last executing test programs: 57.796729034s ago: executing program 0 (id=105): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2629b60c7e842f9e3b19ac267a104ef1638bcb1dfbcf8825aaaef3e6deb5885d5200e5c71203752a698f889c6570477e47a38a6fa4411a3691ce1d410b6ba7fa3639f446974a45e230b4b62c14e0a0f1a73b6eebc8e2371c378b2b28798b2c4606072cbbd5fb37f25dfd37a5b34455a58f86b392d647eed05df6cc0760950a83bfcac8e43002ba5e801041fa51fc762533", @ANYRES16=0x0, @ANYBLOB="000129bd7000fedbdf25060000000600280000000000080032000500000008003a000000000005002e000000000005002a00000000000500380000000000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) clock_adjtime(0x0, &(0x7f0000000480)={0x8000000000000001, 0x0, 0xa, 0x0, 0x0, 0x20000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x104, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) (async) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) 33.969186172s ago: executing program 0 (id=133): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r6, 0x1, 0x0, 0x0, {0x2}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}]}]}, 0x34}}, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000005, 0x12, r7, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 32.793991103s ago: executing program 0 (id=175): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000640)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)="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"}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4,\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r3 = eventfd2(0x0, 0x0) readv(r3, &(0x7f0000002880)=[{&(0x7f0000002840)=""/7, 0x7}], 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r10}) close_range(r0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone3(&(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 28.964546181s ago: executing program 0 (id=185): r0 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000600)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x8001) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x5, 0x6fc, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x5, 0x5, &(0x7f00000000c0)=@framed={{0x3d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f00000000c0)='./bus\x00', 0x8, &(0x7f0000000640)={[{@nogc_merge}, {@checkpoint_diasble}, {@alloc_mode_def}, {@fastboot}, {@inline_data}, {@nogc_merge}, {@inline_data}, {@acl}, {@heap}, {@noinline_data}, {@noextent_cache}, {@compress_chksum}, {@jqfmt_vfsold}, {@noextent_cache}, {@nouser_xattr}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000e40)='./file0/file0\x00', 0x0, 0xadc51, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x18400, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x40049366, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) memfd_create(&(0x7f0000000040)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xdd\x00\x00\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\t\xff~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8a\xc5at\x94=F\xc7\xea\x84\xea0\xf4\x0f\"C\xeb\x17\xe9V\x92o\xa7\xe3/H~\x81\xebnG5\xe3O\x9a\xd9\t_\x88e\xa9x\xd2\xa0\x1e\"\xb3\xbb\x8e\x961\xf5N\xdbj\x1f\xcf>1y\xe8\xb4\xbd{\x9a\x95\xcd\xaf\"^\x86\xd2\xed`\x84\xb6\xb1\xf8\xb5\x99\xce|\x12\xad\xac\xe17\x15\x19!\xae\x03J\xd5\xabnS\x81\xe0\xfa\aP\f', 0x0) 25.948266489s ago: executing program 0 (id=191): r0 = syz_mount_image$reiserfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x1118, &(0x7f0000000a40)="$eJzs2bFqFFEUBuD/zqy62KyM/TRaWEiIrA+QFArb2mojEhBMlQVB8TV8A9/CV9BU9iG9FgFLYWTcHTaGBZXsCoHvg5l75nDPnLnlvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADojZKvJbldJc2Qq5KUpG2PZ6dJ2iF/61NdpeTJwWz+6Gj6eJ6k/jW9PE1KX9WXpXlwZ9xMm2mT8cO9/buf52/evnp+eHhwtHxNSZuTs42uogy3+nyuXJy2t9GmAAAAcFV0lzbJ+9d/0+n6lvoDAAAAf7Lp8wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf9VNVnEzBFWSkrTt8ew0Sbum7tp/+j4AAADg8kqqPJusyy+OAVbu58ukDPlRP34vfbybD2vqAQAAgJWXH3977G4sg/P/1390C/1+/F5Gi335eDVvZ2cRL4d820/qJLsXep2cvXsxXKWrk5vbWRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/GQHDkgAAAAABP1/3Y5AAQAAAAAAAAAAAAAAAAAAAAAAAC4KAAD//1ux4Rs=") syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2000084c, &(0x7f0000000440)=ANY=[], 0x81, 0x1505, &(0x7f00000036c0)="$eJzs3Au4jtW2OPAx5pwvi6QvyX2OOV6+5DJJklwSEkmSJEluCUmSJCGxyC0JScg9yT0kt1jJ/X7LPUm2JElCQpL5f7Q7x9mnfU77/Pc+23n2Gr/nmc+aY73fmN+Ya6zn+973Xc/6vu04uGr9apXrMjP8XfDPX1IBIAUA+gHANQAQAUCpbKWyAS6fnklj6t/3JOIf66FpV7oCcSVJ/9M36X/6Jv1P36T/6Zv0P32T/qdv0v/0TfovRHq2dXrua2Wk3/HPu/8PIPf//6+R9/9/IYeLjflyfbHrO/0PUqT/6Zv0P32T/qdv0v/0Tfqfvkn//8VFAJX+m8PS/39Nf+ttFum/EOnZlb7//E8YKQBwpWv4Pzuu9O+fEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQoj04Vy4zADAv82vdF1CCCGEEEIIIYT4xwkZr3QFQgghhBBCCCGE+N+HoECDgQgyQEZIgUyQGa6CLHA1ZIVrIAHXQja4DrLD9ZADckIuyA15IC/kAwsEDhhiyA8FIAk3QEG4EQpBYSgCRcFDMSgON0EJuBlKwi1QCm6F0nAblIGyUA7Kw+1QAe6AilAJKsOdUAXugqpQDe6G6nAP1IB7oSbcB7XgfqgND0AdeBDqwkNQDx6G+vAINIBHoSE0gsbQBJr+f+W/CF3hJegG3SEVekBPeBl6QW/oA32hH7wC/eFVGACvwUAYBIPhdRgCb8BQeBOGwXAYAW/BSBgFo2EMjIVxMB7ehgnwDkyEd2ESTIYpMBWmwXSYAe/BTJgFs+F9mAMfwFyYB/NhASyED2ERLIY0+AiWwMewFJbBclgBK2EVrIY1sBbWwXrYABthE2yGLbAVPoFtsB12wE7YBbthD3wKe+Ez2Aefw3744n+Yf/Y/5XdCQECFCg0azIAZMAVTMDNmxiyYBbNiVkxgArNhNsyO2TEH5sBcmAvzYB7Mh/mQkJCRMT/mxyQmsSAWxEJYCItgEfTosTgWxxJ4M5bEklgKS2FpLI1lsCyWxfJYHitgBayIFbEyVsYqWAWrYlW8G+/Ge7AG1sCaWBNrYS2sjbWxDtbBulgX62E9rI/1sQE2wIbYEBtjY2yKTbEZNsPm2BxbYktsha2wNbbGNtgG22JbbIftsD22xw7YATtiR+yEnbEzvogv4kv4EnbHKqoH9sSe2At7YR/si33xFeyPr+Kr+BoOxEE4GF/H1/ENHIpncBgOxxE4AiuoUTgaxyCrcTgex+MEnIATcSJOwsk4GafiNJyOM3AGzsRZOAvfxzn4AX6A83AeLsCFuBAX4WJMwzRcgmdxKS7D5bgCV+IqXIlrcC2uwfW4AdfjJtyEW3ALfoKf4HbcjjtxJ+7G3fgpfoqf4Wc4EPfjfjyAB/AgHsRDeAgP42E8gkfwKB7FY3gMj+NxPIEn8RSexNN4Gs/gWTyH5/A8nscL+Hyer+vtLrxuIKhLjDIqg8qgUlSKyqwyqywqi8qqsqqESqhsKpvKrrKrHCqHyqVyqTwqj8qn8ilSpFjFKr/Kr5IqqQqqgqqQKqSKqCLKK6+Kq+KqhCqhSqqSqpS6VZVWt6kyqqxq4cur8qqCaukrqkqqsqqsqqi7VFVVTVVT1VV1VUPVUDVVTVVL1VK11QOqjuqBffAhdakz9dUgbKAGY0PVSDVWTdQb+JhqpoZic9VCtVRPqOE4DFurZr6Nelq1VaOxnXpWjcHnVAc1DjuqF1Qn1Vl1US+qrqq575bht5dANRV7qd6qj+qrZuJd6lLHqqrX1EA1SA1Wr6sF+IYaqt5Uw9RwNUK9pUaqUWq0GqPGqnFqvHpbTVDvqInqXTVJTVZT1FQ1TU1XM9R7aqaapWar99Uc9YGaq+ap+WqBWqg+VIvUYpWmPlJL1MdqqVqmlqsVaqVapVarNWqtWqfWqw1qo9qkNqstaqv6RG1T29UOtVPtUrvVHvWp2qs+U/vU52q/+kIdUH9SB9WX6pD6Sh1WX6sj6ht1VH2rjqnv1HH1vTqhTqpT6gd1Wv2ozqiz6pz6SZ1XP6sL6hd1UQUFGrXSWhsd6Qw6o07RmXRmfZXOoq/WWfU1OqGv1dn0dTq7vl7n0Dl1Lp1b59F5dT5tNWmnWcc6vy6gk/oGXVDfqAvpwrqILqq9LqaL65t0CX2zLqlv0aX0rbq0vk2X0WV1OV1e364r6Dt0RV1JV9Z36ir6Ll1VV9N36+r6Hl1D36tr6vt0LX2/rq0f0HX0g7qufkjX0w/r+voR3UA/qhvqRrqxbqKb6sd0M/24bq5b6Jb6Cd1KP6lb66d0G/20bquf0e30s7q9fk530M/rjvoF3Ul31l30L/qiDrqb7q5TdQ/dU7+se+neuo/uq/vpV3R//aoeoF/TA/UgPVi/rofoN/RQ/aYepofrEfotPVKP0qP1GD1Wj9Pj9dt6gn5HT9Tv6kl6sp6ip+pperru89tKs/+G/Hf+Sv6AX599i96qP9Hb9Ha9Q+/Uu/RuvUfv0Xv1Xr1P79P79X59QB/QB/VBfUgf0of1YX1EH9FH9VF9TB/Tx/VxfUKf1D/pH/Rp/aM+o8/qs/onfV6f1xd++xmAQaOMNsZEJoPJaFJMJpPZXGWymKtNVnONSZhrTTZznclurjc5TE6Ty+Q2eUxek89YQ8YZNrHJbwqYpLnBFDQ3mkKmsCliihpvipni5qa/O/+P6mtqmppmpplpbpqblqalaWVamdamtWlj2pi2pq1pZ9qZ9qa96WA6mI6mo+lkOpkupovparqabqabSTWppqd52fQyvU0f09f0M6+Y/qa/GWAGmIFmoBlsBpshZogZaoaaYWaYGWFGmJFmpBltRpuxZqwZb8abCWaCmWgmmklmkplipphpZpqZYWaYmWammW1mmzlmjplr5pr5Zr5ZaBaaRWaRSTNpZolZYpaaZWaZWWFWmFVmlVlj1ph1Zp3ZYDaYTWaTWWq2mq1mm9lmdpgdZpfZZfaYPWav2Wv2mX1mv9lvDpgD5qA5aA6ZQ+awOWyOmCPmqDlqjplj5rg5bk6YE+aUOWVOm9PmjDljzplz5rw5by6YC+aiuXjptC9SkYpMZKIMUYYoJUqJMkeZoyxRlihrlDVKRIkoW5Qtyh5dH+WIcka5otxRnihvlC+yEUUu4iiO8kcFomR0Q1QwujEqFBWOikRFIx8Vi4pHN0UlopujktEtUano1qh0dFtUJioblYvKR7dHFaI7oopRpahydGdUJborqhpVi+6Oqkf3RDWie6Oa0X1Rrej+qHb0QFQnejCqGz0U1YsejupHj0QNokejhlGjqHHUJGr6D10/hDM5H/fdbHebanvYnvZl28v2tn1sX9vPvmL721ftAPuaHWgH2cH2dTvEvmGH2jftMDvcjrBv2ZF2lB1tx9ixdpwdb9+2E+w7dqJ9106yk+0UO9VOs9PtDPuenWln2dn2fTvHfmDn2nl2vl1gF9oP7SK72KbZj+wS+7FdapfZ5XaFXWlX2dV2jV1r19n1doPdaDfZzXaL3Wo/sdvsdrvD7rS77G67x35q99rP7D77ud1vv7AH7J/sQfulPWS/soft1/aI/cYetd/aY/Y7e9x+b0/Yk/aU/cGetj/aM/asPWd/suftz/aC/cVetOHSyf2lt3cyZCgDZaAUSqHMlJmyUBbKSlkpQQnKRtkoO2WnHJSDclEuykN5KB/lo0uYmPJTfkpSkgpSQSpEhagIFSFPnopTcSpBJagklaRSVIpKU2kqQ2WoHJWj2+l2uoPuoEpUie6kO+kuuouqUTWqTtWpBtWgmlSTalEtqk21qQ7VobpUl+pRPapP9akBNaCG1JAaU2NqSk2pGTWj5tScWlJLakWtqDW1pjbUhtpSW2pH7ag9tacO1IE6UkfqRJ2oC3WhrtSVulE3SqVU6kk9qRf1oj7Uh/pRP+pP/WkADaCBNJAG02AaQkNoKA2lYTScRtBbNJJG0WgaQ2NpHI2n8TSBJtBEmkiTaBJNoSk0jabRDJpBM2kmzabZNIfm0FyaS/NpPi2khbSIFlEapdESWkJLaSktp+W0klbSalpNa2ktraf1tJE20mbaTFtpK22jbbSDdtAu2kV7aA/tpb20j/bRftpPB+gAHaSDdIgO0WE6TEfoCB2lo3SMjtFxOk4n6ASdolN0mk7TGTpD5+gcnaef6QL9QhcpUIpTkNld5bK4q11Wd41LcZncpTgCgEtxLpfb5XF5XT5nXQ6X8y9ics4VcoVdEVfUeVfMFXc3/S4u48q6cq68u91VcHe4ir+Lq7t7XA13r6vp7nPV3N1/Eddy97va7hFXxz3q6rpGrp5r4uq7R1wD96hr6Bq5xq6Ja+WedK3dU66Ne9q1dc/8Ll7kFru1bp1b7za4ve4zd8795I66b91597Pr5rq7fu4V19+96ga419xAN+h38Qj3lhvpRrnRbowb68b9Lp7iprppbrqb4d5zM92s38UL3Ydujktzc908N98t+DW+VFOa+8gtcR+7pW6ZW+5WuJVulVvt1vx7rSvcJrfZbXF73Kdum9vudridbpfb/Wt8aR/73Oduv/vCHXHfuIPuS3fIHXOH3de/xpf2d8x95467790Jd9Kdcj+40+5Hd8ad/XX/l/b+g/vFXXTBASMr1mw44gyckVM4E2fmqzgLX81Z+RpO8LWcja/j7Hw95+CcnItzcx7Oy/nYMrFj5pjzcwFO8g1ckG/kQlyYi3BR9lyMi/NNXIJv5pJ8C5fiW7k038ZluCyX4/J8O1fgO7giV+LKfCdXCYGrcjW+m6vzPVyD7+WafB/X4vu5Nj/AdfhBrssPcT1+mOvzI9yAH+WG3IgbcxNuyo9xM36cm3MLbslPcCt+klvzU9yGn+a2/Ay342e5PT/HHfh57sgvcCfuzF34Re7KL3E37s6p3IN78svci3tzH+7L/fgV7s+v8gB+jQfyIB7Mr/MQfoOH8ps8jIfzCH6LR/IoHs1jeCyP4/H8Nk/gd3giv8uTeDJP4ak8jafzDH6PZ/Isns3v8xz+gOfyPJ7PC3ghf8iLeDGn8Ue8hD/mpbyMl/MKXsmreDWv4bW8jtfzBt7Im3gzb+Gt/Alv4+28g3fyLt7Ne/hT3suf8T7+nPfzF3yA/8QH+Us+xF/xYf6aj/A3fJS/5WP8HR/n7/kEn+RT/AOf5h/5DJ/lc/wTn+ef+QL/whc5MMQYq1jHJo7iDHHGOCXOFGeOr4qzxFfHWeNr4kR8bZwtvi7OHl8f54hzxrni3HGeOG+cL7YxxS7mOI7zxwXiZHxDXDC+MS4UF46LxEVjHxeLi8c3xSXim+OS8S1xqfjWuHR8W1wmLhs/cl/5+Pa4QnxHXDGuFFeO74yrxHfFVeNq8d1x9fieuEZ8b1wzvi8uGd8f144fiOvED8Z144fievHDcf34kbhB/GjcMG4UN46bxE3jx+Jm8eNx87hF3DJ+Im4VPxm3jp+K28RPx23jZ/7weGrcI+4Zvxy/HIdwr56fXJBcmPwwuSi5OJmW/Ci5JPlxcmlyWXJ5ckVyZXJVcnVyTXJtcl1yfXJDcmNyU3JzcksyhGoZwaNXXnvjI5/BZ/QpPpPP7K/yWfzVPqu/xif8tT6bv85n99f7HD6nz+Vz+zw+r8/nrSfvPPvY5/cFfNLf4Av6G30hX9gX8UW998V8cd/EN/VNfTP/uG/uW/iW/gn/hH/SP+mf8k/5p31b/4xv55/17f1zvoN/3j/vX/CdfGffxb/ou/qXfDff3af6VN/T9/S9fC/fx/fx/Xw/39/39wP8AD/QD/SD/WA/xA/xQ/1QP8wP8yP8CD/Sj/Sj/Wg/1o/14/14P8FP8BP9RD/JT/JT/BQ/zU/zM/wMP9PP9LP9bD+n0Bw/18/18/18v9Av9Iv8Ip/m0/wSv8Qv9Uv9cr/cr/Qr/Wq/2q/1a/16v95v9Bv9Zr/Zb/Vb/Ta/ze/wO/wuv8vv8Xv8Xr/X7/P7/H6/3x/wB/xBf9Af8l/5w/5rf8R/44/6b/0x/50/7r/3J/xJf8r/4E/7H/0Zf9af8z/58/5nf8H/4i/64Mcn3k5MSLyTmJh4NzEpMTkxJTE1MS0xPTEj8V5iZmJWYnbi/cScxAeJuYl5ifmJBYmFiQ8TixKLE2mJjxJLEh8nliaWJZYnViRWJlYlQsi7LQ75Q4GQDDeEguHGUCgUDkVC0eBDsVA83BRKhJtDyXBLKBVuDaXDbaFMKBvKhUdDw9AoNA5NQtPwWGgWHg/NQ4vQMjwRWoUnQ+vwVGgTng5twzOhXXg2tA/PhQ7h+dAxvBA6hc6hS3gxdA0vhW6he0gNPULP8HLoFXqHPqFv6BdeCf3Dq2FAeC0MDIPC4PB6GBLeCEPDm2FYGB5GhLfCyDAqjA5jwtgwLowPb4cJ4Z0wMbwbJoXJYUqYGqaF6WFGeC/MDLPC7PB+mBM+CHPDvDA/LAgLw4dhUVgc0sJHYUn4OCwNy8LysCKsDKvC6rAmrA3rwvqwIWwMm8LmsCVsDZ+EbWF72BF2hl1hd9gTPg17w2dhX/g87A9fhAPhT+Fg+DIcCl+Fw+HrcCR8E46Gb8Ox8F04Hr4PJ8LJcCr8EE6HH8OZcDacCz+F8+HncCH8Ei7K/6wJIYQQQvxN9B8c7/FXvqd+G5f0BICrt+c+/J/X3Jjjz/PeKk+rBAA83b3jQ/82qlRJTU397bFLNUQF5gFA4nL+r3+W+y1eBi3hSWgDLaDEX62vt+p8nv9g/eStAJn/Q04KXI4vr3/zf7H+Y0+MWFQ6Ppftv1l/HkChApdzMsHl+PL6Jf+L9XM2+4P6M305HqD5f8jJApfjy+sXh8fhGWjzF48UQgghhBBCCCH+rLcq1/6Prp8vXZ/nMZdzMsLl+I+uz4UQQgghhBBCCHHlPde5y1OPtWnTor1MZCITmfz75Eq/MgkhhBBCCCH+0S6f9F/pSoQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiPTrn/FxYld6j0IIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIcSV9v8CAAD//4H6O6c=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYBLOB="eea73c3ca047349ab66dff07b1e2bdc61875c6ccebea30ba1b8977c632dd4bd75d3cfd10cce0c88cabf65767e9dbbd7b5841a8ce3eb44c7151dec2b7b8f9cf870af04f1cc951b195c7fd36ffdbd0622cdc14395f095fb0d31f384214d59a0105d577557215473973f3b70178f49f07562f4d21cad59fafb7fbaf76061c56fdd2093329e2ece7cf96435bca11a90ba7f31e69c4b73ba3d172906ffc90f5de134a696a731d20a9cf70009a31f83d4b774b0d99de69f14de9e655b84b646166d979b9cdbde38324510998bba500000000007cf791c3e2fc9c72f920a64e00"/231, @ANYRES8, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRES16, @ANYRESOCT=r0, @ANYRESHEX, @ANYRESDEC=r0], 0x1, 0x3fa, &(0x7f0000000480)) 22.721922855s ago: executing program 0 (id=199): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5603, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x11, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x7, 0x0, &(0x7f00000004c0)="3f6c00c2231bc4", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="25003300d0000000080211000001080211000000505050505050000003"], 0x44}}, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) accept4$unix(r6, &(0x7f0000000100), &(0x7f0000000000)=0x6e, 0x80000) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r8 = epoll_create1(0x0) statfs(&(0x7f0000000700)='./file0\x00', &(0x7f0000000600)=""/240) epoll_wait(r8, &(0x7f0000000240)=[{}], 0x2c, 0x821) ppoll(&(0x7f0000000080)=[{r8, 0x8201}], 0x1, 0x0, 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f00000000c0)={0x10000001}) read(r7, &(0x7f0000000580)=""/119, 0x77) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=r11, @ANYBLOB="00000000000000004c001280110001006272696467655f736c617665000000"], 0x98}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x48) socket$netlink(0x10, 0x3, 0x2) 14.754589477s ago: executing program 4 (id=217): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) syslog(0xe63a7007, &(0x7f0000000340)=""/238, 0xee) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0, 0x0, 0xffffffffffffffff}, 0x18) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) sendto$packet(0xffffffffffffffff, &(0x7f00000014c0)="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", 0xcf6, 0x4000004, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7ffd}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) 11.976413145s ago: executing program 4 (id=223): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x110, 0xd}}, @ip_ttl={{0x14, 0x110}}], 0x30}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000040)='smb3\x00', 0x0, &(0x7f00000000c0)='rdma') setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000180)="e1bf31a2d0c7b68c64d954c284d47817fcd4cb5d26e752a8e4b1c09f75ad0925f7c6d8157baa86f2566d18017009790fde2b8b0b0c1081598605677e783d2fc85dcfbd2ff74d951acfccc0a0b41997b8b17629b69d5b8d44d893ad3adb04c421e8d6822c174f61748c12ea4429ded5d52d086f852c9aa23ec671a98d3b8a580407d1c9d016f6d81cc31b5eb681685b56cc421f597e353a7ef329f9bef5f569bd7ad68ccf438a35537488accc26e3cd", 0xaf, 0x2) 11.79648559s ago: executing program 4 (id=224): r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@broadcast, @dev, @void, {@ipv4={0x8fd, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @local}}}}}}, 0x0) 11.79306139s ago: executing program 4 (id=225): syz_mount_image$jfs(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="646973636172642c71756f74612c6572726f72733d72656d6f756e742d726f2c696f636861727365743d6d61637475726b6973682c6572726f72733d72656d6f756e742d726f2c71756f74612c696f636861727365743d69736f383835392d37006572726f72733d72656d6f756e742d726f2c75737271756f74612c6572726f72733d72656d6f756e742d726f2c726573697a653d3078666666666666666666666666666666652c6572726f72733d636f6e74696e75652c7265736967652c646973636172642c61707072616973652c7375626a5f757365723d21952c7375626a5f726f6c653d726573697a652c00"], 0x1, 0x61ae, &(0x7f0000007640)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = syz_mount_image$msdos(&(0x7f00000011c0), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="89"], 0x3, 0x11c0, &(0x7f0000003540)="$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") chdir(&(0x7f00000003c0)='./bus\x00') fcntl$getownex(r0, 0x10, &(0x7f0000000040)) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fsync(r1) 9.123272469s ago: executing program 4 (id=230): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) unshare(0x22020400) syz_clone(0x64021000, 0x0, 0x80000, 0x0, 0x0, 0x0) 8.384474232s ago: executing program 1 (id=232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000140)=@nullb, 0xee01, &(0x7f0000000240)={0x2, 0x60000000000000, 0x0, 0x5}) r1 = creat(0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="dc010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x1, 0x1514, &(0x7f0000001580)="$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") sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)='?', 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0xfffffffffffffc60, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b2a, &(0x7f0000000040)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="0809000000000000000000000000f3f1f75f94d3a849e075b6d35e000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000008850000000c000000b70000000000c10095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000580)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r4, &(0x7f0000000040)) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00') ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'team_slave_0\x00', {0x4}}) 7.294121086s ago: executing program 4 (id=237): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000640)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)="c33152581941d02d8666cfab5dbae839a0a3dc31d281cf12c668b4e45a87d4dd2b60ece836edaed7ca41c398a853a45a0fe56685c6a0e99ad4c73396ea68f3cd70af9648c44aa08d160b55c2a1bff5921d63835a5c86a24627e41f8bca2d730a468196a28d1b67afed4ffa6d54ba21261045eba3e622ea72bc0692d6784d28d37ee7811ec0838f07bd201a61384ea7ee14add5b0bdd1308e9c87275456608049f05dd6a3d9a7f7bed77ba958aa52a8c7faf7a1ec41aa3d13cc20796bdcc55739c291b5c503a1334a15d0ef1f97ab1cbad9110af68c359b401c667f73bb735cc55394c97a8bd0ad9a8316f697fd2c2982b98237beb19b21eb9c3fc8bf741a7f0337af42f4dc32d20387cc5a7c5bfe48575dc60be1577fd70c2b90786b03cc96ab87e5013e46df5446de325d52ec017573f42db4045c7dcc021f2eebb970264ee8a40f3ffe1be636db1f778fb6dbbe7bc1416915040f0b1cb485bf3a94736d4f174df3659162e568b5708562305ab88b370cb318ba36dd28ed3d520025df23d63356d9474f7e848f18a3483c0e3957ee044e16bd3cd6d0e493395445fb150830baceb54b527a1e1a37fa60157313a6924bed3fcd41120f73c894820425ad7513597d6bb8b92faad510ed1927ed509ac6386a2210bfc25e2bc133fcec9b47b749c136bedd43f28b0bc75ebed79507ee7fb81b0e0f27f33bc384fdbec684a3b8313404db3879f3144527b1c08bcc470857a28bf44a91967f3e6cbf4f0236152ff853a3dd83a8ee4c39fed409cd3ab000f707e6148ad18ac6f14ab26e6089b78438b5ccb72f25852d4c2a8d464bbf75e36fa0fac74ab5679216eef0fb17944a679a3ef393c12e46e038a31a546b974e5ba6efba2a25381331f72e1d2569bdb82f95b697f99b4fa7e5b4f22f00eaa879837de519bd5f0ef0671e64dfd7de26772c255eb3e45f8286765dfb9e8e16e7bb0b9a4e1e5210a8d91c65421b1aecdfa087b0d9cc83e15b5c79be60178ff059e0cf9b239f690e9edb1a1c91167ff0a03a796d451feb40d1425266e8e24e5d24eaefa65d6e0c6e9b15231aa84f85122ef687386f15f1b2e8cfeaf99b00a61771d74b802b2ba6c87923302812472a2b68919e421a3340b94e32c9ca543cae6e9ae131ead264add410dd898d5565547d88ad0dc54a9caf8e15a238607560a9065db6e007f1370376e0c1a619e86a5505c0daf5e6a64f3dbc27e83a969eba4b78739393bef805fe7419ae1dec643493c06e64e5072dd5bc686b176877d5617a7756be2da38ae44cfdf8cc74e7d4201aba5bcfc76c22f558bb7af527433edb6e8db9e4f2ee66c7c9e96e8da32be3bbd82289540a22e84183e3728e42d1d5c77d4a47972bbebd8de53d17398467fcb317b4cf7cb703f2fde7b88d236b32c0d9538e29f8287dbc5cdc2817a227e5a03c2749732c1aaa74"}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4,\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r3 = eventfd2(0x0, 0x0) readv(r3, &(0x7f0000002880)=[{&(0x7f0000002840)=""/7, 0x7}], 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r10}) 7.098451532s ago: executing program 1 (id=238): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x3, 0x4421, &(0x7f0000004500)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) symlink(&(0x7f00000049c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102008e}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x361) bpf$MAP_CREATE(0x0, 0x0, 0x52) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) ioctl$EVIOCRMFF(r2, 0x541b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x6, 0x242103) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r5, 0x4004551e, &(0x7f00000001c0)) ioctl$USBDEVFS_CONTROL(r5, 0x80085504, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000040)={0x26, 0x4, 0x9}, 0x10) 7.098000842s ago: executing program 2 (id=239): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_SET_BSS(r0, 0xfffffffffffffffc, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 6.747842883s ago: executing program 2 (id=249): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000180), 0x7f0, 0x240000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRES8=r1, @ANYRES16, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_open_procfs(0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0xfffffffffffffdba) accept4$alg(r6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x24f9, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond0\x00'}) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 4.685881329s ago: executing program 2 (id=242): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x400003, &(0x7f0000000200)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@usrquota}, {@resgid}, {@nogrpid}, {@errors_remount}, {@noinit_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@resuid, 0x32}]}, 0x1b, 0x4f0, &(0x7f0000000a40)="$eJzs3V1rW+cdAPD/ObaSOHFmh+0iCywLS4Ydtkh2vCRmF1k2xnYV2JZdL/Ns2RjLlrHkJDZhc9gHGIyxDQaDXvWm0A9QKPkIpRBo70tbWkqbtBe5aKOit7w4kq0Q2Qr27wfH53nOi///R0JHes55OCeAfetURJyOiEeVSuVsRAw1lqeN6Uq1slHf7sH929PVKYlK5drnSURSX1bdZPSp/3mkvksciog//DbiL8nzcUtr6wtThUJ+pVHPlReXc6W19XPzi1Nz+bn80sTE+MXJS5MXJse60s7BiLj864///Y/Xf3P57Z/e/OD6p6N/TRrLI560o9vqTc/UXoum/ohY2YlgPXCl0Z5MrxMBAKAjzd/5P4qIszEUfbVfcwAAAMBeUvnFYHydRFQAAACAPSutjYFN0mxjHMBgpGk2Wx/D+704nBaKpfJPZourSzP1sbLDkUln5wv5scZY4eHIJNX6eK38pH5+U30iIo5FxL+GBmr17HSxMNPrkx8AAACwTxzZ1P//aqje/wcAAAD2mOFeJwAAAADsOP1/AAAA2Pv0/wEAAGBP+93Vq9Wp0nz+9cyNtdWF4o1zM/nSQnZxdTo7XVxZzs4Vi3O1e/Ytbvf/CsXi8s9iafVWrpwvlXOltfXri8XVpfL1+WcegQ0AAADsomM/vPt+EhEbPx+oTVUHep0UsCv6X2Tjj3YuD2D39fU6AaBnXuj7H9hTMr1OAOi5JCL+v8X6toN33tmZfAAAgO4b+X7r6//JtucGNtJdShHYIc7/wf7l+j/sX67/w/6Vib7ovCM/sKO5AL2RbLP+5a//VyovlBAAANB1g7UpSbMRtfMAg5Gm2WzE0dpjATLJ7HwhPxYR34mI94YyB6v18dqeybZ9BgAAAAAAAAAAAAAAAAAAAAAAAACgrlJJogIAAADsaRHpJ0nj+V8jQ2cGN58fOJA8HKrNI+Lm/67959ZUubwyXl3+xePl5f82lp/vxRkMAAAAYLNmP73ZjwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbnpw//Z0c9rNuJ/9MiKGW8Xvj0O1+aHIRMThL5Pof2q/JCL6uhB/405E/OpPLeIn1bRiuJFFq/gD3Yp/vFX7t46fRsSRLsSH/exu9fhzpdXnL41Ttfnmz9/Bx/v2dyF+++Nf+vj419fm+HO0wxgn7r2Zaxv/TsSJ/tbHn2b8pE380x3G//Mf19fbrau8FjHS8vsneSZWrry4nCutrZ+bX5yay8/llyYmxi9OXpq8MDmWm50v5Bt/W8b45w/eerRV+w+3iT+8TfvPdNj+b+7duv/dejHTKv7o6dbv//E28dPGd9+PG+Xq+pFmeaNeftrJN949uVX7Z9q0f7v3f7TD9p/9/d8/7HBTAGAXlNbWF6YKhfzKvi681KtR/VnU2cZpI8yr0GSF/Erpb69GGq9kofmZeNiT4xIAANB9z/eBAQAAAAAAAAAAAAAAAAAAgN3WnXuGNe+JvfXd9Zo26rPn7oUMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBL3wYAAP//JhHPnw==") mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket(0x10, 0x80002, 0x0) socket$pppoe(0x18, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004010, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x9}, 0x1, r5}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x4040, &(0x7f00000023c0)=ANY=[], 0x1, 0x6eb, &(0x7f0000000900)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev, 0x1, r2}) 4.488606785s ago: executing program 3 (id=244): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5603, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x11, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x7, 0x0, &(0x7f00000004c0)="3f6c00c2231bc4", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="25003300d0000000080211000001080211000000505050505050000003"], 0x44}}, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) accept4$unix(r6, &(0x7f0000000100), &(0x7f0000000000)=0x6e, 0x80000) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r8 = epoll_create1(0x0) epoll_wait(r8, &(0x7f0000000240)=[{}], 0x2c, 0x821) ppoll(&(0x7f0000000080)=[{r8, 0x8201}], 0x1, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) read(r7, &(0x7f0000000580)=""/119, 0x77) getegid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=r10, @ANYBLOB="00000000000000004c001280110001006272696467655f736c617665000000"], 0x98}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x48) socket$netlink(0x10, 0x3, 0x2) 4.248181716s ago: executing program 3 (id=245): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x400003, &(0x7f0000000200)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@usrquota}, {@resgid}, {@nogrpid}, {@errors_remount}, {@noinit_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@resuid, 0x32}]}, 0x1b, 0x4f0, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket(0x10, 0x80002, 0x0) socket$pppoe(0x18, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004010, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x9}, 0x1, r5}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x4040, &(0x7f00000023c0)=ANY=[], 0x1, 0x6eb, &(0x7f0000000900)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev, 0x1, r2}) (fail_nth: 1) 3.207325555s ago: executing program 2 (id=246): mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000000), 0x48) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x20000014) 3.143809431s ago: executing program 1 (id=248): r0 = socket$netlink(0x10, 0x3, 0x9) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, 0x0) ioctl$TIOCGPGRP(r6, 0x5437, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000780)='tasks\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)=0x7ffffffd, 0x12) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20040010) 2.972640355s ago: executing program 3 (id=250): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) fsetxattr(r1, &(0x7f0000000140)=@known='trusted.overlay.redirect\x00', &(0x7f0000000300)='@/\'&\\,\x00', 0x7, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) 1.430694297s ago: executing program 3 (id=251): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.138278313s ago: executing program 1 (id=252): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xfffffffffffffffe}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c9201ef8001a00050017a6160008000002cf000f00022983d6e91c716454001a4a08"], 0x23) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x169802, 0x0) write$proc_mixer(0xffffffffffffffff, 0x0, 0xb8) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r5, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stack\x00') pread64(r6, &(0x7f00000001c0)=""/204, 0xcc, 0x0) ioctl$BLKRRPART(r5, 0x125f, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 1.004680014s ago: executing program 3 (id=253): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6(0xa, 0x3, 0x6) sendmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000300)=[{&(0x7f00000004c0)="4a4bfa1f486b9621d958e6006f5032c880a70431", 0x14}], 0x1, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x218}}], 0x1, 0x0) 904.426363ms ago: executing program 1 (id=254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file1/file4/file7\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x80}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ptrace$getenv(0x4201, r0, 0x7cc1, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) creat(0x0, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0xc000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0xa702) ioctl$USBDEVFS_CONTROL(r5, 0x4004550d, 0x0) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000340)={0x2000}, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) 835.417328ms ago: executing program 2 (id=255): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000200)={'syz0\x00', {0x6, 0x0, 0x0, 0x5e6}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x24b2, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x2, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0xd1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x3], [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffc], [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x400000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000700), 0x86, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 92.593002ms ago: executing program 3 (id=256): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10002) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x1318, 0x1158, 0x0, 0x148, 0x1158, 0x148, 0x1280, 0x240, 0x240, 0x1280, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'bridge0\x00'}, 0x0, 0x10f8, 0x1158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup/syz0\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1378) 92.193682ms ago: executing program 2 (id=257): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x10, 0x0, 0x0, 0xb, 0x0, 0x0, 0x25dfdbff, [@sadb_address={0x3, 0x0, 0x0, 0x20}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xdb}, @sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x1, 0x8}]}, 0x58}, 0x1, 0x7}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40305839, &(0x7f0000000240)) 0s ago: executing program 1 (id=258): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={{{}, {}, @device_b}, @addba_resp}}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): 295 subj=unconfined pid=3706 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399aadaff9 code=0x7ffc0000 [ 55.450221][ T3714] netlink: 44 bytes leftover after parsing attributes in process `syz.0.34'. [ 55.484469][ T26] audit: type=1326 audit(1728866100.563:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3706 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399aadaff9 code=0x7ffc0000 [ 55.507376][ T3714] netlink: 52 bytes leftover after parsing attributes in process `syz.0.34'. [ 55.525887][ T3705] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 55.528528][ T26] audit: type=1326 audit(1728866100.573:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3706 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f399aadaff9 code=0x7ffc0000 [ 55.767786][ T3723] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 55.767786][ T3723] SȘȞZ6' [ 56.352424][ T26] audit: type=1326 audit(1728866100.733:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3706 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399aadaff9 code=0x7ffc0000 [ 56.398718][ T3731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'. [ 56.883397][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 56.892788][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 56.916117][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 56.925002][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 56.933892][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 56.942781][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 56.951674][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 56.960562][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 56.969450][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 56.978340][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 57.086196][ T3613] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 57.306987][ T3613] usb 3-1: device descriptor read/64, error -71 [ 57.383377][ T3571] syz-executor (3571) used greatest stack depth: 19448 bytes left [ 57.469109][ T1135] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.609098][ T1135] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.619574][ T3613] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 57.701605][ T1135] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.833244][ T1135] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.846167][ T3613] usb 3-1: device descriptor read/64, error -71 [ 57.977330][ T3613] usb usb3-port1: attempt power cycle [ 58.002632][ T3743] loop0: detected capacity change from 0 to 32768 [ 58.166044][ T3743] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 58.183042][ T3743] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 58.406234][ T3613] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 58.411704][ T3572] ocfs2: Unmounting device (7,0) on (node local) [ 58.498617][ T3613] usb 3-1: device descriptor read/8, error -71 [ 58.659813][ T3568] ocfs2: Unmounting device (7,4) on (node local) [ 58.776441][ T3613] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 58.825148][ T3747] chnl_net:caif_netlink_parms(): no params data found [ 58.831245][ T3766] loop0: detected capacity change from 0 to 512 [ 58.886362][ T3613] usb 3-1: device descriptor read/8, error -71 [ 58.893510][ T3766] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.33: Invalid inode bitmap blk 4 in block_group 0 [ 58.928578][ T3766] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,lazytime,,errors=continue. Quota mode: none. [ 59.006433][ T3613] usb usb3-port1: unable to enumerate USB device [ 59.068741][ T3779] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 59.068741][ T3779] SȘȞZ6' [ 59.083019][ T3747] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.091972][ T3747] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.101007][ T3747] device bridge_slave_0 entered promiscuous mode [ 59.109611][ T3747] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.116859][ T3747] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.125142][ T3747] device bridge_slave_1 entered promiscuous mode [ 59.188310][ T3747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.225217][ T3747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.287900][ T3747] team0: Port device team_slave_0 added [ 59.295614][ T3747] team0: Port device team_slave_1 added [ 59.316190][ T3615] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 59.436852][ T3613] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 59.933476][ T3747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.952028][ T3747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.982289][ T3747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.106036][ T3799] netlink: 44 bytes leftover after parsing attributes in process `syz.2.38'. [ 60.115307][ T3799] netlink: 52 bytes leftover after parsing attributes in process `syz.2.38'. [ 60.126008][ T3613] usb 1-1: device descriptor read/64, error -71 [ 60.140462][ T3747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.153516][ T3747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.179455][ C1] vkms_vblank_simulate: vblank timer overrun [ 60.186137][ T3747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.713071][ T3747] device hsr_slave_0 entered promiscuous mode [ 60.773337][ T3747] device hsr_slave_1 entered promiscuous mode [ 60.883621][ T3747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.904902][ T3747] Cannot create hsr debugfs directory [ 60.920446][ T3649] Bluetooth: hci3: command 0x0409 tx timeout [ 60.976401][ T3615] usb 2-1: config index 0 descriptor too short (expected 65131, got 72) [ 61.009549][ T3810] loop2: detected capacity change from 0 to 2048 [ 61.076569][ T3613] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 61.142796][ T3810] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 61.176494][ T3615] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 61.186570][ T1135] device hsr_slave_0 left promiscuous mode [ 61.197386][ T1135] device hsr_slave_1 left promiscuous mode [ 61.202337][ T3615] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.220018][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.234105][ T3615] usb 2-1: Product: syz [ 61.238968][ T3615] usb 2-1: Manufacturer: syz [ 61.243707][ T3615] usb 2-1: SerialNumber: syz [ 61.255666][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.264036][ T3819] loop4: detected capacity change from 0 to 2048 [ 61.265149][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.278754][ T3613] usb 1-1: device descriptor read/64, error -71 [ 61.299018][ T3615] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 61.345485][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.362094][ T3824] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 61.378901][ T1135] device bridge_slave_1 left promiscuous mode [ 61.394476][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.406816][ T3613] usb usb1-port1: attempt power cycle [ 61.409089][ T3815] NILFS error (device loop4): nilfs_check_page: size of directory #2 is not a multiple of chunk size [ 61.440589][ T1135] device bridge_slave_0 left promiscuous mode [ 61.445083][ T3815] Remounting filesystem read-only [ 61.447364][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.461210][ T3815] NILFS error (device loop4): nilfs_check_page: size of directory #2 is not a multiple of chunk size [ 61.487463][ T1135] device veth1_macvtap left promiscuous mode [ 61.494579][ T1135] device veth0_macvtap left promiscuous mode [ 61.501484][ T1135] device veth1_vlan left promiscuous mode [ 61.510207][ T1135] device veth0_vlan left promiscuous mode [ 61.611549][ T3568] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 61.645181][ T3568] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 61.657831][ T3568] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 61.665348][ T3568] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 61.674236][ T3568] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 61.682760][ T3568] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 61.690118][ T3568] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 61.698490][ T3568] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 61.707693][ T3568] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 61.716653][ T3568] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 61.883756][ T1135] team0 (unregistering): Port device team_slave_1 removed [ 61.908551][ T1135] team0 (unregistering): Port device team_slave_0 removed [ 61.924432][ T3649] usb 2-1: USB disconnect, device number 3 [ 61.946302][ T3615] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 61.963040][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.969492][ T3839] loop1: detected capacity change from 0 to 512 [ 61.987590][ T3649] usb 2-1: ath9k_htc: USB layer deinitialized [ 61.993952][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.052615][ T1135] bond0 (unregistering): Released all slaves [ 62.101543][ T3839] EXT4-fs (loop1): 1 