000b7030000abfc0020850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x31, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0xf, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "478b78"}}}}}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0}) 7.662907443s ago: executing program 4 (id=159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r5, r4], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) 7.646080378s ago: executing program 3 (id=160): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) epoll_create1(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003edd9d201e04193f72a4010203010902200001000000000904000000ff490f000a24010000000201"], 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='debugfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x18, 0x301, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x1}]}, 0x24}}, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r3) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") 6.703450157s ago: executing program 0 (id=161): r0 = io_uring_setup(0x7cdf, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r4, &(0x7f0000000040)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f0000000280)='p', 0x29fcb, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) 6.140550749s ago: executing program 4 (id=162): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet6_mreq(0xffffffffffffffff, 0x10d, 0x88, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f00000000c0)=0x72, 0x4) 5.342200123s ago: executing program 0 (id=163): r0 = io_uring_setup(0x2e34, &(0x7f0000000180)) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) read$FUSE(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0), 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000480, &(0x7f0000000380), 0x45, 0x7a5, &(0x7f0000000f80)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)={'#! ', './file0', [{}, {0x20, 'memory.swap.current\x00'}, {0x20, '\xbb!T!.%&}'}, {0x20, '#! '}, {0x20, 'ext4\x00'}, {0x20, 'memory.swap.current\x00'}, {0x20, '#! '}, {0x20, '-'}, {0x20, '#! '}, {0x20, 'ext4\x00'}], 0xa, "7c63637579347d30c4c3641ff8653a0b3131caeb00022463c9f033668ae6d1aa4700c3c6fd0faddfd99d9b73794ba2612c30d084596e62efbaf2d7a86b703b2aba6bef675e1b78424c5c57a37422401c20accf"}, 0xac) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) getrlimit(0x2, &(0x7f0000000100)) copy_file_range(r5, &(0x7f0000000040), r3, &(0x7f0000000180)=0xffffffffffffe7e7, 0x5bf6, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0xfea7) 5.204885827s ago: executing program 1 (id=164): mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000007580), 0xffffffffffffffff) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) close(r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYBLOB="0307047079000000000001000400"], 0x18}}, 0x0) 5.158559487s ago: executing program 4 (id=165): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$isdn_base(0x22, 0x3, 0x0) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$inet_dccp(0x2, 0x6, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 5.052738353s ago: executing program 1 (id=166): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00200000bfa200000000000007020000f8ffffffb7030000080000000bf000000000000085000000030000000800000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0001}]}) r2 = mq_open(&(0x7f00000019c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_getsetattr(r2, &(0x7f0000000140), &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a80)={&(0x7f0000000a40)='mm_page_alloc\x00', r3}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB="2c726f6f746d6f64653d30303030d730303030303030303030303130303031302c75736572021c8cb0", @ANYRESDEC=0x0, @ANYBLOB=',grou{_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f}}, 0x50) io_setup(0x202, &(0x7f0000000200)) 5.017891805s ago: executing program 4 (id=167): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r4, 0x0, r3, 0x0, 0x7ffff000, 0x0) 4.137902147s ago: executing program 0 (id=168): syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8), 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0x9d) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x8, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000000000000000001000000040000000c000180cafc00000547000008000200000009004c0007"], 0x78}}, 0x0) 3.984061478s ago: executing program 4 (id=169): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000181100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) ioctl$KVM_GET_PIT2(r3, 0xae64, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000480)=""/158, 0x43, 0x9e, 0x1, 0x6}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 3.615345335s ago: executing program 3 (id=170): connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x4, 0x4}}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) syz_emit_ethernet(0x8a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd6000000000541100fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22"], 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="58010000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000080002000500000008000700e000000208000800ac1434002c0101"], 0x158}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) connect$bt_l2cap(r5, &(0x7f0000000140)={0x1f, 0xf6, @none, 0x0, 0x2}, 0xe) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002980)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f00000003c0)={0x60, r4, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x9, 0x3, 0x8}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) sendmsg$IEEE802154_START_REQ(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xd}]}, 0x1c}}, 0x4000) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x24, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}}, 0x0) 3.549966931s ago: executing program 1 (id=171): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x0, "59416d570165203d41bec7080089122c000004002231a11000000900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000100)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000140)={"fe0d1acce4a37ef94acd000200000000000000008000", r2, 0xffffffffffffffff}) r4 = dup(r3) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) io_setup(0x0, &(0x7f0000000280)=0x0) r7 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x42, 0x0) io_submit(r6, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r7) setresgid(0xee01, 0x0, 0x0) r8 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) shutdown(r8, 0x0) r9 = getpid() prlimit64(r9, 0x2, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="c8014f00", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, 0x0) 3.283911s ago: executing program 2 (id=172): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x0, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@my=0x0}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) sendmsg$key(0xffffffffffffffff, 0x0, 0x20000004) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x8, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x32, 0x0, @val=@iter={&(0x7f00000008c0)=@task, 0x10}}, 0x40) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r2, &(0x7f0000002500)=[{&(0x7f0000001580)=""/193, 0xc1}], 0x1000000000000273, 0x0, 0x0, 0x0) 2.731262227s ago: executing program 4 (id=173): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r4) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0xb23fc06c409ab55d}, 0x14}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 2.729933726s ago: executing program 3 (id=183): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) keyctl$link(0x8, r0, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x90) keyctl$set_timeout(0xf, r0, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x3d, 0x79, 0x40, 0x1ac7, 0x1, 0xcc19, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x93, 0x2c, 0xf4}}]}}]}}, 0x0) 2.63411766s ago: executing program 0 (id=174): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0x0, 0x6}) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r3) r5 = add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r5, r4, r5}, &(0x7f00000002c0)=""/250, 0xfa, &(0x7f0000000440)={&(0x7f00000003c0)={'sha224-ssse3\x00'}}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)) 225.168924ms ago: executing program 2 (id=175): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf8) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000000)={0x1, 0x2, [@random="d8cf04ba91b8", @empty]}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f0000000600)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r4, 0xe0ffff, 0x4101, 0x3) 222.804356ms ago: executing program 1 (id=186): fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000000580)='kfree\x00', r0}, 0x9) mount$tmpfs(0x0, &(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000680)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x2000400) fchdir(r3) socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x5, 0xff}]}, 0x10) dup3(r2, r4, 0x0) 0s ago: executing program 1 (id=176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = syz_io_uring_setup(0x28a7, &(0x7f0000000440)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r6, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) io_uring_enter(r3, 