truncate cleaned up [ 62.107657][ T3616] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.116715][ T3839] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 62.265321][ T3569] EXT4-fs warning (device loop1): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 62.386447][ T3616] usb 5-1: Using ep0 maxpacket: 16 [ 62.454494][ T3855] loop2: detected capacity change from 0 to 1024 [ 62.528247][ T3616] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.581772][ T3855] process 'syz.2.47' launched './file1' with NULL argv: empty string added [ 62.657367][ T3745] hfsplus: b-tree write err: -5, ino 4 [ 62.749031][ T3616] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 62.771932][ T3616] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.786573][ T3616] usb 5-1: Product: syz [ 62.790857][ T3616] usb 5-1: Manufacturer: syz [ 62.795448][ T3616] usb 5-1: SerialNumber: syz [ 62.815091][ T3616] usb 5-1: config 0 descriptor?? [ 62.946859][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 63.091465][ T3616] usb 5-1: Not enough endpoints found in device, aborting! [ 63.276175][ T3747] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.340679][ T3747] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.434378][ T3747] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.605809][ T3747] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.943328][ T3616] usb 5-1: USB disconnect, device number 2 [ 64.011547][ T3747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.205059][ T3747] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.256860][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.285505][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.322641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.359917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.389484][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.396640][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.404637][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.419751][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.451631][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.493723][ T3745] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.500888][ T3745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.607987][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.647644][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.700186][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.756614][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.829230][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.883084][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.490348][ T1077] Bluetooth: hci3: command 0x040f tx timeout [ 65.696504][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.769184][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.777787][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.795615][ T3747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.807531][ T3909] loop2: detected capacity change from 0 to 8 [ 65.817500][ T3877] loop0: detected capacity change from 0 to 40427 [ 65.833572][ T2669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.850192][ T2669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.858830][ T3911] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 65.858830][ T3911] SȘȞZ6' [ 65.973751][ T3877] F2FS-fs (loop0): invalid crc value [ 66.079849][ T3877] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-4) [ 66.171739][ T3613] Bluetooth: hci0: command 0x0409 tx timeout [ 66.373895][ T3909] overlayfs: './file2' not a directory [ 66.538225][ T3879] chnl_net:caif_netlink_parms(): no params data found [ 66.875146][ T3747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.930997][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.944935][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.953519][ T3947] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.961895][ T3947] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.993389][ T3935] ieee802154 phy0 wpan0: encryption failed: -22 [ 67.067234][ T3879] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.084103][ T3879] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.102576][ T3879] device bridge_slave_0 entered promiscuous mode [ 67.137441][ T3879] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.144493][ T3879] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.197126][ T3879] device bridge_slave_1 entered promiscuous mode [ 67.257666][ T2669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.277942][ T1077] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 67.347161][ T2669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.392204][ T3879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.443768][ T3879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.668854][ T2669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.763078][ T2669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.998162][ T2669] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.148848][ T2669] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.216315][ T3615] Bluetooth: hci3: command 0x0419 tx timeout [ 68.217224][ T3747] device veth0_vlan entered promiscuous mode [ 68.323942][ T3747] device veth1_vlan entered promiscuous mode [ 68.348765][ T3879] team0: Port device team_slave_0 added [ 68.366265][ T1077] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 68.385636][ T1077] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.404675][ T3879] team0: Port device team_slave_1 added [ 68.407359][ T1077] usb 1-1: config 0 descriptor?? [ 68.415653][ T3615] Bluetooth: hci0: command 0x041b tx timeout [ 68.416144][ T3648] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.504551][ T3982] loop2: detected capacity change from 0 to 128 [ 68.525224][ T3879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.534532][ T3879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.560441][ C0] vkms_vblank_simulate: vblank timer overrun [ 68.601170][ T3879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.613183][ T3982] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.626771][ T3982] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 68.658083][ C0] vkms_vblank_simulate: vblank timer overrun [ 68.676149][ T3648] usb 5-1: Using ep0 maxpacket: 16 [ 68.697507][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.726675][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.750777][ T3747] device veth0_macvtap entered promiscuous mode [ 68.769143][ T3879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.787516][ T3879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.796261][ T3648] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.876455][ T3991] fscrypt (loop2, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 68.911050][ T3879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.972029][ T3949] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.979163][ T3949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.988324][ T3949] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.995403][ T3949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.046596][ T3648] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 69.057140][ T3949] device bridge0 entered promiscuous mode [ 69.075309][ T3747] device veth1_macvtap entered promiscuous mode [ 69.094127][ T3648] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.094320][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.112556][ T3648] usb 5-1: Product: syz [ 69.123449][ T3648] usb 5-1: Manufacturer: syz [ 69.126874][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.132782][ T3648] usb 5-1: SerialNumber: syz [ 69.140604][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.160481][ T1077] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 69.174635][ T1077] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 69.182911][ T3648] usb 5-1: config 0 descriptor?? [ 69.232650][ T1077] [drm:udl_init] *ERROR* Selecting channel failed [ 69.264460][ T4000] nftables ruleset with unbound chain [ 69.268130][ T3747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.307965][ T1077] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 69.315431][ T1077] [drm] Initialized udl on minor 2 [ 69.325843][ T3747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.335726][ T3747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.362176][ T3747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.372241][ T1077] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 69.381589][ T3747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.392934][ T1077] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 69.399767][ T3747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.415447][ T3747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.417358][ T1077] usb 1-1: USB disconnect, device number 5 [ 69.433121][ T3747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.456715][ T3648] usb 5-1: Not enough endpoints found in device, aborting! [ 69.468476][ T3747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.540448][ T3879] device hsr_slave_0 entered promiscuous mode [ 69.577114][ T3879] device hsr_slave_1 entered promiscuous mode [ 69.585373][ T3879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.598093][ T3879] Cannot create hsr debugfs directory [ 69.603847][ T2669] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.620051][ T2669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.633296][ T3747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.648900][ T3747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.697416][ T3747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.731156][ T4014] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 69.903085][ T3747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.928786][ T1074] usb 5-1: USB disconnect, device number 3 [ 70.146819][ T3747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.448330][ T3747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.472228][ T3615] Bluetooth: hci0: command 0x040f tx timeout [ 70.498081][ T4020] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 70.498081][ T4020] SȘȞZ6' [ 70.520229][ T3747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.693959][ T3747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.718357][ T3747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.078102][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.084453][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.132773][ T4035] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 72.170179][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.188767][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.252528][ T3747] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.278425][ T4040] loop0: detected capacity change from 0 to 128 [ 72.328831][ T3747] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.355801][ T4044] loop2: detected capacity change from 0 to 512 [ 72.368064][ T3747] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.384328][ T4046] FAULT_INJECTION: forcing a failure. [ 72.384328][ T4046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.404169][ T3747] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.416290][ T4046] CPU: 1 PID: 4046 Comm: syz.4.75 Not tainted 5.15.167-syzkaller #0 [ 72.424273][ T4046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 72.434320][ T4046] Call Trace: [ 72.437594][ T4046] [ 72.440516][ T4046] dump_stack_lvl+0x1e3/0x2d0 [ 72.445196][ T4046] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 72.450830][ T4046] ? panic+0x860/0x860 [ 72.454909][ T4046] ? snprintf+0xd6/0x120 [ 72.459158][ T4046] should_fail+0x38a/0x4c0 [ 72.463580][ T4046] _copy_to_user+0x2d/0x130 [ 72.468084][ T4046] simple_read_from_buffer+0xc6/0x150 [ 72.473464][ T4046] proc_fail_nth_read+0x1a3/0x210 [ 72.478488][ T4046] ? proc_fault_inject_write+0x390/0x390 [ 72.484125][ T4046] ? fsnotify_perm+0x442/0x590 [ 72.488890][ T4046] ? proc_fault_inject_write+0x390/0x390 [ 72.494526][ T4046] vfs_read+0x2fc/0xe10 [ 72.498694][ T4046] ? kernel_read+0x1f0/0x1f0 [ 72.503286][ T4046] ? __fget_files+0x413/0x480 [ 72.507977][ T4046] ? mutex_lock_nested+0x17/0x20 [ 72.512913][ T4046] ? __fdget_pos+0x2cb/0x380 [ 72.517501][ T4046] ? ksys_read+0x77/0x2c0 [ 72.521827][ T4046] ksys_read+0x1a2/0x2c0 [ 72.526065][ T4046] ? print_irqtrace_events+0x210/0x210 [ 72.531526][ T4046] ? vfs_write+0xe50/0xe50 [ 72.535943][ T4046] ? syscall_enter_from_user_mode+0x2e/0x240 [ 72.541926][ T4046] ? lockdep_hardirqs_on+0x94/0x130 [ 72.547257][ T4046] ? syscall_enter_from_user_mode+0x2e/0x240 [ 72.553247][ T4046] do_syscall_64+0x3b/0xb0 [ 72.557661][ T4046] ? clear_bhb_loop+0x15/0x70 [ 72.562332][ T4046] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.568220][ T4046] RIP: 0033:0x7fc5c1d59a3c [ 72.572632][ T4046] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 72.584262][ T3616] Bluetooth: hci0: command 0x0419 tx timeout [ 72.592223][ T4046] RSP: 002b:00007fc5c01d3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 72.592268][ T4046] RAX: ffffffffffffffda RBX: 00007fc5c1f12f80 RCX: 00007fc5c1d59a3c [ 72.614564][ T4046] RDX: 000000000000000f RSI: 00007fc5c01d30a0 RDI: 0000000000000003 [ 72.622532][ T4046] RBP: 00007fc5c01d3090 R08: 0000000000000000 R09: 0000000000000000 [ 72.630498][ T4046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.638464][ T4046] R13: 0000000000000001 R14: 00007fc5c1f12f80 R15: 00007ffdcba88558 [ 72.646447][ T4046] [ 72.649494][ C1] vkms_vblank_simulate: vblank timer overrun [ 72.696195][ T4044] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 72.814196][ T4044] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.76: corrupted inode contents [ 72.838414][ T4044] EXT4-fs error (device loop2): ext4_dirty_inode:6007: inode #3: comm syz.2.76: mark_inode_dirty error [ 72.875773][ T4044] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.76: corrupted inode contents [ 72.911948][ T4044] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.76: mark_inode_dirty error [ 72.933048][ T4044] __quota_error: 18 callbacks suppressed [ 72.933062][ T4044] Quota error (device loop2): write_blk: dquota write failed [ 72.981788][ T4044] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 73.025768][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.068697][ T4040] EXT4-fs (loop0): Test dummy encryption mode enabled [ 73.077593][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.086328][ T4044] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.76: Failed to acquire dquot type 0 [ 73.119700][ T4040] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,test_dummy_encryption,,errors=continue. Quota mode: none. [ 73.129669][ T4044] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.76: corrupted inode contents [ 73.140547][ T4040] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038 (0x7fffffff) [ 73.194721][ T4044] EXT4-fs error (device loop2): ext4_dirty_inode:6007: inode #16: comm syz.2.76: mark_inode_dirty error [ 73.213292][ T4044] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.76: corrupted inode contents [ 73.248626][ T3879] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.266334][ T4044] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.76: mark_inode_dirty error [ 73.290155][ T3966] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.298526][ T4044] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.76: corrupted inode contents [ 73.312644][ T3966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.317844][ T4044] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 73.330086][ T3966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.338501][ T4044] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.76: corrupted inode contents [ 73.354050][ T4044] EXT4-fs error (device loop2): ext4_truncate:4272: inode #16: comm syz.2.76: mark_inode_dirty error [ 73.370424][ T3879] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.383704][ T4044] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 73.398403][ T4044] EXT4-fs (loop2): 1 truncate cleaned up [ 73.398568][ T2669] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.404147][ T4044] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.422999][ T4044] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038 (0x7fffffff) [ 73.505126][ T3879] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.573044][ T4079] EXT4-fs error (device loop2): ext4_find_dest_de:2113: inode #2: block 3: comm syz.2.76: bad entry in directory: rec_len is smaller than minimal - offset=44, inode=12, rec_len=8, size=4096 fake=0 [ 73.592291][ C1] vkms_vblank_simulate: vblank timer overrun [ 73.718475][ T3879] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.787552][ T4084] binder: 4076:4084 ioctl 4018620d 0 returned -22 [ 73.926259][ T1074] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 74.206302][ T1074] usb 5-1: Using ep0 maxpacket: 16 [ 74.307970][ T4088] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 74.307970][ T4088] SȘȞZ6' [ 74.332440][ T1074] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.539032][ T4090] loop3: detected capacity change from 0 to 128 [ 75.236504][ T1074] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 75.245691][ T1074] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.282784][ T1074] usb 5-1: Product: syz [ 75.298180][ T1074] usb 5-1: Manufacturer: syz [ 75.308297][ T1074] usb 5-1: SerialNumber: syz [ 75.342769][ T1074] usb 5-1: config 0 descriptor?? [ 75.360698][ T3879] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.378958][ T3879] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.397349][ T3879] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.445384][ T4090] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.458954][ T3879] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.467556][ T4090] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 75.498764][ C1] vkms_vblank_simulate: vblank timer overrun [ 75.522216][ T4102] vxcan1: tx address claim with different name [ 75.636314][ T1074] usb 5-1: Cannot retrieve CPort count: -71 [ 75.642417][ T1074] usb 5-1: Cannot retrieve CPort count: -71 [ 75.661463][ T1074] es2_ap_driver: probe of 5-1:0.0 failed with error -71 [ 75.672693][ T4105] binder: 4101:4105 ioctl 80404509 20000300 returned -22 [ 75.680131][ T1074] usb 5-1: USB disconnect, device number 4 [ 75.705563][ T4103] device dummy0 entered promiscuous mode [ 75.753780][ T4107] FAULT_INJECTION: forcing a failure. [ 75.753780][ T4107] name failslab, interval 1, probability 0, space 0, times 0 [ 75.775122][ T4107] CPU: 1 PID: 4107 Comm: syz.2.86 Not tainted 5.15.167-syzkaller #0 [ 75.783111][ T4107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 75.793162][ T4107] Call Trace: [ 75.796447][ T4107] [ 75.799379][ T4107] dump_stack_lvl+0x1e3/0x2d0 [ 75.804063][ T4107] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 75.808073][ T3879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.809696][ T4107] ? panic+0x860/0x860 [ 75.820321][ T4107] should_fail+0x38a/0x4c0 [ 75.823644][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.824741][ T4107] should_failslab+0x5/0x20 [ 75.836390][ T4107] slab_pre_alloc_hook+0x53/0xc0 [ 75.841331][ T4107] ? __alloc_file+0x26/0x240 [ 75.841861][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.845919][ T4107] kmem_cache_alloc+0x3f/0x280 [ 75.845947][ T4107] ? alloc_file_pseudo+0x248/0x2f0 [ 75.845970][ T4107] __alloc_file+0x26/0x240 [ 75.856538][ T3879] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.857870][ T4107] alloc_empty_file+0x92/0x180 [ 75.867255][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.867346][ T4107] alloc_file+0x5b/0x4f0 [ 75.874927][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.878652][ T4107] alloc_file_pseudo+0x259/0x2f0 [ 75.878674][ T4107] ? prandom_u32+0x218/0x260 [ 75.878695][ T4107] ? alloc_empty_file_noaccount+0x80/0x80 [ 75.878715][ T4107] ? shmem_get_inode+0x8e3/0xad0 [ 75.878740][ T4107] __shmem_file_setup+0x1ca/0x290 [ 75.878757][ T4107] ? shmem_file_setup+0x13/0x30 [ 75.878777][ T4107] __se_sys_memfd_create+0x2bb/0x590 [ 75.878794][ T4107] ? vtime_user_exit+0x2d1/0x400 [ 75.878813][ T4107] ? __x64_sys_memfd_create+0x60/0x60 [ 75.878831][ T4107] ? syscall_enter_from_user_mode+0x2e/0x240 [ 75.878850][ T4107] ? lockdep_hardirqs_on+0x94/0x130 [ 75.878870][ T4107] ? syscall_enter_from_user_mode+0x2e/0x240 [ 75.878891][ T4107] do_syscall_64+0x3b/0xb0 [ 75.878906][ T4107] ? clear_bhb_loop+0x15/0x70 [ 75.878923][ T4107] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.878947][ T4107] RIP: 0033:0x7f0c0e3aeff9 [ 75.878964][ T4107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.878978][ T4107] RSP: 002b:00007f0c0c826e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 75.878998][ T4107] RAX: ffffffffffffffda RBX: 00000000000055c3 RCX: 00007f0c0e3aeff9 [ 75.879010][ T4107] RDX: 00007f0c0c826ef0 RSI: 0000000000000000 RDI: 00007f0c0e421b02 [ 75.879022][ T4107] RBP: 000000002000ac40 R08: 00007f0c0c826bb7 R09: 00007f0c0c826e40 [ 75.896945][ T4092] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.899215][ T4107] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000200 [ 75.904145][ T4092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.908685][ T4107] R13: 00007f0c0c826ef0 R14: 00007f0c0c826eb0 R15: 0000000020000340 [ 75.908712][ T4107] [ 75.908797][ C1] vkms_vblank_simulate: vblank timer overrun [ 75.933232][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.015107][ T4109] tmpfs: Cannot retroactively limit size [ 76.045803][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.159194][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.168196][ T4092] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.175280][ T4092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.188862][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.197666][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.209146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.224089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.249333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.258933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.281008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.294013][ T4112] loop2: detected capacity change from 0 to 4096 [ 76.306847][ T23] cfg80211: failed to load regulatory.db [ 76.317136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.346897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.623488][ T3879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.893231][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.457938][ T4130] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 77.457938][ T4130] SȘȞZ6' [ 77.544993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.556280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.374594][ T4124] loop0: detected capacity change from 0 to 8192 [ 78.468207][ T4124] FAT-fs (loop0): Unrecognized mount option "0xffffffffffffffff" or missing value [ 78.554474][ T2109] Bluetooth: hci0: command 0x0401 tx timeout [ 78.692593][ T4146] FAULT_INJECTION: forcing a failure. [ 78.692593][ T4146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.706065][ T4146] CPU: 1 PID: 4146 Comm: syz.3.96 Not tainted 5.15.167-syzkaller #0 [ 78.714041][ T4146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 78.724085][ T4146] Call Trace: [ 78.727356][ T4146] [ 78.730279][ T4146] dump_stack_lvl+0x1e3/0x2d0 [ 78.734955][ T4146] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 78.740580][ T4146] ? panic+0x860/0x860 [ 78.744640][ T4146] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 78.750627][ T4146] should_fail+0x38a/0x4c0 [ 78.755040][ T4146] _copy_from_user+0x2d/0x170 [ 78.759716][ T4146] __sys_bpf+0x1d5/0x670 [ 78.763960][ T4146] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 78.769339][ T4146] ? trace_hardirqs_on+0x30/0x80 [ 78.774276][ T4146] ? syscall_enter_from_user_mode+0x37/0x240 [ 78.780251][ T4146] __x64_sys_bpf+0x78/0x90 [ 78.784667][ T4146] do_syscall_64+0x3b/0xb0 [ 78.789077][ T4146] ? clear_bhb_loop+0x15/0x70 [ 78.793747][ T4146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.799636][ T4146] RIP: 0033:0x7f534d1aaff9 [ 78.804047][ T4146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.823642][ T4146] RSP: 002b:00007f534b5e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.832050][ T4146] RAX: ffffffffffffffda RBX: 00007f534d363130 RCX: 00007f534d1aaff9 [ 78.840011][ T4146] RDX: 0000000000000038 RSI: 0000000020000340 RDI: 000000000000001a [ 78.847973][ T4146] RBP: 00007f534b5e1090 R08: 0000000000000000 R09: 0000000000000000 [ 78.855934][ T4146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.863898][ T4146] R13: 0000000000000000 R14: 00007f534d363130 R15: 00007ffd5dc04b88 [ 78.871880][ T4146] [ 78.874949][ C1] vkms_vblank_simulate: vblank timer overrun [ 79.094881][ T3879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.122375][ T3966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.200586][ T3966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.282007][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.322883][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.432453][ T3879] device veth0_vlan entered promiscuous mode [ 79.453804][ T4155] loop3: detected capacity change from 0 to 164 [ 79.541233][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.557887][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.580546][ T3879] device veth1_vlan entered promiscuous mode [ 79.610838][ T4155] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 79.633742][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.643242][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.655171][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.674637][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.692686][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.735702][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.774650][ T3879] device veth0_macvtap entered promiscuous mode [ 79.799469][ T3879] device veth1_macvtap entered promiscuous mode [ 79.807488][ T4165] netlink: 16 bytes leftover after parsing attributes in process `syz.0.102'. [ 79.851245][ T4165] loop0: detected capacity change from 0 to 1024 [ 79.866502][ T3879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.887013][ T3879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.904010][ T3879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.915977][ T3879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.931827][ T3879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.942503][ T3879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.952791][ T3879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.955938][ T4167] loop4: detected capacity change from 0 to 256 [ 79.963644][ T3879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.980137][ T3879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.994029][ T3879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.005558][ T3879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.013797][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.027097][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.038242][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.047012][ T3649] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.055324][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.063651][ T4165] EXT4-fs (loop0): Ignoring removed orlov option [ 80.070931][ T4165] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 80.129623][ T3879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.163812][ T3879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.187625][ T3879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.199361][ T3879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.202154][ T4165] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 80.209617][ T3879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.253337][ T3879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.264576][ T3879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.275035][ T3879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.284911][ T3879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.295368][ T3649] usb 4-1: Using ep0 maxpacket: 16 [ 80.300607][ T3879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.311864][ T3879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.320785][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.335651][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.392791][ T3879] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.416254][ T3649] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.440500][ T3879] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.460825][ T3879] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.490146][ T3879] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.606408][ T3649] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 80.635149][ T3649] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.645126][ T3649] usb 4-1: Product: syz [ 80.670662][ T3649] usb 4-1: Manufacturer: syz [ 80.676992][ T3572] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /24/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=1030060649, rec_len=30768, size=1024 fake=0 [ 80.704394][ T3649] usb 4-1: SerialNumber: syz [ 80.728196][ T3572] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 33: comm syz-executor: path /24/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 80.762424][ T3572] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /24/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 80.793349][ T3572] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 35: comm syz-executor: path /24/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 80.823872][ T3572] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 36: comm syz-executor: path /24/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 80.854327][ T3572] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 37: comm syz-executor: path /24/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 80.875744][ C1] vkms_vblank_simulate: vblank timer overrun [ 80.924779][ T3649] usb 4-1: config 0 descriptor?? [ 80.930452][ T3572] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /24/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 81.001659][ T4179] binder: 4176:4179 ioctl c0306201 0 returned -14 [ 81.653502][ T3572] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 39: comm syz-executor: path /24/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 81.729758][ T3572] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 40: comm syz-executor: path /24/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 81.768709][ T3572] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 41: comm syz-executor: path /24/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 81.805881][ T3572] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 81.836946][ T3572] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 81.854795][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.882091][ T3967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.884657][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.890577][ T3649] usb 4-1: Cannot retrieve CPort count: -71 [ 81.947408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.130790][ T3572] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 82.169751][ T3967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.304494][ T3572] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 82.351802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.514706][ T3649] usb 4-1: Cannot retrieve CPort count: -71 [ 82.520770][ T3649] es2_ap_driver: probe of 4-1:0.0 failed with error -71 [ 82.604395][ T3572] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 82.619012][ T4189] FAULT_INJECTION: forcing a failure. [ 82.619012][ T4189] name failslab, interval 1, probability 0, space 0, times 0 [ 82.625828][ T3649] usb 4-1: USB disconnect, device number 2 [ 82.666253][ T4189] CPU: 0 PID: 4189 Comm: syz.4.108 Not tainted 5.15.167-syzkaller #0 [ 82.674333][ T4189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 82.679564][ T3572] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 82.684376][ T4189] Call Trace: [ 82.684386][ T4189] [ 82.701895][ T4189] dump_stack_lvl+0x1e3/0x2d0 [ 82.706576][ T4189] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 82.712207][ T4189] ? panic+0x860/0x860 [ 82.716278][ T4189] should_fail+0x38a/0x4c0 [ 82.720700][ T4189] should_failslab+0x5/0x20 [ 82.725199][ T4189] slab_pre_alloc_hook+0x53/0xc0 [ 82.730143][ T4189] kmem_cache_alloc_trace+0x49/0x290 [ 82.732727][ T3572] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 82.735424][ T4189] ? __se_sys_mount+0x156/0x3c0 [ 82.735450][ T4189] __se_sys_mount+0x156/0x3c0 [ 82.756268][ T4189] ? print_irqtrace_events+0x210/0x210 [ 82.758353][ T3572] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 82.761727][ T4189] ? __x64_sys_mount+0xc0/0xc0 [ 82.761750][ T4189] ? syscall_enter_from_user_mode+0x2e/0x240 [ 82.783794][ T4189] ? lockdep_hardirqs_on+0x94/0x130 [ 82.788593][ T3572] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 82.788999][ T4189] ? __x64_sys_mount+0x1c/0xc0 [ 82.805078][ T4189] do_syscall_64+0x3b/0xb0 [ 82.809496][ T4189] ? clear_bhb_loop+0x15/0x70 [ 82.814177][ T4189] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.815277][ T3572] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 82.820067][ T4189] RIP: 0033:0x7fc5c1d5aff9 [ 82.820086][ T4189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.820099][ T4189] RSP: 002b:00007fc5c01d3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 82.820119][ T4189] RAX: ffffffffffffffda RBX: 00007fc5c1f12f80 RCX: 00007fc5c1d5aff9 [ 82.820131][ T4189] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 0000000000000000 [ 82.820143][ T4189] RBP: 00007fc5c01d3090 R08: 0000000020000040 R09: 0000000000000000 [ 82.820154][ T4189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.820164][ T4189] R13: 0000000000000000 R14: 00007fc5c1f12f80 R15: 00007ffdcba88558 [ 82.820191][ T4189] [ 83.198947][ T4203] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 83.198947][ T4203] SȘȞZ6' [ 85.518686][ T4200] netlink: 44 bytes leftover after parsing attributes in process `syz.1.50'. [ 85.648830][ T4200] netlink: 52 bytes leftover after parsing attributes in process `syz.1.50'. [ 85.687892][ T3572] EXT4-fs error: 303 callbacks suppressed [ 85.687913][ T3572] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 33: comm syz-executor: path /24/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 85.741104][ T3572] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /24/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 85.772049][ T3572] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 35: comm syz-executor: path /24/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 85.803216][ T3572] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 36: comm syz-executor: path /24/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 85.897230][ T3572] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 37: comm syz-executor: path /24/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 85.981816][ T4228] binder: 4218:4228 ioctl c0306201 0 returned -14 [ 85.990491][ T4217] mmap: syz.4.116 (4217): VmData 37728256 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 86.209914][ T3572] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /24/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 86.231917][ T3649] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 86.650729][ T3572] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 39: comm syz-executor: path /24/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 86.672817][ T3572] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 40: comm syz-executor: path /24/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 86.694195][ C1] vkms_vblank_simulate: vblank timer overrun [ 86.709410][ T3572] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 41: comm syz-executor: path /24/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 86.733745][ T3572] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 42: comm syz-executor: path /24/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 86.817045][ T3572] EXT4-fs warning: 20 callbacks suppressed [ 86.817058][ T3572] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 86.856566][ T3649] usb 2-1: Using ep0 maxpacket: 16 [ 86.859715][ T4229] Zero length message leads to an empty skb [ 86.878077][ T3572] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 86.976277][ T3649] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.993521][ T3572] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 87.038863][ T3572] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 87.266887][ T3572] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 87.281810][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 87.879561][ T3572] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 87.896224][ T3649] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 87.936323][ T3649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.946499][ T3649] usb 2-1: Product: syz [ 87.950667][ T3649] usb 2-1: Manufacturer: syz [ 87.955450][ T3649] usb 2-1: SerialNumber: syz [ 87.966446][ T3572] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 87.983976][ T3649] usb 2-1: config 0 descriptor?? [ 88.012255][ T3572] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 88.047166][ T3572] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 88.070530][ T3572] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 88.161661][ T4244] loop3: detected capacity change from 0 to 8192 [ 88.190595][ T4246] loop2: detected capacity change from 0 to 164 [ 88.236342][ T3649] usb 2-1: Cannot retrieve CPort count: -71 [ 88.242314][ T3649] usb 2-1: Cannot retrieve CPort count: -71 [ 88.248645][ T4244] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 88.267613][ T4246] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 88.277472][ T4244] REISERFS (device loop3): using ordered data mode [ 88.326401][ T4244] reiserfs: using flush barriers [ 88.424350][ T3649] es2_ap_driver: probe of 2-1:0.0 failed with error -71 [ 88.432341][ T4244] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 88.462869][ T3649] usb 2-1: USB disconnect, device number 4 [ 88.471885][ T4244] REISERFS (device loop3): checking transaction log (loop3) [ 88.489648][ T4244] REISERFS (device loop3): Using r5 hash to sort names [ 88.558162][ T4254] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 88.558162][ T4254] SȘȞZ6' [ 88.573286][ T4253] loop2: detected capacity change from 0 to 256 [ 88.581337][ T4244] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "00000000000000000003" [ 88.722062][ T4244] program syz.3.122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.790652][ T26] audit: type=1326 audit(1728866134.273:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4243 comm="syz.3.122" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f534d1aaff9 code=0x0 [ 90.012840][ T4271] netlink: 44 bytes leftover after parsing attributes in process `syz.4.128'. [ 90.052266][ T4271] netlink: 52 bytes leftover after parsing attributes in process `syz.4.128'. [ 90.173095][ T4273] binder: 4267:4273 ioctl c0306201 0 returned -14 [ 90.413850][ T3966] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.908011][ T3966] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.966037][ T4275] loop2: detected capacity change from 0 to 4096 [ 91.003107][ T3966] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.155200][ T4270] loop1: detected capacity change from 0 to 32768 [ 91.227915][ T3966] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.229007][ T4280] loop3: detected capacity change from 0 to 32768 [ 91.251007][ T4275] capability: warning: `syz.2.132' uses deprecated v2 capabilities in a way that may be insecure [ 91.266503][ T1077] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 91.283732][ T4280] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.135 (4280) [ 91.312976][ T4270] gfs2: fsid=_dev_video#: Trying to join cluster "lock_nolock", "_dev_video#" [ 91.326265][ T4270] gfs2: fsid=_dev_video#: Now mounting FS (format 0)... [ 91.358647][ T4280] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 91.367680][ T4280] BTRFS info (device loop3): doing ref verification [ 91.374340][ T4280] BTRFS info (device loop3): max_inline at 0 [ 91.380429][ T4280] BTRFS info (device loop3): max_inline at 3 [ 91.386456][ T4280] BTRFS info (device loop3): disabling tree log [ 91.393357][ T4280] BTRFS info (device loop3): turning off barriers [ 91.394461][ T4270] gfs2: fsid=_dev_video#.s: fatal: filesystem consistency error [ 91.394461][ T4270] inode = 1 34 [ 91.394461][ T4270] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 91.399815][ T4280] BTRFS info (device loop3): using free space tree [ 91.399849][ T4280] BTRFS info (device loop3): has skinny extents [ 91.480682][ T4270] gfs2: fsid=_dev_video#.s: about to withdraw this file system [ 91.509642][ T4270] gfs2: fsid=_dev_video#.s: Journal recovery skipped for jid 0 until next mount. [ 91.520220][ T4270] gfs2: fsid=_dev_video#.s: Glock dequeues delayed: 0 [ 91.548314][ T4270] gfs2: fsid=_dev_video#.s: File system withdrawn [ 91.556723][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 91.561086][ T4270] CPU: 0 PID: 4270 Comm: syz.1.131 Not tainted 5.15.167-syzkaller #0 [ 91.572239][ T4270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 91.582298][ T4270] Call Trace: [ 91.585577][ T4270] [ 91.588507][ T4270] dump_stack_lvl+0x1e3/0x2d0 [ 91.593192][ T4270] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 91.598829][ T4270] ? panic+0x860/0x860 [ 91.602911][ T4270] ? do_raw_spin_unlock+0x137/0x8b0 [ 91.608132][ T4270] gfs2_withdraw+0xe9e/0x14e0 [ 91.612831][ T4270] ? gfs2_lm+0x230/0x230 [ 91.617080][ T4270] ? gfs2_journal_wipe+0xcf0/0xcf0 [ 91.622203][ T4270] ? gfs2_consist_inode_i+0xc0/0xe0 [ 91.627411][ T4270] gfs2_inode_refresh+0xbd6/0x1070 [ 91.632539][ T4270] ? gfs2_inode_metasync+0xf0/0xf0 [ 91.637632][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 91.637654][ T4270] ? __lock_acquire+0x1ff0/0x1ff0 [ 91.649405][ T4270] inode_go_lock+0x12c/0x470 [ 91.654012][ T4270] do_promote+0x74b/0xb10 [ 91.658357][ T4270] ? demote_incompat_holders+0x471/0x550 [ 91.664000][ T4270] finish_xmote+0x50d/0xb60 [ 91.668516][ T4270] do_xmote+0x775/0x10b0 [ 91.672773][ T4270] gfs2_glock_nq+0xc32/0x15e0 [ 91.677472][ T4270] check_journal_clean+0x11b/0x350 [ 91.682592][ T4270] ? gfs2_assert_i+0x20/0x20 [ 91.687187][ T4270] ? do_raw_spin_lock+0x14a/0x370 [ 91.692229][ T4270] ? check_journal_clean+0x113/0x350 [ 91.697513][ T4270] ? gfs2_lookup_by_inum+0xe0/0xe0 [ 91.702611][ T4270] ? _raw_spin_unlock+0x24/0x40 [ 91.707447][ T4270] ? gfs2_jdesc_find+0xa7/0xc0 [ 91.712188][ T4270] init_journal+0x1830/0x23c0 [ 91.716851][ T4270] ? end_bio_io_page+0xf0/0xf0 [ 91.721593][ T4270] ? init_sb+0xc50/0x1340 [ 91.725896][ T4270] ? snprintf+0xd6/0x120 [ 91.730116][ T4270] ? init_journal+0x7d2/0x23c0 [ 91.734854][ T4270] ? vscnprintf+0x80/0x80 [ 91.739173][ T4270] init_inodes+0xdc/0x310 [ 91.743513][ T4270] gfs2_fill_super+0x1c2c/0x2750 [ 91.748440][ T4270] ? gfs2_reconfigure+0xcf0/0xcf0 [ 91.753442][ T4270] ? ptr_to_hashval+0x60/0x60 [ 91.758102][ T4270] ? gfs2_glock_nq_num+0x123/0x270 [ 91.763196][ T4270] ? set_blocksize+0x1ec/0x370 [ 91.767947][ T4270] get_tree_bdev+0x3fe/0x620 [ 91.772528][ T4270] ? gfs2_reconfigure+0xcf0/0xcf0 [ 91.777530][ T4270] gfs2_get_tree+0x50/0x210 [ 91.782010][ T4270] ? bpf_lsm_capable+0x5/0x10 [ 91.786673][ T4270] vfs_get_tree+0x88/0x270 [ 91.791085][ T4270] do_new_mount+0x2ba/0xb40 [ 91.795566][ T4270] ? do_move_mount_old+0x160/0x160 [ 91.796224][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 91.800658][ T4270] ? user_path_at_empty+0x12b/0x180 [ 91.810921][ T4270] __se_sys_mount+0x2d5/0x3c0 [ 91.815582][ T4270] ? __x64_sys_mount+0xc0/0xc0 [ 91.820327][ T4270] ? syscall_enter_from_user_mode+0x2e/0x240 [ 91.826313][ T4270] ? lockdep_hardirqs_on+0x94/0x130 [ 91.831509][ T4270] ? __x64_sys_mount+0x1c/0xc0 [ 91.836249][ T4270] do_syscall_64+0x3b/0xb0 [ 91.840645][ T4270] ? clear_bhb_loop+0x15/0x70 [ 91.845302][ T4270] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.851173][ T4270] RIP: 0033:0x7f1141b8479a [ 91.855569][ T4270] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.875146][ T4270] RSP: 002b:00007f113fffae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 91.883536][ T4270] RAX: ffffffffffffffda RBX: 00007f113fffaef0 RCX: 00007f1141b8479a [ 91.891482][ T4270] RDX: 000000002001f680 RSI: 000000002001f6c0 RDI: 00007f113fffaeb0 [ 91.899438][ T4270] RBP: 000000002001f680 R08: 00007f113fffaef0 R09: 0000000000000000 [ 91.907391][ T4270] R10: 0000000000000000 R11: 0000000000000246 R12: 000000002001f6c0 [ 91.915347][ T4270] R13: 00007f113fffaeb0 R14: 000000000001f679 R15: 0000000020000500 [ 91.923301][ T4270] [ 91.926387][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.938944][ T4270] gfs2: fsid=_dev_video#.s: Error -5 locking journal for spectator mount. [ 91.946238][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.964489][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 91.980815][ T23] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 91.989909][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.029096][ T26] audit: type=1800 audit(1728866137.513:31): pid=4280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.135" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 92.047181][ T23] usb 3-1: config 0 descriptor?? [ 92.076155][ T1077] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.089885][ T26] audit: type=1800 audit(1728866137.573:32): pid=4280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.135" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 92.097189][ T1077] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.246388][ T1077] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 92.276118][ T1077] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 92.326182][ T1077] usb 5-1: SerialNumber: syz [ 92.357823][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.373659][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.387227][ T4281] device bridge_slave_0 entered promiscuous mode [ 92.403615][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.422226][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.438645][ T4281] device bridge_slave_1 entered promiscuous mode [ 92.577816][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 92.588973][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 92.616454][ T23] usb 3-1: USB disconnect, device number 7 [ 92.724408][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.742669][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.312777][ T4281] team0: Port device team_slave_0 added [ 93.346325][ T3613] Bluetooth: hci4: command 0x0409 tx timeout [ 93.394181][ T4281] team0: Port device team_slave_1 added [ 93.459612][ T4324] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 93.522874][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.536727][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.572153][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.584026][ T4332] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 93.584026][ T4332] SȘȞZ6' [ 93.593138][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.613613][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.648117][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.726194][ T4324] usb 2-1: Using ep0 maxpacket: 16 [ 93.744718][ T4281] device hsr_slave_0 entered promiscuous mode [ 93.761933][ T4281] device hsr_slave_1 entered promiscuous mode [ 93.772327][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.786714][ T4281] Cannot create hsr debugfs directory [ 93.866178][ T4324] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.917995][ T4324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.929470][ T4324] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 3 [ 94.330242][ T4324] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.416329][ T4324] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 94.429673][ T4324] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 94.443163][ T4324] usb 2-1: Manufacturer: syz [ 94.496757][ T4324] usb 2-1: config 0 descriptor?? [ 94.509256][ T4336] loop2: detected capacity change from 0 to 512 [ 94.591828][ T1077] usb 5-1: 0:2 : does not exist [ 94.677166][ T1077] usb 5-1: USB disconnect, device number 5 [ 94.710095][ T4345] loop4: detected capacity change from 0 to 2048 [ 94.715124][ T4336] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 94.715216][ T4336] ext4 filesystem being mounted at /42/bus supports timestamps until 2038 (0x7fffffff) [ 94.754305][ T4345] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 94.790791][ T4348] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.824489][ T4349] udevd[4349]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.936252][ T4324] rc_core: IR keymap rc-hauppauge not found [ 94.936270][ T4324] Registered IR keymap rc-empty [ 94.957172][ T4324] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 95.037450][ T4281] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.073332][ T4281] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.084591][ T4281] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.095827][ T4356] netlink: 44 bytes leftover after parsing attributes in process `syz.3.144'. [ 95.096295][ T4324] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 95.112407][ T4356] netlink: 52 bytes leftover after parsing attributes in process `syz.3.144'. [ 95.128353][ T4281] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.137416][ T4324] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 95.179968][ T4324] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 95.276410][ T4324] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 95.326248][ T4324] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 95.348134][ T3966] device hsr_slave_0 left promiscuous mode [ 95.355308][ T3966] device hsr_slave_1 left promiscuous mode [ 95.374246][ T3966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.376326][ T4324] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 95.387121][ T3966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.402951][ T3966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.413093][ T3966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.420462][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 95.427365][ T3966] device bridge_slave_1 left promiscuous mode [ 95.433543][ T3966] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.449312][ T4324] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 95.485764][ T3966] device bridge_slave_0 left promiscuous mode [ 95.493783][ T3966] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.521318][ T3966] device dummy0 left promiscuous mode [ 95.527217][ T3966] device veth1_macvtap left promiscuous mode [ 95.533432][ T3966] device veth0_macvtap left promiscuous mode [ 95.541603][ T3966] device veth1_vlan left promiscuous mode [ 95.547633][ T3966] device veth0_vlan left promiscuous mode [ 95.652013][ T4324] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 95.726284][ T4324] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 95.776248][ T4324] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 95.826444][ T4324] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 95.912700][ T4324] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 96.096424][ T4324] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 96.355900][ T4324] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 96.385119][ T4324] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 96.429279][ T4371] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 96.472577][ T4324] usb 2-1: USB disconnect, device number 5 [ 96.569143][ T4379] loop2: detected capacity change from 0 to 256 [ 96.684541][ T4379] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001023f, chksum : 0x5c87467f, utbl_chksum : 0xe619d30d) [ 96.901104][ T4379] exFAT-fs (loop2): failed to load alloc-bitmap [ 96.916396][ T4379] exFAT-fs (loop2): failed to recognize exfat type [ 96.973357][ T3966] team0 (unregistering): Port device team_slave_1 removed [ 97.187466][ T3966] team0 (unregistering): Port device team_slave_0 removed [ 97.210093][ T3966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.234135][ T3966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.483098][ T3966] bond0 (unregistering): Released all slaves [ 97.496284][ T3613] Bluetooth: hci4: command 0x040f tx timeout [ 97.567162][ T4385] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 97.567162][ T4385] SȘȞZ6' [ 97.614578][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.758723][ T4379] loop2: detected capacity change from 0 to 256 [ 97.780304][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.809029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.827459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.827871][ T4379] FAT-fs (loop2): Unrecognized mount option "ut8=0" or missing value [ 98.493806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.524962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.531015][ T4391] FAULT_INJECTION: forcing a failure. [ 98.531015][ T4391] name failslab, interval 1, probability 0, space 0, times 0 [ 98.571411][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.572107][ T4391] CPU: 1 PID: 4391 Comm: syz.4.152 Not tainted 5.15.167-syzkaller #0 [ 98.578507][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.586480][ T4391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 98.586491][ T4391] Call Trace: [ 98.586498][ T4391] [ 98.586505][ T4391] dump_stack_lvl+0x1e3/0x2d0 [ 98.614551][ T4391] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 98.620176][ T4391] ? panic+0x860/0x860 [ 98.624234][ T4391] ? __might_sleep+0xc0/0xc0 [ 98.628804][ T4391] ? kfree+0x4a/0x270 [ 98.632768][ T4391] ? __nla_parse+0x3c/0x50 [ 98.637168][ T4391] should_fail+0x38a/0x4c0 [ 98.641571][ T4391] should_failslab+0x5/0x20 [ 98.646052][ T4391] slab_pre_alloc_hook+0x53/0xc0 [ 98.650976][ T4391] kmem_cache_alloc_node+0x49/0x2c0 [ 98.656151][ T4391] ? __alloc_skb+0xdd/0x590 [ 98.660653][ T4391] __alloc_skb+0xdd/0x590 [ 98.664982][ T4391] netlink_ack+0x33c/0xb10 [ 98.669403][ T4391] ? netlink_dump+0xca0/0xca0 [ 98.674066][ T4391] ? __mutex_lock_common+0x444/0x25a0 [ 98.679420][ T4391] ? __copy_skb_header+0x47b/0x600 [ 98.684525][ T4391] netlink_rcv_skb+0x24c/0x410 [ 98.689272][ T4391] ? xfrm_netlink_rcv+0x80/0x80 [ 98.694107][ T4391] ? netlink_ack+0xb10/0xb10 [ 98.698698][ T4391] xfrm_netlink_rcv+0x70/0x80 [ 98.703365][ T4391] netlink_unicast+0x7b6/0x980 [ 98.708125][ T4391] ? netlink_detachskb+0x90/0x90 [ 98.713049][ T4391] ? __virt_addr_valid+0x3bb/0x460 [ 98.718143][ T4391] ? 