0x5b43, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.205' (ED25519) to the list of known hosts. [ 51.499057][ T5222] cgroup: Unknown subsys name 'net' [ 51.619859][ T5222] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.835327][ T5222] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.924882][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.945637][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.966578][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.974971][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.982670][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.991117][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.998795][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.007058][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.014980][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.022571][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.030660][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.034898][ T5249] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.038330][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.065687][ T5250] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.075416][ T5249] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.082330][ T5252] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.084140][ T5250] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.092008][ T5252] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.098462][ T5250] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.105157][ T5252] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.111252][ T5250] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.118107][ T5252] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.133275][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.149132][ T5252] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.157040][ T5252] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.165014][ T5252] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.172678][ T5252] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.183336][ T5252] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.196206][ T5252] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.203684][ T5252] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.579264][ T5232] chnl_net:caif_netlink_parms(): no params data found [ 55.619623][ T5239] chnl_net:caif_netlink_parms(): no params data found [ 55.668651][ T5245] chnl_net:caif_netlink_parms(): no params data found [ 55.685604][ T5236] chnl_net:caif_netlink_parms(): no params data found [ 55.732183][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.740357][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.749010][ T5232] bridge_slave_0: entered allmulticast mode [ 55.756485][ T5232] bridge_slave_0: entered promiscuous mode [ 55.769143][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.776570][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.783791][ T5232] bridge_slave_1: entered allmulticast mode [ 55.790318][ T5232] bridge_slave_1: entered promiscuous mode [ 55.804326][ T5241] chnl_net:caif_netlink_parms(): no params data found [ 55.868914][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.879791][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.889533][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.897926][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.905501][ T5239] bridge_slave_0: entered allmulticast mode [ 55.912000][ T5239] bridge_slave_0: entered promiscuous mode [ 55.947280][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.957231][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.964502][ T5239] bridge_slave_1: entered allmulticast mode [ 55.971059][ T5239] bridge_slave_1: entered promiscuous mode [ 56.017789][ T5232] team0: Port device team_slave_0 added [ 56.048573][ T5245] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.055994][ T5245] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.063646][ T5245] bridge_slave_0: entered allmulticast mode [ 56.070182][ T5245] bridge_slave_0: entered promiscuous mode [ 56.078968][ T5232] team0: Port device team_slave_1 added [ 56.086533][ T5239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.126994][ T5245] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.134293][ T5245] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.141442][ T5245] bridge_slave_1: entered allmulticast mode [ 56.148671][ T5245] bridge_slave_1: entered promiscuous mode [ 56.164451][ T5239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.191245][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.198464][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.205822][ T5236] bridge_slave_0: entered allmulticast mode [ 56.212398][ T5236] bridge_slave_0: entered promiscuous mode [ 56.251399][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.259213][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.266477][ T5236] bridge_slave_1: entered allmulticast mode [ 56.274052][ T5236] bridge_slave_1: entered promiscuous mode [ 56.288556][ T5245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.299547][ T5245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.309274][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.316531][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.342518][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.357064][ T5239] team0: Port device team_slave_0 added [ 56.363351][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.370451][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.377777][ T5241] bridge_slave_0: entered allmulticast mode [ 56.384412][ T5241] bridge_slave_0: entered promiscuous mode [ 56.405879][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.412846][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.442679][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.455507][ T5239] team0: Port device team_slave_1 added [ 56.475577][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.482727][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.490189][ T5241] bridge_slave_1: entered allmulticast mode [ 56.497474][ T5241] bridge_slave_1: entered promiscuous mode [ 56.512040][ T5236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.524505][ T5236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.580624][ T5245] team0: Port device team_slave_0 added [ 56.596812][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.603900][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.631013][ T5239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.647940][ T5232] hsr_slave_0: entered promiscuous mode [ 56.654711][ T5232] hsr_slave_1: entered promiscuous mode [ 56.663997][ T5241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.676689][ T5241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.692062][ T5245] team0: Port device team_slave_1 added [ 56.698518][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.705912][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.732004][ T5239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.774894][ T5236] team0: Port device team_slave_0 added [ 56.800614][ T5239] hsr_slave_0: entered promiscuous mode [ 56.807603][ T5239] hsr_slave_1: entered promiscuous mode [ 56.814401][ T5239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.822167][ T5239] Cannot create hsr debugfs directory [ 56.838821][ T5236] team0: Port device team_slave_1 added [ 56.859678][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.866817][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.892809][ T5245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.905424][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.912384][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.938808][ T5245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.954007][ T5241] team0: Port device team_slave_0 added [ 56.984085][ T5241] team0: Port device team_slave_1 added [ 56.990273][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.997547][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.023816][ T5236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.036980][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.044050][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.070113][ T5236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.161694][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.168862][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.198258][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.209380][ T5252] Bluetooth: hci0: command tx timeout [ 57.209416][ T5238] Bluetooth: hci1: command tx timeout [ 57.217101][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.220902][ T5246] Bluetooth: hci2: command tx timeout [ 57.228448][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.259860][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.273315][ T5236] hsr_slave_0: entered promiscuous mode [ 57.279843][ T5236] hsr_slave_1: entered promiscuous mode [ 57.283983][ T5246] Bluetooth: hci4: command tx timeout [ 57.285557][ T5238] Bluetooth: hci3: command tx timeout [ 57.297450][ T5236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.305086][ T5236] Cannot create hsr debugfs directory [ 57.362843][ T5245] hsr_slave_0: entered promiscuous mode [ 57.369441][ T5245] hsr_slave_1: entered promiscuous mode [ 57.377277][ T5245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.385470][ T5245] Cannot create hsr debugfs directory [ 57.442604][ T5241] hsr_slave_0: entered promiscuous mode [ 57.449749][ T5241] hsr_slave_1: entered promiscuous mode [ 57.459263][ T5241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.466880][ T5241] Cannot create hsr debugfs directory [ 57.669829][ T5232] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.689245][ T5232] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.700026][ T5232] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.727073][ T5232] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.785252][ T5239] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.796598][ T5239] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.810211][ T5239] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.839230][ T5239] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.876606][ T5236] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.905177][ T5236] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.924363][ T5236] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.934561][ T5236] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.991551][ T5245] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.026496][ T5245] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.046841][ T5245] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.057022][ T5245] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.087607][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.119388][ T5241] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.135406][ T5239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.151338][ T5241] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.160716][ T5241] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.171388][ T5241] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.187304][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.208261][ T2910] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.215540][ T2910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.257884][ T2910] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.265083][ T2910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.307060][ T5239] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.319177][ T746] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.326425][ T746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.379829][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.386957][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.422789][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.442211][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.468470][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.475647][ T3004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.516424][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.523558][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.587242][ T5245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.669467][ T5245] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.685968][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.730045][ T2910] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.737238][ T2910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.780915][ T2910] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.788107][ T2910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.816149][ T5241] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.852172][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.882174][ T2910] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.889357][ T2910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.901811][ T5239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.939383][ T2910] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.946591][ T2910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.029607][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.118976][ T5232] veth0_vlan: entered promiscuous mode [ 59.196872][ T5232] veth1_vlan: entered promiscuous mode [ 59.249777][ T5236] veth0_vlan: entered promiscuous mode [ 59.283887][ T5238] Bluetooth: hci0: command tx timeout [ 59.292028][ T5236] veth1_vlan: entered promiscuous mode [ 59.293728][ T5238] Bluetooth: hci2: command tx timeout [ 59.298141][ T5246] Bluetooth: hci1: command tx timeout [ 59.363499][ T5246] Bluetooth: hci4: command tx timeout [ 59.364786][ T5238] Bluetooth: hci3: command tx timeout [ 59.381498][ T5245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.391752][ T5239] veth0_vlan: entered promiscuous mode [ 59.436874][ T5232] veth0_macvtap: entered promiscuous mode [ 59.450822][ T5239] veth1_vlan: entered promiscuous mode [ 59.472844][ T5236] veth0_macvtap: entered promiscuous mode [ 59.483442][ T5236] veth1_macvtap: entered promiscuous mode [ 59.492298][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.503281][ T5232] veth1_macvtap: entered promiscuous mode [ 59.540711][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.562757][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.572333][ T5245] veth0_vlan: entered promiscuous mode [ 59.586198][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.597755][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.609684][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.622198][ T5236] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.631553][ T5236] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.641827][ T5236] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.650885][ T5236] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.670767][ T5245] veth1_vlan: entered promiscuous mode [ 59.678132][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.689795][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.701295][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.719515][ T5239] veth0_macvtap: entered promiscuous mode [ 59.730094][ T5232] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.742503][ T5232] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.753364][ T5232] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.762047][ T5232] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.781782][ T5239] veth1_macvtap: entered promiscuous mode [ 59.825656][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.839409][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.855761][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.867748][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.879110][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.917985][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.930471][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.944192][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.954775][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.966570][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.989080][ T5241] veth0_vlan: entered promiscuous mode [ 60.001216][ T5239] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.010338][ T5239] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.022704][ T5239] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.031783][ T5239] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.093466][ T5245] veth0_macvtap: entered promiscuous mode [ 60.101429][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.105754][ T5245] veth1_macvtap: entered promiscuous mode [ 60.119632][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.152373][ T5241] veth1_vlan: entered promiscuous mode [ 60.190986][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.205382][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.216206][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.226884][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.236754][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.248518][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.260204][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.276236][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.277711][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.286475][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.296105][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.312753][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.324476][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.334485][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.345831][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.356915][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.372245][ T746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.376200][ T5245] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.389846][ T746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.398000][ T5245] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.410209][ T5245] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.419304][ T5245] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.499247][ T746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.515433][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.516511][ T746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.532167][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.560603][ T5241] veth0_macvtap: entered promiscuous mode [ 60.580486][ T5241] veth1_macvtap: entered promiscuous mode [ 60.619072][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.661224][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.671905][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.689988][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.699924][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.714825][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.724827][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.735331][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.746254][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.756794][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.769289][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.806543][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.840223][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.861910][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.874380][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.885240][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.896654][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.908952][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.921369][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.939343][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.966551][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.007068][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.063104][ T5241] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.071849][ T5241] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.087830][ T5241] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.098044][ T5241] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.365624][ T5238] Bluetooth: hci1: command tx timeout [ 61.371500][ T5238] Bluetooth: hci2: command tx timeout [ 61.380824][ T5238] Bluetooth: hci0: command tx timeout [ 61.443896][ T5246] Bluetooth: hci4: command tx timeout [ 61.450010][ T5246] Bluetooth: hci3: command tx timeout [ 61.799440][ T5325] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.825499][ T746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.861336][ T746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.964510][ T5330] loop4: detected capacity change from 0 to 512 [ 61.980552][ T5330] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.980591][ T5330] EXT4-fs (loop4): blocks per group (64) and clusters per group (32768) inconsistent [ 62.101343][ T5329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.120782][ T5329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.136128][ T5329] bond0 (unregistering): Released all slaves [ 62.296123][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.316163][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.389243][ T746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.395947][ T5337] loop0: detected capacity change from 0 to 1024 [ 62.424149][ T746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.076693][ T5352] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 64.214006][ T5246] Bluetooth: hci0: command tx timeout [ 64.219467][ T5246] Bluetooth: hci2: command tx timeout [ 64.225751][ T5246] Bluetooth: hci1: command tx timeout [ 64.231160][ T5246] Bluetooth: hci3: command tx timeout [ 64.236775][ T5238] Bluetooth: hci4: command tx timeout [ 65.378981][ T5365] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.606989][ T5286] IPVS: starting estimator thread 0... [ 65.703106][ T5370] IPVS: using max 22 ests per chain, 52800 per kthread [ 65.748494][ T5375] IPVS: nq: SCTP 127.0.0.1:0 - no destination available [ 65.759554][ T5372] loop1: detected capacity change from 0 to 1764 [ 65.779527][ T5372] iso9660: Unknown parameter '' [ 65.940678][ T5365] loop1: detected capacity change from 0 to 512 [ 66.239570][ T5383] loop4: detected capacity change from 0 to 128 [ 66.293523][ T5383] vfat: Bad value for 'gid' [ 66.298287][ T5383] vfat: Bad value for 'gid' [ 66.999336][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 67.125269][ T5365] ======================================================= [ 67.125269][ T5365] WARNING: The mand mount option has been deprecated and [ 67.125269][ T5365] and is ignored by this kernel. Remove the mand [ 67.125269][ T5365] option from the mount to silence this warning. [ 67.125269][ T5365] ======================================================= [ 67.280227][ T5365] EXT4-fs (loop1): blocks per group (71) and clusters per group (20800) inconsistent [ 67.546832][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.557246][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 67.570678][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 67.581341][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.719033][ T9] usb 3-1: config 0 descriptor?? [ 68.385367][ T5389] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 68.416210][ T5390] bridge_slave_0: mtu less than device minimum [ 68.540072][ T9] usb 3-1: language id specifier not provided by device, defaulting to English [ 68.774361][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 69.410195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 69.419000][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.528535][ T9] usb 3-1: USB disconnect, device number 2 [ 69.624994][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 69.782210][ T5409] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.043100][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 70.278441][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 70.313886][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.343124][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.377015][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 70.389879][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.407613][ T9] usb 3-1: config 0 descriptor?? [ 70.794704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.842596][ T5422] loop1: detected capacity change from 0 to 8 [ 70.853709][ T5422] squashfs: Unknown parameter ':B@ȏ{R?IOܥBl6miZS`d}KEB'' [ 71.558962][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.567024][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.633874][ T5422] loop1: detected capacity change from 0 to 256 [ 71.883518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.021172][ T5422] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 72.164083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 72.184029][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 72.190122][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 72.207017][ T9] usb 3-1: USB disconnect, device number 3 [ 72.463078][ T5288] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.653265][ T5288] usb 2-1: Using ep0 maxpacket: 32 [ 72.681325][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 72.721751][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 72.781223][ T5436] warning: `syz.2.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 72.807984][ T5288] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 72.823318][ T5288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.499003][ T5288] usb 2-1: config 0 descriptor?? [ 73.506095][ T5422] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 73.750072][ T5288] hub 2-1:0.0: USB hub found [ 73.955490][ T5449] Bluetooth: MGMT ver 1.23 [ 73.961336][ T5449] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 74.453682][ T5288] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 74.505953][ T5288] usbhid 2-1:0.0: can't add hid device: -71 [ 74.536751][ T5288] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 74.805054][ T5288] usb 2-1: USB disconnect, device number 2 [ 75.657127][ T5468] loop4: detected capacity change from 0 to 2048 [ 75.692616][ T5455] kvm: emulating exchange as write [ 75.718297][ T5468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.748083][ T5466] loop1: detected capacity change from 0 to 256 [ 77.020393][ T25] cfg80211: failed to load regulatory.db [ 77.024918][ T5466] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdefbdf28, utbl_chksum : 0xe619d30d) [ 77.059165][ T5239] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.313717][ T5486] loop0: detected capacity change from 0 to 256 [ 77.936717][ T5491] mmap: syz.4.47 (5491) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 79.007683][ T5510] loop1: detected capacity change from 0 to 2048 [ 79.080094][ T5510] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.717413][ T5519] fuse: Bad value for 'fd' [ 81.619088][ T5543] loop1: detected capacity change from 0 to 2048 [ 81.850245][ T5545] kvm: kvm [5544]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xc6e [ 82.208114][ T5556] loop1: detected capacity change from 0 to 4096 [ 82.243168][ T46] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.352481][ T5556] ntfs3: loop1: ino=21, The size of extended attributes must not exceed 64KiB [ 82.381906][ T5556] ntfs3: loop1: ino=21, The size of extended attributes must not exceed 64KiB [ 82.474077][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 82.497882][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 82.516746][ T46] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 82.558635][ T46] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 82.595633][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.616749][ T46] usb 4-1: Product: syz [ 82.620952][ T46] usb 4-1: Manufacturer: syz [ 82.639704][ T5565] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 82.645815][ T46] usb 4-1: SerialNumber: syz [ 82.677129][ T5566] loop2: detected capacity change from 0 to 256 [ 82.684222][ T46] usb 4-1: config 0 descriptor?? [ 82.693536][ T46] hub 4-1:0.0: bad descriptor, ignoring hub [ 82.701550][ T46] hub 4-1:0.0: probe with driver hub failed with error -5 [ 82.717387][ T46] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 82.734490][ T46] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 82.740260][ T5566] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdefbdf28, utbl_chksum : 0xe619d30d) [ 82.794146][ T46] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 83.165635][ T5576] loop2: detected capacity change from 0 to 128 [ 83.223283][ T5315] usb 4-1: USB disconnect, device number 2 [ 83.262836][ T5578] loop1: detected capacity change from 0 to 1024 [ 83.344796][ T5574] vlan0: entered promiscuous mode [ 83.350303][ T5574] vlan0: entered allmulticast mode [ 83.372076][ T5574] veth0_vlan: entered allmulticast mode [ 83.404719][ T5574] team0: Port device vlan0 added [ 83.596889][ T5586] netlink: 'syz.2.71': attribute type 2 has an invalid length. [ 83.617914][ T5586] netlink: 'syz.2.71': attribute type 1 has an invalid length. [ 83.651675][ T5586] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.71'. [ 85.433667][ T5616] loop3: detected capacity change from 0 to 1024 [ 87.427622][ T5616] hfsplus: failed to load extents file [ 87.717719][ T5633] loop2: detected capacity change from 0 to 1024 [ 87.961571][ T12] hfsplus: b-tree write err: -5, ino 4 [ 88.004853][ T5634] loop3: detected capacity change from 0 to 256 [ 88.063832][ T5634] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdefbdf28, utbl_chksum : 0xe619d30d) [ 88.095901][ T5637] loop2: detected capacity change from 0 to 256 [ 88.443174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.664100][ T5644] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 88.852283][ T5648] Invalid option length (0) for dns_resolver key [ 89.022527][ T5653] loop1: detected capacity change from 0 to 8 [ 89.066450][ T5653] squashfs image failed sanity check [ 89.114599][ T5641] loop3: detected capacity change from 0 to 8 [ 89.134324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.270767][ T5641] unable to read xattr id index table [ 89.280363][ T5246] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.332290][ T5246] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.346442][ T5246] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.358355][ T5246] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.372418][ T5246] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.380737][ T5246] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.659906][ T5662] kvm: kvm [5661]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 89.668930][ T5662] kvm: kvm [5661]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x100001015 [ 89.682087][ T5662] kvm: kvm [5661]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 89.698991][ T5662] kvm: kvm [5661]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 89.707808][ T5662] kvm: kvm [5661]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 89.724079][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.743744][ T5669] loop4: detected capacity change from 0 to 8 [ 89.786452][ T5656] chnl_net:caif_netlink_parms(): no params data found [ 89.808017][ T5669] unable to read xattr id index table [ 89.939838][ T5656] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.947159][ T5656] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.952995][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 89.954461][ T5656] bridge_slave_0: entered allmulticast mode [ 89.966723][ T5656] bridge_slave_0: entered promiscuous mode [ 89.968266][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 89.975007][ T5656] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.988911][ T5656] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.997422][ T5656] bridge_slave_1: entered allmulticast mode [ 90.004831][ T5656] bridge_slave_1: entered promiscuous mode [ 90.028422][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.040961][ T5656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.064176][ T5656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.095521][ T9] usb 4-1: config 0 descriptor?? [ 90.127284][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 90.176847][ T5680] loop1: detected capacity change from 0 to 128 [ 90.202420][ T5656] team0: Port device team_slave_0 added [ 90.248600][ T5656] team0: Port device team_slave_1 added [ 90.281523][ T5680] loop1: detected capacity change from 0 to 512 [ 90.327024][ T5680] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 90.339844][ T5656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.361856][ T5680] EXT4-fs (loop1): 1 truncate cleaned up [ 90.367555][ T5656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.394917][ T5656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.431506][ T5680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.446785][ T5656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.467905][ T5656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.495438][ T5656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.565872][ T5245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.732747][ T5656] hsr_slave_0: entered promiscuous mode [ 90.759914][ T5688] loop1: detected capacity change from 0 to 2048 [ 90.790686][ T5656] hsr_slave_1: entered promiscuous mode [ 90.816086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.841539][ T5688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.854506][ T5656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.874525][ T5656] Cannot create hsr debugfs directory [ 90.913131][ T29] audit: type=1804 audit(1724356114.000:2): pid=5688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.94" name="/newroot/22/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 90.955665][ T5687] vlan2: entered promiscuous mode [ 90.963346][ T5687] dummy0: entered promiscuous mode [ 90.974579][ T5687] team0: Port device vlan2 added [ 91.071239][ T5245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.286638][ T5656] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.343372][ T9] gspca_sunplus: reg_w_riv err -71 [ 91.348591][ T9] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 91.377283][ T9] usb 4-1: USB disconnect, device number 3 [ 91.452637][ T5656] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.463086][ T5252] Bluetooth: hci5: command tx timeout [ 91.473062][ T5315] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.565566][ T5656] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.681910][ T5656] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.693484][ T5315] usb 5-1: Using ep0 maxpacket: 32 [ 91.717445][ T5315] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 91.743116][ T5315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.755472][ T5315] usb 5-1: Product: syz [ 91.759758][ T5315] usb 5-1: Manufacturer: syz [ 91.765435][ T5315] usb 5-1: SerialNumber: syz [ 91.772349][ T5315] usb 5-1: config 0 descriptor?? [ 91.882761][ T5696] loop2: detected capacity change from 0 to 40427 [ 91.897806][ T5696] F2FS-fs (loop2): Wrong NAT boundary, start(2560) end(462336) blocks(1024) [ 91.937542][ T5696] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 91.940180][ T5656] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.998990][ T5656] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.048067][ T5696] F2FS-fs (loop2): Found nat_bits in checkpoint [ 92.068193][ T5656] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.094438][ T5708] netlink: 'syz.3.101': attribute type 29 has an invalid length. [ 92.116688][ T5656] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.156826][ T5696] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 92.164531][ T5696] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 92.408887][ T5710] Zero length message leads to an empty skb [ 92.658165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #148!!! [ 92.965376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.613940][ T5252] Bluetooth: hci5: command tx timeout [ 93.677139][ T5601] kworker/u8:10: attempt to access beyond end of device [ 93.677139][ T5601] loop2: rw=1048577, sector=53248, nr_sectors = 4096 limit=40427 [ 93.745024][ T5601] kworker/u8:10: attempt to access beyond end of device [ 93.745024][ T5601] loop2: rw=1048577, sector=49152, nr_sectors = 4096 limit=40427 [ 93.929532][ T5315] rtl8150 5-1:0.0: eth1: rtl8150 is detected [ 93.952543][ T5315] usb 5-1: USB disconnect, device number 2 [ 94.109631][ T5601] kworker/u8:10: attempt to access beyond end of device [ 94.109631][ T5601] loop2: rw=1048577, sector=57344, nr_sectors = 15088 limit=40427 [ 94.129710][ T5656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.182297][ T5656] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.206371][ T5241] syz-executor: attempt to access beyond end of device [ 94.206371][ T5241] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 94.243776][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.250910][ T5601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.265264][ T5241] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 94.270869][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.279294][ T5601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.321612][ T5656] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.332714][ T5656] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.666280][ T5656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.757404][ T5656] veth0_vlan: entered promiscuous mode [ 94.767467][ T5656] veth1_vlan: entered promiscuous mode [ 94.793306][ T5656] veth0_macvtap: entered promiscuous mode [ 94.802095][ T5656] veth1_macvtap: entered promiscuous mode [ 94.818424][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.829226][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.839273][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.849938][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.860001][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.870577][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.880455][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.890980][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.900889][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.911602][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.923046][ T5656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.996972][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.007605][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.017751][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.028460][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.038433][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.049194][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.059064][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.069562][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.079416][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.090117][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.103924][ T5656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.116309][ T5656] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.125557][ T5656] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.143656][ T5656] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.160622][ T5656] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.192711][ T5718] loop4: detected capacity change from 0 to 40427 [ 95.247159][ T5718] F2FS-fs (loop4): heap/no_heap options were deprecated [ 95.275376][ T5718] F2FS-fs (loop4): invalid crc value [ 95.292331][ T5718] F2FS-fs (loop4): Found nat_bits in checkpoint [ 95.375091][ T2910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.416497][ T2910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.930641][ T5252] Bluetooth: hci5: command tx timeout [ 96.432790][ T5718] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 96.523951][ T2910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.531842][ T2910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.766406][ T5726] loop1: detected capacity change from 0 to 40427 [ 97.239320][ T5726] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 97.251601][ T5726] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 97.493175][ T5726] F2FS-fs (loop1): invalid crc value [ 97.570833][ T5726] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 97.761483][ T5239] syz-executor: attempt to access beyond end of device [ 97.761483][ T5239] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 97.822460][ T5239] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 97.829498][ T5239] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 98.373070][ T5252] Bluetooth: hci5: command tx timeout [ 98.397982][ T5761] loop3: detected capacity change from 0 to 8 [ 98.405088][ T5761] squashfs: Unknown parameter 'xUjPMh׮ۍ:ME|' [ 98.439129][ T5761] loop3: detected capacity change from 0 to 128 [ 98.451718][ T5761] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 98.573383][ T5750] loop2: detected capacity change from 0 to 512 [ 98.655317][ T5750] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 99.377404][ T5773] netlink: 'syz.4.110': attribute type 2 has an invalid length. [ 99.411036][ T5773] netlink: 5 bytes leftover after parsing attributes in process `syz.4.110'. [ 99.458089][ T5773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.110'. [ 99.707670][ T29] audit: type=1326 audit(1724356122.780:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5779 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc980b79e79 code=0x7ffc0000 [ 99.811855][ T29] audit: type=1326 audit(1724356122.780:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5779 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc980b79e79 code=0x7ffc0000 [ 99.865589][ T29] audit: type=1326 audit(1724356122.780:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5779 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc980b78810 code=0x7ffc0000 [ 99.911739][ T5766] loop0: detected capacity change from 0 to 40427 [ 99.919161][ T29] audit: type=1326 audit(1724356122.790:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5779 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc980b79e79 code=0x7ffc0000 [ 99.975723][ T5782] loop1: detected capacity change from 0 to 4096 [ 99.982201][ T29] audit: type=1326 audit(1724356122.790:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5779 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc980b79e79 code=0x7ffc0000 [ 100.031957][ T29] audit: type=1326 audit(1724356122.790:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5779 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc980b79e79 code=0x7ffc0000 [ 100.067264][ T5766] F2FS-fs (loop0): invalid crc value [ 100.107138][ T5782] ntfs3: loop1: Failed to load $MFT (-22). [ 100.146921][ T29] audit: type=1326 audit(1724356122.790:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5779 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc980b79e79 code=0x7ffc0000 [ 100.185854][ T5766] F2FS-fs (loop0): Found nat_bits in checkpoint [ 100.229148][ T29] audit: type=1326 audit(1724356122.790:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5779 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc980b79e79 code=0x7ffc0000 [ 100.281010][ T29] audit: type=1326 audit(1724356122.790:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5779 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc980b79e79 code=0x7ffc0000 [ 100.307792][ T5782] Illegal XDP return value 65535 on prog (id 39) dev N/A, expect packet loss! [ 100.339271][ T29] audit: type=1326 audit(1724356122.790:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5779 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc980b79e79 code=0x7ffc0000 [ 100.412060][ T5766] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 100.705876][ T5794] loop3: detected capacity change from 0 to 32768 [ 101.692693][ T5809] syz.0.113: attempt to access beyond end of device [ 101.692693][ T5809] loop0: rw=2049, sector=53248, nr_sectors = 256 limit=40427 [ 101.708128][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.715365][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.722358][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.729387][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.736423][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.743505][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.750639][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.757822][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.764841][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.772698][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.780596][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.787651][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.794663][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.801937][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.809056][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.816297][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.823351][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.830478][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.837494][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.844709][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.851674][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.858651][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.865680][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.872641][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.880694][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.888450][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.895424][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.902382][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.909404][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.916410][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.923471][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.930429][ T5809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 102.128628][ T5807] loop1: detected capacity change from 0 to 512 [ 102.135869][ T5807] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.180560][ T5814] loop4: detected capacity change from 0 to 512 [ 102.199984][ T5807] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 102.217993][ T5807] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.125: attempt to clear invalid blocks 2 len 1 [ 102.323955][ T5819] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.375828][ T5807] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 102.397881][ T5807] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.125: invalid indirect mapped block 1819239214 (level 0) [ 103.080182][ T5807] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.125: invalid indirect mapped block 1819239214 (level 1) [ 103.128230][ T5807] EXT4-fs (loop1): 1 truncate cleaned up [ 103.166758][ T5807] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.553248][ T5807] EXT4-fs error (device loop1): ext4_find_dest_de:2067: inode #2: block 13: comm syz.1.125: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 103.925546][ T5834] kernel read not supported for file /eth0 (pid: 5834 comm: syz.3.127) [ 103.953003][ T5828] program syz.3.127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.671053][ T5245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.800660][ T5841] loop3: detected capacity change from 0 to 40427 [ 104.880129][ T5841] F2FS-fs (loop3): Found nat_bits in checkpoint [ 104.930857][ T5841] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 105.192399][ T5843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 105.205725][ T5851] netlink: 68 bytes leftover after parsing attributes in process `syz.1.135'. [ 105.499553][ T5853] loop4: detected capacity change from 0 to 8 [ 105.529651][ T5853] unable to read xattr id index table [ 105.649675][ T5851] netlink: 68 bytes leftover after parsing attributes in process `syz.1.135'. [ 105.813332][ T5857] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 105.820100][ T5857] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 105.935868][ T5857] vhci_hcd vhci_hcd.0: Device attached [ 106.029184][ T5859] vhci_hcd: connection closed [ 106.034759][ T1836] vhci_hcd: stop threads [ 106.046813][ T5864] loop4: detected capacity change from 0 to 64 [ 106.089735][ T1836] vhci_hcd: release socket [ 106.110564][ T5864] hfs: unable to change iocharset [ 106.128363][ T1836] vhci_hcd: disconnect device [ 106.156720][ T5864] hfs: unable to parse mount options [ 106.164722][ T5252] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 106.173492][ T5252] Bluetooth: hci2: Injecting HCI hardware error event [ 106.188103][ T5246] Bluetooth: hci2: hardware error 0x00 [ 106.304743][ T5866] loop2: detected capacity change from 0 to 16 [ 106.341156][ T5866] erofs: (device loop2): mounted with root inode @ nid 36. [ 106.414425][ T5236] syz-executor: attempt to access beyond end of device [ 106.414425][ T5236] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 106.429549][ T5236] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 106.451985][ T5864] loop4: detected capacity change from 0 to 4096 [ 106.504142][ T5864] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 106.594110][ T5864] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 106.636000][ T5864] ntfs3: loop4: ino=21, The size of extended attributes must not exceed 64KiB [ 106.691530][ T5869] xt_limit: Overflow, try lower: 0/0 [ 106.773851][ T5868] ntfs3: loop4: ino=21, The size of extended attributes must not exceed 64KiB [ 106.983230][ T5870] ntfs3: loop4: ino=21, The size of extended attributes must not exceed 64KiB [ 107.270511][ T5872] smc: net device lo applied user defined pnetid SYZ2 [ 108.296987][ T5246] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 109.807286][ T5288] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 109.931432][ T5903] loop0: detected capacity change from 0 to 512 [ 110.023421][ T5288] usb 3-1: Using ep0 maxpacket: 8 [ 110.052258][ T5288] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 110.070695][ T5901] xt_CT: No such helper "netbios-ns" [ 110.116999][ T5288] usb 3-1: config 179 has no interface number 0 [ 110.158186][ T5288] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 110.226426][ T5288] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 110.301589][ T5903] EXT4-fs (loop0): Test dummy encryption mode enabled [ 110.313420][ T5288] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 110.367269][ T5903] EXT4-fs error (device loop0): __ext4_fill_super:5442: inode #2: comm syz.0.150: casefold flag without casefold feature [ 110.392432][ T5288] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 110.443076][ T5288] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 110.463759][ T5903] EXT4-fs (loop0): get root inode failed [ 110.483283][ T5903] EXT4-fs (loop0): mount failed [ 110.493939][ T5909] : renamed from pim6reg1 [ 110.520723][ T5288] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 110.560246][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.619187][ T5895] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 110.637708][ T5895] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 110.721773][ T5288] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input6 [ 110.866863][ T4669] input input6: unable to receive magic message: -110 [ 111.108532][ T4669] input input6: unable to receive magic message: -32 [ 111.257205][ T4669] input input6: unable to receive magic message: -71 [ 111.269392][ T5288] usb 3-1: USB disconnect, device number 4 [ 111.275251][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 111.275576][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 111.366218][ T5288] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 112.301915][ T5923] raw_sendmsg: syz.2.155 forgot to set AF_INET. Fix it! [ 112.374260][ T5927] netlink: 32 bytes leftover after parsing attributes in process `syz.3.157'. [ 112.393050][ T5288] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.394405][ T5927] sp0: Synchronizing with TNC [ 113.023054][ T5288] usb 2-1: Using ep0 maxpacket: 32 [ 113.054943][ T5288] usb 2-1: config 0 has no interfaces? [ 113.603507][ T5315] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 113.873829][ T5315] usb 3-1: Using ep0 maxpacket: 32 [ 113.900721][ T5315] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 113.921001][ T5315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.044204][ T5288] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=17.22 [ 114.122676][ T5288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.144979][ T5315] usb 3-1: Product: syz [ 114.149226][ T5315] usb 3-1: Manufacturer: syz [ 114.153955][ T5315] usb 3-1: SerialNumber: syz [ 114.172708][ T5288] usb 2-1: Product: syz [ 114.178364][ T5288] usb 2-1: Manufacturer: syz [ 114.183201][ T5288] usb 2-1: SerialNumber: syz [ 114.201287][ T5288] usb 2-1: config 0 descriptor?? [ 114.201334][ T5315] usb 3-1: config 0 descriptor?? [ 114.313526][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.557919][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 114.916973][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.004179][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=a4.72 [ 115.021270][ T5284] usb 2-1: USB disconnect, device number 3 [ 115.120375][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.134053][ T9] usb 4-1: Product: syz [ 115.138292][ T9] usb 4-1: Manufacturer: syz [ 115.151349][ T9] usb 4-1: SerialNumber: syz [ 115.159621][ T9] usb 4-1: config 0 descriptor?? [ 115.324969][ T5954] loop0: detected capacity change from 0 to 2048 [ 115.378361][ T5937] IPv6: NLM_F_REPLACE set, but no existing node found! [ 115.444499][ T5937] loop3: detected capacity change from 0 to 512 [ 115.482670][ T5937] EXT4-fs: Ignoring removed oldalloc option [ 115.526996][ T5954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.563571][ T5937] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 115.567951][ T5959] loop1: detected capacity change from 0 to 2048 [ 115.585366][ T5315] (unnamed net_device) (uninitialized): Assigned a random MAC address: 7a:24:cc:85:41:61 [ 115.721249][ T5315] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 115.862437][ T5937] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 116.044243][ T5959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.166603][ T3004] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 234: padding at end of block bitmap is not set [ 116.166936][ T5315] usb 3-1: USB disconnect, device number 5 [ 116.198770][ T3004] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 116.212094][ T3004] EXT4-fs (loop0): This should not happen!! Data