0xffffffff81000000 [ 98.722799][ T4391] ? __check_object_size+0x300/0x410 [ 98.728070][ T4391] ? bpf_lsm_netlink_send+0x5/0x10 [ 98.733170][ T4391] netlink_sendmsg+0xa30/0xd60 [ 98.737930][ T4391] ? netlink_getsockopt+0x5b0/0x5b0 [ 98.743120][ T4391] ? aa_sock_msg_perm+0x91/0x150 [ 98.748041][ T4391] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 98.753309][ T4391] ? security_socket_sendmsg+0x7d/0xa0 [ 98.758747][ T4391] ? netlink_getsockopt+0x5b0/0x5b0 [ 98.763930][ T4391] ____sys_sendmsg+0x59e/0x8f0 [ 98.768675][ T4391] ? iovec_from_user+0x300/0x390 [ 98.773598][ T4391] ? __sys_sendmsg_sock+0x30/0x30 [ 98.778620][ T4391] ___sys_sendmsg+0x252/0x2e0 [ 98.783283][ T4391] ? __sys_sendmsg+0x260/0x260 [ 98.788066][ T4391] ? __fdget+0x191/0x220 [ 98.792308][ T4391] __se_sys_sendmsg+0x19a/0x260 [ 98.797149][ T4391] ? __x64_sys_sendmsg+0x80/0x80 [ 98.802079][ T4391] ? syscall_enter_from_user_mode+0x2e/0x240 [ 98.808045][ T4391] ? lockdep_hardirqs_on+0x94/0x130 [ 98.813226][ T4391] ? syscall_enter_from_user_mode+0x2e/0x240 [ 98.819190][ T4391] do_syscall_64+0x3b/0xb0 [ 98.823588][ T4391] ? clear_bhb_loop+0x15/0x70 [ 98.828249][ T4391] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.834128][ T4391] RIP: 0033:0x7fc5c1d5aff9 [ 98.838526][ T4391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.858115][ T4391] RSP: 002b:00007fc5c01d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.866512][ T4391] RAX: ffffffffffffffda RBX: 00007fc5c1f12f80 RCX: 00007fc5c1d5aff9 [ 98.874465][ T4391] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 98.882416][ T4391] RBP: 00007fc5c01d3090 R08: 0000000000000000 R09: 0000000000000000 [ 98.890365][ T4391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.898313][ T4391] R13: 0000000000000000 R14: 00007fc5c1f12f80 R15: 00007ffdcba88558 [ 98.906278][ T4391] [ 98.909295][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.967379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.987588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.027217][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.034311][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.060038][ T4393] loop3: detected capacity change from 0 to 8192 [ 99.066892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.129176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.130045][ T4393] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 99.148157][ T4393] REISERFS (device loop3): using ordered data mode [ 99.154666][ T4393] reiserfs: using flush barriers [ 99.161150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.184387][ T4393] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 99.187615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.209153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.218348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.235330][ T4393] REISERFS (device loop3): checking transaction log (loop3) [ 99.244749][ T4393] REISERFS (device loop3): Using r5 hash to sort names [ 99.265415][ T4281] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.278500][ T4281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.316823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.340443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.375694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.392308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.402018][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.411044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.419866][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.454914][ T4400] netlink: 44 bytes leftover after parsing attributes in process `syz.4.155'. [ 99.465182][ T4400] netlink: 52 bytes leftover after parsing attributes in process `syz.4.155'. [ 99.724433][ T4410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.156'. [ 99.735490][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 100.365697][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.373856][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.550690][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.671532][ T4419] loop3: detected capacity change from 0 to 1764 [ 100.950637][ T4281] device veth0_vlan entered promiscuous mode [ 100.972098][ T4429] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 100.972098][ T4429] SȘȞZ6' [ 101.010237][ T4281] device veth1_vlan entered promiscuous mode [ 101.210093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.219014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.228898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.242136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.292963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.302965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.313369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.334511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.376381][ T3615] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 101.442410][ T4281] device veth0_macvtap entered promiscuous mode [ 101.495686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.520709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.569876][ T4281] device veth1_macvtap entered promiscuous mode [ 101.591353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.616032][ T4435] loop8: detected capacity change from 0 to 6 [ 101.633283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.647660][ T4435] Dev loop8: unable to read RDB block 6 [ 101.662909][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.684833][ T4435] loop8: unable to read partition table [ 101.690974][ T3615] usb 2-1: Using ep0 maxpacket: 16 [ 101.702929][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.713400][ T4435] loop8: partition table beyond EOD, truncated [ 101.726615][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.772165][ T4435] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 101.772165][ T4435] ) failed (rc=-5) [ 101.789254][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.802362][ T4438] loop3: detected capacity change from 0 to 256 [ 101.837208][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.848285][ T3615] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 101.858103][ T3615] usb 2-1: config 0 has no interface number 0 [ 102.115420][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.266121][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.410366][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.626158][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.664981][ T3615] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 102.691364][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.704770][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.714600][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.755100][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.767364][ T4442] sctp: [Deprecated]: syz.4.166 (pid 4442) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.767364][ T4442] Use struct sctp_sack_info instead [ 102.779984][ T4438] FAT-fs (loop3): Directory bread(block 64) failed [ 102.803890][ T4438] FAT-fs (loop3): Directory bread(block 65) failed [ 102.805534][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.821130][ T4438] FAT-fs (loop3): Directory bread(block 66) failed [ 102.832937][ T4438] FAT-fs (loop3): Directory bread(block 67) failed [ 102.839987][ T4438] FAT-fs (loop3): Directory bread(block 68) failed [ 102.847018][ T4438] FAT-fs (loop3): Directory bread(block 69) failed [ 102.849621][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.853679][ T4438] FAT-fs (loop3): Directory bread(block 70) failed [ 102.864138][ T3615] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 102.886196][ T4438] FAT-fs (loop3): Directory bread(block 71) failed [ 102.901913][ T3615] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.910217][ T4438] FAT-fs (loop3): Directory bread(block 72) failed [ 102.916105][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.936209][ T4438] FAT-fs (loop3): Directory bread(block 73) failed [ 102.952769][ T3615] usb 2-1: Product: syz [ 102.957062][ T3615] usb 2-1: Manufacturer: syz [ 102.961652][ T3615] usb 2-1: SerialNumber: syz [ 102.967427][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.987902][ T3615] usb 2-1: config 0 descriptor?? [ 102.996324][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.026561][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.049046][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.076280][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.077586][ T4443] loop4: detected capacity change from 0 to 8192 [ 103.102844][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.123848][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.154251][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.165295][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.177393][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.214365][ T4281] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.233650][ T4281] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.254794][ T4281] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.270897][ T4281] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.316640][ T144] attempt to access beyond end of device [ 103.316640][ T144] loop3: rw=1, want=1236, limit=256 [ 103.424492][ T3806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.479636][ T3806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.504903][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.527582][ T4450] netlink: 44 bytes leftover after parsing attributes in process `syz.2.168'. [ 103.556414][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.571883][ T4450] netlink: 52 bytes leftover after parsing attributes in process `syz.2.168'. [ 103.706659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.729485][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.763569][ T3615] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.214/input/input6 [ 104.351706][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.481534][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.537017][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.505172][ T4466] loop3: detected capacity change from 0 to 1024 [ 105.646865][ T4323] usb 2-1: USB disconnect, device number 6 [ 105.749079][ T4466] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 105.777320][ T4466] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 105.784706][ T4466] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.807697][ T4481] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 105.807697][ T4481] SȘȞZ6' [ 105.827598][ T4466] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 105.844735][ T4484] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 105.844735][ T4484] SȘȞZ6' [ 105.845804][ T4485] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 105.845804][ T4485] SȘȞZ6' [ 105.882591][ T4466] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 106.068505][ T4488] loop1: detected capacity change from 0 to 256 [ 106.652341][ T4497] netlink: 44 bytes leftover after parsing attributes in process `syz.3.179'. [ 106.717750][ T4497] netlink: 52 bytes leftover after parsing attributes in process `syz.3.179'. [ 107.441425][ T4504] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 107.441425][ T4504] SȘȞZ6' [ 107.457663][ T4505] netlink: 44 bytes leftover after parsing attributes in process `syz.1.190'. [ 107.492380][ T4505] netlink: 52 bytes leftover after parsing attributes in process `syz.1.190'. [ 108.936787][ T3615] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 109.236410][ T3615] usb 3-1: Using ep0 maxpacket: 16 [ 109.376335][ T3615] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.571139][ T3615] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 109.591607][ T3615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.606043][ T4519] netlink: 44 bytes leftover after parsing attributes in process `syz.1.184'. [ 109.646233][ T4519] netlink: 52 bytes leftover after parsing attributes in process `syz.1.184'. [ 111.504970][ T4526] loop0: detected capacity change from 0 to 40427 [ 112.179628][ T3615] usb 3-1: Product: syz [ 112.188598][ T3615] usb 3-1: Manufacturer: syz [ 112.193216][ T3615] usb 3-1: SerialNumber: syz [ 112.216325][ T3615] usb 3-1: config 0 descriptor?? [ 112.236257][ T3615] usb 3-1: can't set config #0, error -71 [ 112.243500][ T4526] F2FS-fs (loop0): Invalid segment/section count (24 != 24 * 3) [ 112.252169][ T4526] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 112.267729][ T4526] F2FS-fs (loop0): invalid crc value [ 112.293037][ T3615] usb 3-1: USB disconnect, device number 8 [ 112.302460][ T4526] F2FS-fs (loop0): Found nat_bits in checkpoint [ 112.348907][ T4526] F2FS-fs (loop0): Start checkpoint disabled! [ 112.374647][ T4536] loop2: detected capacity change from 0 to 2048 [ 112.395282][ T4526] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 112.402546][ T4526] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 112.460026][ T4536] loop2: [ICS] [ 112.565650][ T4281] attempt to access beyond end of device [ 112.565650][ T4281] loop0: rw=524288, want=45072, limit=40427 [ 112.597517][ T4281] attempt to access beyond end of device [ 112.597517][ T4281] loop0: rw=0, want=45072, limit=40427 [ 112.765680][ T3806] attempt to access beyond end of device [ 112.765680][ T3806] loop0: rw=2049, want=40976, limit=40427 [ 113.083561][ T4546] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 113.083561][ T4546] SȘȞZ6' [ 114.920848][ T3806] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.289379][ T4553] netlink: 44 bytes leftover after parsing attributes in process `syz.3.194'. [ 115.606755][ T4553] netlink: 52 bytes leftover after parsing attributes in process `syz.3.194'. [ 115.661466][ T3806] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.708862][ T4560] netlink: 44 bytes leftover after parsing attributes in process `syz.1.196'. [ 115.737461][ T4565] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 115.737461][ T4565] SȘȞZ6' [ 115.757966][ T4560] netlink: 52 bytes leftover after parsing attributes in process `syz.1.196'. [ 115.797537][ T4568] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 115.797537][ T4568] SȘȞZ6' [ 115.818289][ T3806] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.489930][ T3806] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.651866][ T4579] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 116.651866][ T4579] SȘȞZ6' [ 117.616233][ T3649] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 117.742732][ T4590] loop4: detected capacity change from 0 to 256 [ 117.956498][ T3649] usb 2-1: Using ep0 maxpacket: 16 [ 118.154550][ T4597] tmpfs: Bad value for 'uid' [ 119.044353][ T4601] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 119.044353][ T4601] SȘȞZ6' [ 119.066613][ T3649] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.246420][ T3649] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 119.274390][ T3649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.313708][ T3649] usb 2-1: Product: syz [ 119.348480][ T3649] usb 2-1: Manufacturer: syz [ 119.375361][ T3649] usb 2-1: SerialNumber: syz [ 119.416296][ T3649] usb 2-1: config 0 descriptor?? [ 119.468716][ T4583] chnl_net:caif_netlink_parms(): no params data found [ 119.635014][ T4599] loop3: detected capacity change from 0 to 32768 [ 119.666509][ T3649] usb 2-1: Cannot retrieve CPort count: -71 [ 119.682572][ T3649] usb 2-1: Cannot retrieve CPort count: -71 [ 119.716258][ T3649] es2_ap_driver: probe of 2-1:0.0 failed with error -71 [ 119.716785][ T4599] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.206 (4599) [ 119.897132][ T3649] usb 2-1: USB disconnect, device number 7 [ 119.905543][ T1077] Bluetooth: hci4: command 0x0409 tx timeout [ 119.937501][ T4599] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 120.108267][ T4614] netlink: 44 bytes leftover after parsing attributes in process `syz.1.208'. [ 120.181649][ T4599] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 120.221520][ T4614] netlink: 52 bytes leftover after parsing attributes in process `syz.1.208'. [ 120.320068][ T4599] BTRFS info (device loop3): use lzo compression, level 0 [ 120.467174][ T4599] BTRFS info (device loop3): using free space tree [ 120.519273][ T4583] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.541861][ T4599] BTRFS info (device loop3): has skinny extents [ 120.556195][ T4583] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.594012][ T4583] device bridge_slave_0 entered promiscuous mode [ 120.629081][ T4583] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.636294][ T4583] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.644302][ T4583] device bridge_slave_1 entered promiscuous mode [ 120.759645][ T4583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.771048][ T4583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.869581][ T4638] 9pnet: p9_client_clunk (4638): Trying to clunk with invalid fid [ 120.881661][ T4599] BTRFS info (device loop3): enabling ssd optimizations [ 120.882882][ T4625] loop2: detected capacity change from 0 to 8192 [ 120.895788][ T4638] CPU: 0 PID: 4638 Comm: syz.1.212 Not tainted 5.15.167-syzkaller #0 [ 120.903862][ T4638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 120.913924][ T4638] Call Trace: [ 120.917203][ T4638] [ 120.920135][ T4638] dump_stack_lvl+0x1e3/0x2d0 [ 120.924826][ T4638] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 120.930464][ T4638] ? panic+0x860/0x860 [ 120.934554][ T4638] p9_client_clunk+0x2d0/0x390 [ 120.939334][ T4638] v9fs_statfs+0x170/0x4e0 [ 120.943756][ T4638] ? slab_free_freelist_hook+0xdd/0x160 [ 120.949308][ T4638] ? v9fs_drop_inode+0x120/0x120 [ 120.954252][ T4638] ? rcu_is_watching+0x11/0xa0 [ 120.959037][ T4638] user_statfs+0x20e/0x450 [ 120.963462][ T4638] ? vfs_statfs+0x2b0/0x2b0 [ 120.967985][ T4638] __x64_sys_statfs+0xe4/0x1a0 [ 120.972756][ T4638] ? fd_statfs+0x380/0x380 [ 120.977171][ T4638] ? __context_tracking_exit+0x4c/0x80 [ 120.982632][ T4638] ? __lock_acquire+0x1ff0/0x1ff0 [ 120.987668][ T4638] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 120.993664][ T4638] ? syscall_enter_from_user_mode+0x2e/0x240 [ 120.999648][ T4638] ? lockdep_hardirqs_on+0x94/0x130 [ 121.004855][ T4638] ? syscall_enter_from_user_mode+0x2e/0x240 [ 121.010842][ T4638] do_syscall_64+0x3b/0xb0 [ 121.015260][ T4638] ? clear_bhb_loop+0x15/0x70 [ 121.019935][ T4638] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.025837][ T4638] RIP: 0033:0x7f1141b82ff9 [ 121.030251][ T4638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.049853][ T4638] RSP: 002b:00007f113fffb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 121.058270][ T4638] RAX: ffffffffffffffda RBX: 00007f1141d3af80 RCX: 00007f1141b82ff9 [ 121.066241][ T4638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 121.074212][ T4638] RBP: 00007f1141bf5296 R08: 0000000000000000 R09: 0000000000000000 [ 121.082185][ T4638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.084969][ T4643] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 121.084969][ T4643] SȘȞZ6' [ 121.090155][ T4638] R13: 0000000000000000 R14: 00007f1141d3af80 R15: 00007fffe0714758 [ 121.090186][ T4638] [ 121.090250][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.143367][ T4583] team0: Port device team_slave_0 added [ 121.164551][ T4583] team0: Port device team_slave_1 added [ 121.233937][ T4583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.248953][ T4583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.287215][ T4583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.299998][ T4583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.307147][ T4583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.325442][ T4625] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 121.333038][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.334384][ T4583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.367811][ T4625] REISERFS (device loop2): using ordered data mode [ 121.382766][ T4625] reiserfs: using flush barriers [ 121.999866][ T3649] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 122.026928][ T3613] Bluetooth: hci4: command 0x041b tx timeout [ 122.072453][ T4625] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 122.139513][ T3806] device hsr_slave_0 left promiscuous mode [ 122.145916][ T4625] REISERFS (device loop2): checking transaction log (loop2) [ 122.152914][ T4650] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 122.152914][ T4650] SȘȞZ6' [ 122.168467][ T3806] device hsr_slave_1 left promiscuous mode [ 122.187617][ T4625] REISERFS (device loop2): Using r5 hash to sort names [ 122.199887][ T3806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.230596][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.240265][ T3806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.256135][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.266869][ T3806] device bridge_slave_1 left promiscuous mode [ 122.273045][ T3806] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.291880][ T3806] device bridge_slave_0 left promiscuous mode [ 122.363021][ T3806] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.746775][ T3649] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 122.755847][ T3649] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.766523][ T3806] device veth1_macvtap left promiscuous mode [ 122.781959][ T3806] device veth0_macvtap left promiscuous mode [ 122.798241][ T3806] device veth1_vlan left promiscuous mode [ 122.804449][ T3806] device veth0_vlan left promiscuous mode [ 122.927296][ T3649] usb 2-1: config 0 descriptor?? [ 122.978736][ T3649] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 123.486270][ T4638] loop1: detected capacity change from 0 to 512 [ 123.517519][ T3649] gspca_sunplus: reg_w_riv err -110 [ 123.523587][ T3649] sunplus: probe of 2-1:0.0 failed with error -110 [ 124.192094][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 125.129989][ T4676] binder: 4671:4676 ioctl c0306201 0 returned -14 [ 125.176523][ T13] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 125.466435][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 125.596728][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.828166][ T3806] team0 (unregistering): Port device team_slave_1 removed [ 125.846490][ T13] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 125.855543][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.885597][ T13] usb 3-1: Product: syz [ 125.897134][ T13] usb 3-1: Manufacturer: syz [ 125.902962][ T13] usb 3-1: SerialNumber: syz [ 125.929515][ T13] usb 3-1: config 0 descriptor?? [ 125.936033][ T3806] team0 (unregistering): Port device team_slave_0 removed [ 125.967286][ T3806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.988777][ T3806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.103318][ T3806] bond0 (unregistering): Released all slaves [ 126.186797][ T13] usb 3-1: Not enough endpoints found in device, aborting! [ 126.257349][ T4683] netlink: 44 bytes leftover after parsing attributes in process `syz.3.221'. [ 126.274291][ T4683] netlink: 52 bytes leftover after parsing attributes in process `syz.3.221'. [ 126.313360][ T4583] device hsr_slave_0 entered promiscuous mode [ 126.331001][ T4583] device hsr_slave_1 entered promiscuous mode [ 126.350091][ T4583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.376325][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 126.392627][ T4583] Cannot create hsr debugfs directory [ 126.402649][ T3615] usb 3-1: USB disconnect, device number 9 [ 126.427761][ T4686] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.435373][ T4686] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.572559][ T1077] usb 2-1: USB disconnect, device number 8 [ 126.573035][ T4689] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 126.612882][ T4689] CIFS mount error: No usable UNC path provided in device string! [ 126.612882][ T4689] [ 126.624942][ T4689] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 126.766687][ T3613] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 127.001696][ T4698] loop2: detected capacity change from 0 to 512 [ 127.136429][ T3613] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 127.176350][ T3613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.205767][ T3613] usb 4-1: config 0 descriptor?? [ 127.226565][ T4583] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 127.235612][ T4698] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 127.285868][ T4694] loop4: detected capacity change from 0 to 32768 [ 127.302413][ T4698] ext4 filesystem being mounted at /63/bus supports timestamps until 2038 (0x7fffffff) [ 127.325183][ T4583] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 127.388723][ T4583] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 127.447087][ T4583] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 127.525877][ T4686] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.533037][ T4686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.540474][ T4686] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.547572][ T4686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.651272][ T4686] device bridge0 entered promiscuous mode [ 127.766260][ T3613] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 127.783380][ T3613] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 127.926541][ T3613] [drm:udl_init] *ERROR* Selecting channel failed [ 127.972339][ T4694] overlayfs: upper fs needs to support d_type. [ 127.998419][ T3613] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 128.086545][ T4694] overlayfs: upper fs does not support tmpfile. [ 128.106164][ T3613] [drm] Initialized udl on minor 2 [ 128.146642][ T3613] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 128.177024][ T4694] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 128.213947][ T3613] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 128.224276][ T4583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.228043][ T3613] usb 4-1: USB disconnect, device number 3 [ 128.439741][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.488655][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.494305][ T4696] loop1: detected capacity change from 0 to 32768 [ 128.549555][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.607930][ T4696] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop1 scanned by syz.1.233 (4696) [ 128.640211][ T4709] loop3: detected capacity change from 0 to 512 [ 128.666777][ T4583] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.862716][ T4696] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 128.968872][ T4709] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.228: Parent and EA inode have the same ino 15 [ 128.984711][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.001281][ T4696] BTRFS info (device loop1): use zlib compression, level 3 [ 129.029070][ T4709] EXT4-fs (loop3): Remounting filesystem read-only [ 129.036297][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.045923][ T4696] BTRFS info (device loop1): turning on sync discard [ 129.086375][ T4709] EXT4-fs (loop3): 1 orphan inode deleted [ 129.092108][ T4709] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsdgroups,errors=remount-ro,user_xattr,bsdgroups,block_validity,stripe=0x0000000000000005,. Quota mode: none. [ 129.176198][ T4696] BTRFS info (device loop1): max_inline at 0 [ 129.183202][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.190305][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.252877][ T4696] BTRFS info (device loop1): enabling ssd optimizations [ 129.336662][ T4696] BTRFS info (device loop1): using spread ssd allocation scheme [ 129.357357][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.428104][ T4696] BTRFS info (device loop1): using free space tree [ 129.467554][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.522228][ T4696] BTRFS info (device loop1): has skinny extents [ 129.585777][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.592907][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.844429][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.852713][ T13] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 129.912738][ T4696] BTRFS error (device loop1): open_ctree failed [ 129.917406][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.987124][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.054361][ T4738] netlink: 44 bytes leftover after parsing attributes in process `syz.2.231'. [ 130.084480][ T4738] netlink: 52 bytes leftover after parsing attributes in process `syz.2.231'. [ 130.216498][ T13] usb 4-1: unable to get BOS descriptor or descriptor too short [ 130.226632][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 130.247857][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 130.284128][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.293208][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.326373][ T13] usb 4-1: config 0 has no interfaces? [ 130.339882][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 130.357797][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.370788][ T4583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.394316][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 130.413151][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 130.432950][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 130.437114][ T4749] loop1: detected capacity change from 0 to 256 [ 130.466615][ T13] usb 4-1: New USB device found, idVendor=07da, idProduct=104d, bcdDevice=e5.48 [ 130.495941][ T13] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 130.523811][ T13] usb 4-1: Product: syz [ 130.535315][ T13] usb 4-1: SerialNumber: syz [ 130.546248][ T13] usb 4-1: config 0 descriptor?? [ 130.592753][ T4749] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009b275e, utbl_chksum : 0x7319d30d) [ 130.658964][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.183521][ T3649] usb 4-1: USB disconnect, device number 4 [ 131.205322][ T3568] syz-executor (3568) used greatest stack depth: 19128 bytes left [ 131.460208][ T4765] netlink: 'syz.2.239': attribute type 10 has an invalid length. [ 131.517178][ T4765] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 131.561821][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.601896][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.631797][ T4583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.701267][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 131.778443][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.909261][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.964398][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.051808][ T4773] device bond0 entered promiscuous mode [ 132.061130][ T4773] device bond_slave_0 entered promiscuous mode [ 132.067854][ T4773] device bond_slave_1 entered promiscuous mode [ 132.074368][ T4773] device netdevsim0 entered promiscuous mode [ 132.687168][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.696446][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.921947][ T4768] loop1: detected capacity change from 0 to 32768 [ 133.041445][ T4583] device veth0_vlan entered promiscuous mode [ 133.116382][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.134762][ T4782] binder: 4779:4782 ioctl c0306201 0 returned -14 [ 133.721250][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.736276][ T2109] Bluetooth: hci2: command 0x0409 tx timeout [ 133.855855][ T4583] device veth1_vlan entered promiscuous mode [ 133.879888][ T4784] fuse: Unknown parameter '184467440737095516150x0000000000000004' [ 133.892801][ T4768] JBD2: Ignoring recovery information on journal [ 133.904950][ T4786] loop2: detected capacity change from 0 to 512 [ 133.998442][ T4583] device veth0_macvtap entered promiscuous mode [ 134.005496][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.014545][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.034857][ T4583] device veth1_macvtap entered promiscuous mode [ 134.048666][ T4786] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 134.068797][ T4768] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 134.091321][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 134.106998][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 134.109112][ T4786] EXT4-fs (loop2): orphan cleanup on readonly fs [ 134.152597][ T4792] netlink: 44 bytes leftover after parsing attributes in process `syz.3.244'. [ 134.169697][ T4786] EXT4-fs error (device loop2): ext4_quota_enable:6383: comm syz.2.242: Bad quota inum: 64, type: 0 [ 134.180807][ T4792] netlink: 52 bytes leftover after parsing attributes in process `syz.3.244'. [ 134.207864][ T26] audit: type=1800 audit(1728866179.693:33): pid=4768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.238" name="bus" dev="loop1" ino=17058 res=0 errno=0 [ 134.223100][ T4786] EXT4-fs (loop2): Remounting filesystem read-only [ 134.270874][ T4786] EXT4-fs warning (device loop2): ext4_enable_quotas:6431: Failed to enable quota tracking (type=0, err=-117, ino=64). Please run e2fsck to fix. [ 134.297457][ T4583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.327996][ T4798] loop3: detected capacity change from 0 to 512 [ 134.343272][ T4583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.384230][ T4786] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 134.391224][ T4583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.411049][ T4786] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002. Quota mode: writeback. [ 134.444927][ T4583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.455053][ T4583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.506110][ T4583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.515942][ T4583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.533126][ T4583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.543753][ T4583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.561480][ T4583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.574513][ T4583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.589032][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.603182][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.638417][ T4769] chnl_net:caif_netlink_parms(): no params data found [ 134.714332][ T4798] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 134.759650][ T4798] EXT4-fs (loop3): orphan cleanup on readonly fs [ 134.766171][ T4798] EXT4-fs error (device loop3): ext4_quota_enable:6383: comm syz.3.245: Bad quota inum: 64, type: 0 [ 134.780336][ T4798] EXT4-fs (loop3): Remounting filesystem read-only [ 134.789561][ T4583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.793443][ T4798] EXT4-fs warning (device loop3): ext4_enable_quotas:6431: Failed to enable quota tracking (type=0, err=-117, ino=64). Please run e2fsck to fix. [ 134.801775][ T4583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.836152][ T4798] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 134.847840][ T4798] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002. Quota mode: writeback. [ 134.896531][ T4583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.919515][ T4583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.965634][ T4583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.978412][ T4583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.988683][ T4583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.000614][ T4583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.032469][ T4583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.079914][ T4806] FAULT_INJECTION: forcing a failure. [ 135.079914][ T4806] name failslab, interval 1, probability 0, space 0, times 0 [ 135.094330][ T4583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.104984][ T4806] CPU: 1 PID: 4806 Comm: syz.3.245 Not tainted 5.15.167-syzkaller #0 [ 135.113051][ T4806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 135.123100][ T4806] Call Trace: [ 135.126370][ T4806] [ 135.129294][ T4806] dump_stack_lvl+0x1e3/0x2d0 [ 135.133983][ T4806] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 135.139624][ T4806] ? panic+0x860/0x860 [ 135.143693][ T4806] ? __might_sleep+0xc0/0xc0 [ 135.148283][ T4806] should_fail+0x38a/0x4c0 [ 135.152708][ T4806] should_failslab+0x5/0x20 [ 135.157206][ T4806] slab_pre_alloc_hook+0x53/0xc0 [ 135.162142][ T4806] __kmalloc+0x6e/0x300 [ 135.166296][ T4806] ? tomoyo_realpath_from_path+0xd8/0x5e0 [ 135.172021][ T4806] tomoyo_realpath_from_path+0xd8/0x5e0 [ 135.177128][ T4583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.177569][ T4806] tomoyo_path_number_perm+0x225/0x810 [ 135.190182][ T4806] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 135.195680][ T4806] ? __fget_files+0x413/0x480 [ 135.200372][ T4806] security_file_ioctl+0x6d/0xa0 [ 135.205314][ T4806] __se_sys_ioctl+0x47/0x160 [ 135.209908][ T4806] do_syscall_64+0x3b/0xb0 [ 135.214322][ T4806] ? clear_bhb_loop+0x15/0x70 [ 135.218991][ T4806] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.224880][ T4806] RIP: 0033:0x7f534d1aaff9 [ 135.229292][ T4806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.248891][ T4806] RSP: 002b:00007f534b602038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.257305][ T4806] RAX: ffffffffffffffda RBX: 00007f534d363058 RCX: 00007f534d1aaff9 [ 135.265275][ T4806] RDX: 0000000020000000 RSI: 0000000000008916 RDI: 0000000000000006 [ 135.273236][ T4806] RBP: 00007f534b602090 R08: 0000000000000000 R09: 0000000000000000 [ 135.281201][ T4806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.289168][ T4806] R13: 0000000000000000 R14: 00007f534d363058 R15: 00007ffd5dc04b88 [ 135.297158][ T4806] [ 135.346057][ T4806] ERROR: Out of memory at tomoyo_realpath_from_path. [ 135.375604][ T4583] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.384408][ T4583] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.395080][ T4583] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.404000][ T4583] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.410491][ T3879] ocfs2: Unmounting device (7,1) on (node local) [ 135.414967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.461355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.495254][ T4769] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.502861][ T4769] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.856857][ T4769] device bridge_slave_0 entered promiscuous mode [ 136.096397][ T4769] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.200587][ T4769] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.229313][ T4319] Bluetooth: hci2: command 0x041b tx timeout [ 136.383926][ T4769] device bridge_slave_1 entered promiscuous mode [ 137.434620][ T4769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.446807][ T4769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.623035][ T3806] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.806217][ T3806] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.895368][ T4840] input: syz0 as /devices/virtual/input/input7 [ 138.012124][ T4769] team0: Port device team_slave_0 added [ 138.074619][ T3966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.217672][ T3966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.257903][ T4769] team0: Port device team_slave_1 added [ 138.337416][ T2109] Bluetooth: hci2: command 0x040f tx timeout [ 