will be lost [ 116.212094][ T3004] [ 116.221854][ T3004] EXT4-fs (loop0): Total free blocks count 0 [ 116.228923][ T3004] EXT4-fs (loop0): Free/Dirty block details [ 116.234986][ T3004] EXT4-fs (loop0): free_blocks=0 [ 116.240214][ T3004] EXT4-fs (loop0): dirty_blocks=32 [ 116.245498][ T3004] EXT4-fs (loop0): Block reservation details [ 116.251771][ T3004] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 116.276454][ T5937] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2862: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 116.287553][ T3004] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 2 with error 28 [ 116.345121][ T5937] EXT4-fs (loop3): 1 truncate cleaned up [ 116.353482][ T5937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.357074][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 116.357087][ T29] audit: type=1326 audit(1724356139.450:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc304d79e79 code=0x7ffc0000 [ 116.382644][ T5937] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.414772][ T29] audit: type=1326 audit(1724356139.470:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc304d79e79 code=0x7ffc0000 [ 116.426865][ T5969] fuse: Bad value for 'fd' [ 116.437861][ T29] audit: type=1326 audit(1724356139.470:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fc304d79e79 code=0x7ffc0000 [ 116.464583][ T29] audit: type=1326 audit(1724356139.470:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc304d79e79 code=0x7ffc0000 [ 116.487020][ T29] audit: type=1326 audit(1724356139.470:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc304d79e79 code=0x7ffc0000 [ 116.509395][ T29] audit: type=1326 audit(1724356139.470:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fc304d79e79 code=0x7ffc0000 [ 116.532756][ T29] audit: type=1326 audit(1724356139.470:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc304d79e79 code=0x7ffc0000 [ 116.555674][ T29] audit: type=1326 audit(1724356139.470:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc304d79e79 code=0x7ffc0000 [ 116.578118][ T29] audit: type=1326 audit(1724356139.470:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc304d79e79 code=0x7ffc0000 [ 116.600386][ T29] audit: type=1326 audit(1724356139.470:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc304d79e79 code=0x7ffc0000 [ 116.686279][ T9] usb 4-1: unknown interface protocol 0xf, assuming v1 [ 116.782034][ T5245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.836553][ T9] usb 4-1: USB disconnect, device number 4 [ 116.858855][ T5976] netlink: 'syz.0.168': attribute type 7 has an invalid length. [ 116.888025][ T5976] : entered promiscuous mode [ 117.640840][ T5242] udevd[5242]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.153209][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 120.324740][ T5286] ------------[ cut here ]------------ [ 120.330670][ T5286] WARNING: CPU: 1 PID: 5286 at kernel/sched/core.c:421 __sched_core_put+0xd6/0x120 [ 120.340209][ T5286] Modules linked in: [ 120.344469][ T5286] CPU: 1 UID: 0 PID: 5286 Comm: kworker/1:4 Not tainted 6.11.0-rc4-next-20240822-syzkaller #0 [ 120.354868][ T5286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 120.365163][ T5286] Workqueue: events __sched_core_put [ 120.370760][ T5286] RIP: 0010:__sched_core_put+0xd6/0x120 [ 120.376480][ T5286] Code: d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 20 8c 99 00 48 83 3b 00 75 0f 41 ff c6 41 83 fe 08 0f 82 74 ff ff ff eb 06 90 <0f> 0b 90 eb eb 31 ff e8 8e 10 02 00 48 c7 c7 80 a0 19 93 e8 62 94 [ 120.376896][ T9] usb 4-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 120.396359][ T5286] RSP: 0018:ffffc90004457b90 EFLAGS: 00010286 [ 120.406460][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.412626][ T5286] RAX: 1ffff11017227f0c RBX: ffff8880b913f860 RCX: 0000000000000001 [ 120.421564][ T9] usb 4-1: Product: syz [ 120.428943][ T5286] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff9319a0a0 [ 120.441169][ T5286] RBP: ffffc90004457dc0 R08: 0000000000000003 R09: fffffbfff2633414 [ 120.449514][ T9] usb 4-1: Manufacturer: syz [ 120.449536][ T9] usb 4-1: SerialNumber: syz [ 120.454155][ T5286] R10: dffffc0000000000 R11: fffffbfff2633414 R12: 1ffffffff1c60e2a [ 120.454173][ T5286] R13: 000000000003f860 R14: 0000000000000001 R15: dffffc0000000000 [ 120.454187][ T5286] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 120.454204][ T5286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.454219][ T5286] CR2: 00007f388f295f98 CR3: 000000002f108000 CR4: 00000000003506f0 [ 120.454236][ T5286] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 120.468691][ T9] usb 4-1: config 0 descriptor?? [ 120.475042][ T5286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 120.521170][ T6004] loop2: detected capacity change from 0 to 16 [ 120.527135][ T6004] erofs: (device loop2): mounted with root inode @ nid 36. [ 120.527591][ T5286] Call Trace: [ 120.538677][ T5286] [ 120.541326][ T6004] syz.2.175: attempt to access beyond end of device [ 120.541326][ T6004] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 120.541628][ T5286] ? __warn+0x168/0x4e0 [ 120.555399][ T6004] syz.2.175: attempt to access beyond end of device [ 120.555399][ T6004] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 120.559479][ T5286] ? __sched_core_put+0xd6/0x120 [ 120.559514][ T5286] ? report_bug+0x2b3/0x500 [ 120.582488][ T5286] ? __sched_core_put+0xd6/0x120 [ 120.587643][ T5286] ? handle_bug+0x60/0x90 [ 120.592027][ T5286] ? exc_invalid_op+0x1a/0x50 [ 120.596833][ T5286] ? asm_exc_invalid_op+0x1a/0x20 [ 120.601899][ T5286] ? __sched_core_put+0xd6/0x120 [ 120.606918][ T5286] ? process_scheduled_works+0x976/0x1850 [ 120.612661][ T5286] process_scheduled_works+0xa63/0x1850 [ 120.619300][ T5286] ? __pfx_process_scheduled_works+0x10/0x10 [ 120.626156][ T5286] ? assign_work+0x364/0x3d0 [ 120.630781][ T5286] worker_thread+0x86d/0xd10 [ 120.635488][ T5286] ? __kthread_parkme+0x169/0x1d0 [ 120.640545][ T5286] ? __pfx_worker_thread+0x10/0x10 [ 120.645777][ T5286] kthread+0x2f0/0x390 [ 120.649870][ T5286] ? __pfx_worker_thread+0x10/0x10 [ 120.655091][ T5286] ? __pfx_kthread+0x10/0x10 [ 120.659700][ T5286] ret_from_fork+0x4b/0x80 [ 120.664179][ T5286] ? __pfx_kthread+0x10/0x10 [ 120.668784][ T5286] ret_from_fork_asm+0x1a/0x30 [ 120.673680][ T5286] [ 120.676721][ T5286] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 120.684005][ T5286] CPU: 1 UID: 0 PID: 5286 Comm: kworker/1:4 Not tainted 6.11.0-rc4-next-20240822-syzkaller #0 [ 120.694256][ T5286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 120.704323][ T5286] Workqueue: events __sched_core_put [ 120.709629][ T5286] Call Trace: [ 120.712910][ T5286] [ 120.716375][ T5286] dump_stack_lvl+0x241/0x360 [ 120.721074][ T5286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.726294][ T5286] ? __pfx__printk+0x10/0x10 [ 120.730896][ T5286] ? _printk+0xd5/0x120 [ 120.735104][ T5286] ? __init_begin+0x41000/0x41000 [ 120.740167][ T5286] ? vscnprintf+0x5d/0x90 [ 120.744786][ T5286] panic+0x349/0x880 [ 120.748708][ T5286] ? __warn+0x177/0x4e0 [ 120.752880][ T5286] ? __pfx_panic+0x10/0x10 [ 120.757307][ T5286] ? show_trace_log_lvl+0x3b2/0x410 [ 120.762535][ T5286] ? ret_from_fork_asm+0x1a/0x30 [ 120.767496][ T5286] __warn+0x34b/0x4e0 [ 120.771501][ T5286] ? __sched_core_put+0xd6/0x120 [ 120.776463][ T5286] report_bug+0x2b3/0x500 [ 120.780901][ T5286] ? __sched_core_put+0xd6/0x120 [ 120.785872][ T5286] handle_bug+0x60/0x90 [ 120.790054][ T5286] exc_invalid_op+0x1a/0x50 [ 120.794578][ T5286] asm_exc_invalid_op+0x1a/0x20 [ 120.799446][ T5286] RIP: 0010:__sched_core_put+0xd6/0x120 [ 120.805011][ T5286] Code: d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 20 8c 99 00 48 83 3b 00 75 0f 41 ff c6 41 83 fe 08 0f 82 74 ff ff ff eb 06 90 <0f> 0b 90 eb eb 31 ff e8 8e 10 02 00 48 c7 c7 80 a0 19 93 e8 62 94 [ 120.824642][ T5286] RSP: 0018:ffffc90004457b90 EFLAGS: 00010286 [ 120.830733][ T5286] RAX: 1ffff11017227f0c RBX: ffff8880b913f860 RCX: 0000000000000001 [ 120.838723][ T5286] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff9319a0a0 [ 120.846714][ T5286] RBP: ffffc90004457dc0 R08: 0000000000000003 R09: fffffbfff2633414 [ 120.854698][ T5286] R10: dffffc0000000000 R11: fffffbfff2633414 R12: 1ffffffff1c60e2a [ 120.862675][ T5286] R13: 000000000003f860 R14: 0000000000000001 R15: dffffc0000000000 [ 120.870681][ T5286] ? process_scheduled_works+0x976/0x1850 [ 120.876418][ T5286] process_scheduled_works+0xa63/0x1850 [ 120.882011][ T5286] ? __pfx_process_scheduled_works+0x10/0x10 [ 120.888021][ T5286] ? assign_work+0x364/0x3d0 [ 120.892634][ T5286] worker_thread+0x86d/0xd10 [ 120.897253][ T5286] ? __kthread_parkme+0x169/0x1d0 [ 120.902290][ T5286] ? __pfx_worker_thread+0x10/0x10 [ 120.907412][ T5286] kthread+0x2f0/0x390 [ 120.911490][ T5286] ? __pfx_worker_thread+0x10/0x10 [ 120.916610][ T5286] ? __pfx_kthread+0x10/0x10 [ 120.921230][ T5286] ret_from_fork+0x4b/0x80 [ 120.925662][ T5286] ? __pfx_kthread+0x10/0x10 [ 120.930261][ T5286] ret_from_fork_asm+0x1a/0x30 [ 120.935087][ T5286] [ 120.938219][ T5286] Kernel Offset: disabled [ 120.942600][ T5286] Rebooting in 86400 seconds..