138.375720][ T3806] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.474949][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 138.521938][ T4848] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1497 [ 138.531550][ T4848] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 4848, name: syz.3.256 [ 138.537089][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.540479][ T4848] 2 locks held by syz.3.256/4848: [ 138.540539][ T4848] #0: ffff888059c894c8 ( [ 138.549012][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.553512][ T4848] &smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_setsockopt+0x130/0xb20 [ 138.563666][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 138.565094][ T4848] #1: ffffffff8c945618 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x24/0x2e0 [ 138.590753][ T4848] irq event stamp: 840 [ 138.594836][ T4848] hardirqs last enabled at (839): [] queue_delayed_work_on+0x171/0x250 [ 138.604704][ T4848] hardirqs last disabled at (840): [] _raw_spin_lock_irq+0xa9/0x110 [ 138.614221][ T4848] softirqs last enabled at (710): [] ip_setsockopt+0x260e/0x3fb0 [ 138.623561][ T4848] softirqs last disabled at (708): [] release_sock+0x2c/0x1c0 [ 138.632558][ T4848] Preemption disabled at: [ 138.632563][ T4848] [<0000000000000000>] 0x0 [ 138.641250][ T4848] CPU: 1 PID: 4848 Comm: syz.3.256 Not tainted 5.15.167-syzkaller #0 [ 138.649297][ T4848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 138.659325][ T4848] Call Trace: [ 138.662590][ T4848] [ 138.665532][ T4848] dump_stack_lvl+0x1e3/0x2d0 [ 138.670190][ T4848] ? ip_setsockopt+0x260e/0x3fb0 [ 138.675105][ T4848] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 138.680718][ T4848] ? panic+0x860/0x860 [ 138.684767][ T4848] ___might_sleep+0x547/0x6a0 [ 138.689423][ T4848] ? __might_sleep+0xc0/0xc0 [ 138.693993][ T4848] down_read+0x21/0x2e0 [ 138.698122][ T4848] ? kernfs_walk_and_get_ns+0x72/0x2b0 [ 138.703556][ T4848] kernfs_walk_and_get_ns+0x7e/0x2b0 [ 138.708817][ T4848] ? kernfs_find_ns+0x500/0x500 [ 138.713648][ T4848] ? current_cgns_cgroup_from_root+0x2ad/0x300 [ 138.719785][ T4848] cgroup_get_from_path+0x5c/0x2e0 [ 138.724897][ T4848] cgroup_mt_check_v1+0x1a0/0x2b0 [ 138.729899][ T4848] xt_check_match+0x363/0xa30 [ 138.734551][ T4848] ? xt_find_match+0x6d/0x200 [ 138.739200][ T4848] ? mutex_unlock+0x10/0x10 [ 138.743677][ T4848] ? xt_check_proc_name+0x110/0x110 [ 138.748849][ T4848] ? pcpu_alloc+0x10c9/0x17c0 [ 138.753504][ T4848] ? xt_find_match+0x1cf/0x200 [ 138.758244][ T4848] translate_table+0x15bd/0x2250 [ 138.763173][ T4848] ? ipt_register_table+0x7a0/0x7a0 [ 138.768343][ T4848] ? __might_fault+0xb8/0x110 [ 138.772993][ T4848] ? __lock_acquire+0x1ff0/0x1ff0 [ 138.778003][ T4848] ? _copy_from_user+0x10f/0x170 [ 138.782925][ T4848] ? copy_from_sockptr_offset+0x6b/0xa0 [ 138.788457][ T4848] do_ipt_set_ctl+0xdbc/0x1200 [ 138.793199][ T4848] ? rcu_lock_release+0x20/0x20 [ 138.798023][ T4848] ? ipt_unregister_table_exit+0x1e0/0x1e0 [ 138.803810][ T4848] ? __lock_acquire+0x1ff0/0x1ff0 [ 138.808828][ T4848] ? __mutex_unlock_slowpath+0x218/0x750 [ 138.814436][ T4848] ? nf_setsockopt+0x38/0x2b0 [ 138.819087][ T4848] ? print_irqtrace_events+0x210/0x210 [ 138.824523][ T4848] ? mutex_unlock+0x10/0x10 [ 138.829019][ T4848] ? lockdep_hardirqs_on+0x94/0x130 [ 138.834195][ T4848] ? __local_bh_enable_ip+0x164/0x1f0 [ 138.839545][ T4848] nf_setsockopt+0x28a/0x2b0 [ 138.844119][ T4848] ip_setsockopt+0x2732/0x3fb0 [ 138.848861][ T4848] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 138.854208][ T4848] ? read_lock_is_recursive+0x10/0x10 [ 138.859555][ T4848] ? __mutex_trylock_common+0x17e/0x2e0 [ 138.865076][ T4848] ? __might_sleep+0xc0/0xc0 [ 138.869641][ T4848] ? rcu_lock_release+0x20/0x20 [ 138.874470][ T4848] tcp_setsockopt+0x23f/0x3680 [ 138.879214][ T4848] ? tcp_set_window_clamp+0x1b0/0x1b0 [ 138.884564][ T4848] ? __might_sleep+0xc0/0xc0 [ 138.889127][ T4848] ? smc_setsockopt+0x130/0xb20 [ 138.893955][ T4848] ? mutex_lock_io_nested+0x60/0x60 [ 138.899128][ T4848] ? __lock_acquire+0x1ff0/0x1ff0 [ 138.904129][ T4848] ? aa_sk_perm+0x8fc/0xa30 [ 138.908607][ T4848] ? sock_common_setsockopt+0x33/0xc0 [ 138.913949][ T4848] ? sock_common_recvmsg+0x240/0x240 [ 138.919213][ T4848] smc_setsockopt+0x1e5/0xb20 [ 138.923891][ T4848] ? smc_shutdown+0x5f0/0x5f0 [ 138.928541][ T4848] ? aa_sock_opt_perm+0x79/0x110 [ 138.933454][ T4848] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 138.938977][ T4848] ? security_socket_setsockopt+0x7d/0xa0 [ 138.944672][ T4848] ? smc_shutdown+0x5f0/0x5f0 [ 138.949323][ T4848] __sys_setsockopt+0x57e/0x990 [ 138.954151][ T4848] ? __ia32_sys_recv+0xb0/0xb0 [ 138.958895][ T4848] ? syscall_enter_from_user_mode+0x2e/0x240 [ 138.964850][ T4848] __x64_sys_setsockopt+0xb1/0xc0 [ 138.969850][ T4848] do_syscall_64+0x3b/0xb0 [ 138.974240][ T4848] ? clear_bhb_loop+0x15/0x70 [ 138.978892][ T4848] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.984762][ T4848] RIP: 0033:0x7f534d1aaff9 [ 138.989155][ T4848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.008736][ T4848] RSP: 002b:00007f534b602038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 139.017122][ T4848] RAX: ffffffffffffffda RBX: 00007f534d363058 RCX: 00007f534d1aaff9 [ 139.025067][ T4848] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000005 [ 139.033016][ T4848] RBP: 00007f534d21d296 R08: 0000000000001378 R09: 0000000000000000 [ 139.040963][ T4848] R10: 0000000020000640 R11: 0000000000000246 R12: 0000000000000000 [ 139.048908][ T4848] R13: 0000000000000000 R14: 00007f534d363058 R15: 00007ffd5dc04b88 [ 139.056864][ T4848] [ 139.059857][ T4848] [ 139.062156][ T4848] ============================= [ 139.066969][ T4848] [ BUG: Invalid wait context ] [ 139.071785][ T4848] 5.15.167-syzkaller #0 Tainted: G W [ 139.078340][ T4848] ----------------------------- [ 139.083154][ T4848] syz.3.256/4848 is trying to lock: [ 139.088317][ T4848] ffffffff8ca52110 (kernfs_rwsem){++++}-{3:3}, at: kernfs_walk_and_get_ns+0x7e/0x2b0 [ 139.097762][ T4848] other info that might help us debug this: [ 139.103616][ T4848] context-{4:4} [ 139.107045][ T4848] 2 locks held by syz.3.256/4848: [ 139.112033][ T4848] #0: ffff888059c894c8 (&smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_setsockopt+0x130/0xb20 [ 139.122525][ T4848] #1: ffffffff8c945618 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x24/0x2e0 [ 139.132230][ T4848] stack backtrace: [ 139.135917][ T4848] CPU: 1 PID: 4848 Comm: syz.3.256 Tainted: G W 5.15.167-syzkaller #0 [ 139.145337][ T4848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 139.155363][ T4848] Call Trace: [ 139.158614][ T4848] [ 139.161520][ T4848] dump_stack_lvl+0x1e3/0x2d0 [ 139.166172][ T4848] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 139.171773][ T4848] ? panic+0x860/0x860 [ 139.175814][ T4848] __lock_acquire+0x14f5/0x1ff0 [ 139.180637][ T4848] lock_acquire+0x1db/0x4f0 [ 139.185110][ T4848] ? kernfs_walk_and_get_ns+0x7e/0x2b0 [ 139.190543][ T4848] ? read_lock_is_recursive+0x10/0x10 [ 139.195885][ T4848] ? __might_sleep+0xc0/0xc0 [ 139.200450][ T4848] down_read+0x45/0x2e0 [ 139.204581][ T4848] ? kernfs_walk_and_get_ns+0x7e/0x2b0 [ 139.210010][ T4848] ? kernfs_walk_and_get_ns+0x72/0x2b0 [ 139.215439][ T4848] kernfs_walk_and_get_ns+0x7e/0x2b0 [ 139.220695][ T4848] ? kernfs_find_ns+0x500/0x500 [ 139.225516][ T4848] ? current_cgns_cgroup_from_root+0x2ad/0x300 [ 139.231640][ T4848] cgroup_get_from_path+0x5c/0x2e0 [ 139.236723][ T4848] cgroup_mt_check_v1+0x1a0/0x2b0 [ 139.241736][ T4848] xt_check_match+0x363/0xa30 [ 139.246383][ T4848] ? xt_find_match+0x6d/0x200 [ 139.251029][ T4848] ? mutex_unlock+0x10/0x10 [ 139.255504][ T4848] ? xt_check_proc_name+0x110/0x110 [ 139.260674][ T4848] ? pcpu_alloc+0x10c9/0x17c0 [ 139.265322][ T4848] ? xt_find_match+0x1cf/0x200 [ 139.270058][ T4848] translate_table+0x15bd/0x2250 [ 139.274977][ T4848] ? ipt_register_table+0x7a0/0x7a0 [ 139.280146][ T4848] ? __might_fault+0xb8/0x110 [ 139.284793][ T4848] ? __lock_acquire+0x1ff0/0x1ff0 [ 139.289790][ T4848] ? _copy_from_user+0x10f/0x170 [ 139.294714][ T4848] ? copy_from_sockptr_offset+0x6b/0xa0 [ 139.300238][ T4848] do_ipt_set_ctl+0xdbc/0x1200 [ 139.304973][ T4848] ? rcu_lock_release+0x20/0x20 [ 139.309794][ T4848] ? ipt_unregister_table_exit+0x1e0/0x1e0 [ 139.315569][ T4848] ? __lock_acquire+0x1ff0/0x1ff0 [ 139.320564][ T4848] ? __mutex_unlock_slowpath+0x218/0x750 [ 139.326168][ T4848] ? nf_setsockopt+0x38/0x2b0 [ 139.330815][ T4848] ? print_irqtrace_events+0x210/0x210 [ 139.336259][ T4848] ? mutex_unlock+0x10/0x10 [ 139.340735][ T4848] ? lockdep_hardirqs_on+0x94/0x130 [ 139.345906][ T4848] ? __local_bh_enable_ip+0x164/0x1f0 [ 139.351248][ T4848] nf_setsockopt+0x28a/0x2b0 [ 139.355809][ T4848] ip_setsockopt+0x2732/0x3fb0 [ 139.360549][ T4848] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 139.365908][ T4848] ? read_lock_is_recursive+0x10/0x10 [ 139.371252][ T4848] ? __mutex_trylock_common+0x17e/0x2e0 [ 139.376772][ T4848] ? __might_sleep+0xc0/0xc0 [ 139.381332][ T4848] ? rcu_lock_release+0x20/0x20 [ 139.386154][ T4848] tcp_setsockopt+0x23f/0x3680 [ 139.390896][ T4848] ? tcp_set_window_clamp+0x1b0/0x1b0 [ 139.396237][ T4848] ? __might_sleep+0xc0/0xc0 [ 139.400795][ T4848] ? smc_setsockopt+0x130/0xb20 [ 139.405636][ T4848] ? mutex_lock_io_nested+0x60/0x60 [ 139.410829][ T4848] ? __lock_acquire+0x1ff0/0x1ff0 [ 139.415822][ T4848] ? aa_sk_perm+0x8fc/0xa30 [ 139.420313][ T4848] ? sock_common_setsockopt+0x33/0xc0 [ 139.425659][ T4848] ? sock_common_recvmsg+0x240/0x240 [ 139.430928][ T4848] smc_setsockopt+0x1e5/0xb20 [ 139.435592][ T4848] ? smc_shutdown+0x5f0/0x5f0 [ 139.440248][ T4848] ? aa_sock_opt_perm+0x79/0x110 [ 139.445168][ T4848] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 139.450689][ T4848] ? security_socket_setsockopt+0x7d/0xa0 [ 139.456391][ T4848] ? smc_shutdown+0x5f0/0x5f0 [ 139.461045][ T4848] __sys_setsockopt+0x57e/0x990 [ 139.465877][ T4848] ? __ia32_sys_recv+0xb0/0xb0 [ 139.470612][ T4848] ? syscall_enter_from_user_mode+0x2e/0x240 [ 139.476564][ T4848] __x64_sys_setsockopt+0xb1/0xc0 [ 139.481562][ T4848] do_syscall_64+0x3b/0xb0 [ 139.485948][ T4848] ? clear_bhb_loop+0x15/0x70 [ 139.490593][ T4848] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.496456][ T4848] RIP: 0033:0x7f534d1aaff9 [ 139.500845][ T4848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.520419][ T4848] RSP: 002b:00007f534b602038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 139.528802][ T4848] RAX: ffffffffffffffda RBX: 00007f534d363058 RCX: 00007f534d1aaff9 [ 139.536749][ T4848] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000005 [ 139.544706][ T4848] RBP: 00007f534d21d296 R08: 0000000000001378 R09: 0000000000000000 [ 139.552669][ T4848] R10: 0000000020000640 R11: 0000000000000246 R12: 0000000000000000 [ 139.560614][ T4848] R13: 0000000000000000 R14: 00007f534d363058 R15: 00007ffd5dc04b88 [ 139.568567][ T4848] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 139.579464][ T4848] xt_cgroup: invalid path, errno=-2 [ 139.638657][ T3806] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.877992][ T3806] device hsr_slave_0 left promiscuous mode [ 140.884036][ T3806] device hsr_slave_1 left promiscuous mode [ 140.890313][ T3806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.897742][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.905125][ T3806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.912557][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.919971][ T3806] device bridge_slave_1 left promiscuous mode [ 140.926097][ T3806] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.934068][ T3806] device bridge_slave_0 left promiscuous mode [ 140.940595][ T3806] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.952842][ T3806] device hsr_slave_0 left promiscuous mode [ 140.959539][ T3806] device hsr_slave_1 left promiscuous mode [ 140.965908][ T3806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.973476][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.980944][ T3806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.988373][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.995722][ T3806] device bridge_slave_1 left promiscuous mode [ 141.001862][ T3806] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.009665][ T3806] device bridge_slave_0 left promiscuous mode [ 141.015768][ T3806] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.025419][ T3806] device veth1_macvtap left promiscuous mode [ 141.031522][ T3806] device veth0_macvtap left promiscuous mode [ 141.037598][ T3806] device veth1_vlan left promiscuous mode [ 141.043329][ T3806] device veth0_vlan left promiscuous mode [ 141.049521][ T3806] device veth1_macvtap left promiscuous mode [ 141.055496][ T3806] device veth0_macvtap left promiscuous mode [ 141.061756][ T3806] device veth1_vlan left promiscuous mode [ 141.068224][ T3806] device veth0_vlan left promiscuous mode [ 141.179026][ T3806] team0 (unregistering): Port device team_slave_1 removed [ 141.190220][ T3806] team0 (unregistering): Port device team_slave_0 removed [ 141.201737][ T3806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.212776][ T3806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.250079][ T3806] bond0 (unregistering): Released all slaves [ 141.317482][ T3806] team0 (unregistering): Port device team_slave_1 removed [ 141.328397][ T3806] team0 (unregistering): Port device team_slave_0 removed [ 141.338492][ T3806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.350544][ T3806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.389629][ T3806] bond0 (unregistering): Released all slaves [ 142.090278][ T3806] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.148240][ T3806] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.218778][ T3806] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.269095][ T3806] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.349053][ T3806] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.378853][ T3806] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.438406][ T3806] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.509651][ T3806] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.602654][ T3806] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.639056][ T3806] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.688430][ T3806] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.748088][ T3806] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.787655][ T3806] device hsr_slave_0 left promiscuous mode [ 143.793729][ T3806] device hsr_slave_1 left promiscuous mode [ 143.799932][ T3806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.807362][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.814728][ T3806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.822705][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.830132][ T3806] device bridge_slave_1 left promiscuous mode [ 143.836358][ T3806] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.843991][ T3806] device bridge_slave_0 left promiscuous mode [ 143.850294][ T3806] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.859865][ T3806] device hsr_slave_0 left promiscuous mode [ 143.865916][ T3806] device hsr_slave_1 left promiscuous mode [ 143.872279][ T3806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.879718][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.887200][ T3806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.894568][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.902355][ T3806] device bridge_slave_1 left promiscuous mode [ 143.908570][ T3806] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.916835][ T3806] device bridge_slave_0 left promiscuous mode [ 143.922928][ T3806] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.932418][ T3806] device hsr_slave_0 left promiscuous mode [ 143.938687][ T3806] device hsr_slave_1 left promiscuous mode [ 143.944719][ T3806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.952106][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.959525][ T3806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.966956][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.974340][ T3806] device bridge_slave_1 left promiscuous mode [ 143.980687][ T3806] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.988694][ T3806] device bridge_slave_0 left promiscuous mode [ 143.994816][ T3806] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.002829][ T3806] device bridge_slave_1 left promiscuous mode [ 144.009057][ T3806] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.016729][ T3806] device bridge_slave_0 left promiscuous mode [ 144.022817][ T3806] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.033197][ T3806] device veth1_macvtap left promiscuous mode [ 144.039481][ T3806] device veth0_macvtap left promiscuous mode [ 144.045468][ T3806] device veth1_vlan left promiscuous mode [ 144.051313][ T3806] device veth0_vlan left promiscuous mode [ 144.057454][ T3806] device veth1_macvtap left promiscuous mode [ 144.063422][ T3806] device veth0_macvtap left promiscuous mode [ 144.069462][ T3806] device veth1_vlan left promiscuous mode [ 144.075228][ T3806] device veth0_vlan left promiscuous mode [ 144.081541][ T3806] device veth1_macvtap left promiscuous mode [ 144.087848][ T3806] device veth0_macvtap left promiscuous mode [ 144.093837][ T3806] device veth1_vlan left promiscuous mode [ 144.099623][ T3806] device veth0_vlan left promiscuous mode [ 144.244518][ T3806] team0 (unregistering): Port device team_slave_1 removed [ 144.256959][ T3806] team0 (unregistering): Port device team_slave_0 removed [ 144.266065][ T3806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.277211][ T3806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.312439][ T3806] bond0 (unregistering): Released all slaves [ 144.385178][ T3806] team0 (unregistering): Port device team_slave_1 removed [ 144.394484][ T3806] team0 (unregistering): Port device team_slave_0 removed [ 144.404787][ T3806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.415745][ T3806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.454505][ T3806] bond0 (unregistering): Released all slaves [ 144.524108][ T3806] team0 (unregistering): Port device team_slave_1 removed [ 144.533424][ T3806] team0 (unregistering): Port device team_slave_0 removed [ 144.542686][ T3806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.555843][ T3806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.590654][ T3806] bond0 (unregistering): Released all slaves [ 144.672505][ T3806] team0 (unregistering): Port device team_slave_1 removed [ 144.681937][ T3806] team0 (unregistering): Port device team_slave_0 removed [ 144.691376][ T3806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.703136][ T3806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.735290][ T3806] bond0 (unregistering): Released all slaves