last executing test programs: 3m51.767666814s ago: executing program 4 (id=483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5e81982aa4", 0x5}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) 3m50.916942074s ago: executing program 4 (id=487): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 3m49.415438271s ago: executing program 4 (id=489): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24048015) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) 3m45.922764551s ago: executing program 4 (id=496): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$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") pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000001180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x2, 0x6, 0xa}}, 0x30) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xc4042, 0x1ee) 3m41.309357454s ago: executing program 4 (id=502): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f00000001c0)=0x4) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}}, {0xa, 0x4, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c) 3m39.483050844s ago: executing program 4 (id=509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) write$binfmt_misc(r3, &(0x7f0000000040)="704dd1993290823b4c4fbae124a475ef12e60295226c6d1240", 0x19) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) fchown(r4, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000003c40)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000003c80)={0x3, 0x7f, {r0}, {0xffffffffffffffff}, 0x8000, 0x8001}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) 3m38.475829696s ago: executing program 32 (id=509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) write$binfmt_misc(r3, &(0x7f0000000040)="704dd1993290823b4c4fbae124a475ef12e60295226c6d1240", 0x19) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) fchown(r4, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000003c40)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000003c80)={0x3, 0x7f, {r0}, {0xffffffffffffffff}, 0x8000, 0x8001}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) 23.268803724s ago: executing program 0 (id=1028): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x9, 0x0, &(0x7f0000002000)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000580), 0x0) 18.916162464s ago: executing program 0 (id=1036): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) iopl(0x3) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) writev(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)="cd", 0x1}], 0x1) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) 16.940465726s ago: executing program 2 (id=1041): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b1", 0x23}, {&(0x7f00000006c0)='\b', 0x1}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae37c2bfab2", 0x75}, {&(0x7f0000000880)="a1755527af3bc7c4671ac86bf0a2338efb5db1", 0x13}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff00000002ac1414bb00000006ffffffff000000000000000000000003441435230a01010200000001ffffffff00000007444477937f000001"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="04"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15.975795137s ago: executing program 0 (id=1043): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a54000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a320000000008000a40ffffff78"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0xfffff7f1, @private2, 0x2}}}, 0x30) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 15.183769596s ago: executing program 2 (id=1046): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x9, 0x0, &(0x7f0000002000)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000580), 0x0) 14.614093853s ago: executing program 0 (id=1050): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 12.899729232s ago: executing program 1 (id=1052): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40002c1, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 12.673566085s ago: executing program 0 (id=1054): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="460609000000000014003500627269646765300000000000000000000c0016800400ee7f040001800500110008000000"], 0x48}, 0x1, 0x0, 0x0, 0x4600}, 0x24044800) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d) write$tun(r4, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000400000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0x9, 0x4, 0xd, 0x8, 0x7fff, 0xffffffff, 0x3ff}, &(0x7f0000000200)={0x7, 0x5, 0x5, 0x7ff, 0x8000, 0x2, 0x8, 0x9}, 0x0, &(0x7f0000000340)={r6, r7+60000000}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) 12.467209677s ago: executing program 1 (id=1055): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="58000000010201010000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000000) 10.289561112s ago: executing program 0 (id=1058): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xff2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000004a00037e58dfc300000000000a0000"], 0x24}}, 0x400040c0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r4, 0x5423, 0x0) syz_open_dev$MSR(0x0, 0x8000000000000001, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r5, 0x0, 0x0, 0x0, 0x3) 9.56699742s ago: executing program 1 (id=1059): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x5, 0x84) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0701, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e21, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x4048885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 9.484592711s ago: executing program 3 (id=1060): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e01798d28b6d63cf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236743acd06103cd77bd07f2df5989ee40e409b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ffcf44f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990f7acfdb8216ea52f604b9f12033688caa4b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d6"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0xfffe}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x5}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) 9.431718792s ago: executing program 2 (id=1061): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SET_PTRACER(0x59616d61, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f0000000580)=[{0x18, '\x00', @st={0x4, [{0x1, @uvalue=0x1}, {0x1, @svalue=0x3}, {0x2, @uvalue=0x4}, {0x1, @uvalue=0x6}]}, 0x87}, {0x2c, '\x00', @st={0x4, [{0x1, @uvalue=0x9}, {0x2, @svalue=0x3}, {0x0, @svalue=0x1}, {0x1, @svalue=0x400}]}, 0x6}, {0xc, '\x00', @data=0x7, 0x6}, {0x1f, '\x00', @data=0xa, 0x2b1d}]}) 9.269978524s ago: executing program 3 (id=1062): r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xac}}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0x7000, 0x40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x62040, 0x20) r7 = socket$netlink(0x10, 0x3, 0x9) sendfile(r7, r6, 0x0, 0x7ffff088) 9.216856785s ago: executing program 1 (id=1063): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) 7.412440965s ago: executing program 2 (id=1064): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$swradio(0x0, 0x0, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000000840)=ANY=[@ANYBLOB="580000000d0a050000000000000000000300000a090001b4fc1893bf0073797a3100000000090002e5078f7a30000000000900020000000900020073797a3000cc1f0d73f4d699b7a30000"], 0x58}, 0x1, 0x0, 0x0, 0x20008044}, 0x10) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) 7.411588465s ago: executing program 3 (id=1065): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 7.213760447s ago: executing program 5 (id=1066): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40002c1, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 6.99969742s ago: executing program 1 (id=1067): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x8040) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000005, 0x12, r0, 0x81000000) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5}]}}}]}, 0x38}}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d5304974) write$FUSE_NOTIFY_STORE(r2, 0x0, 0x28) close(r2) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000000701010000000000000000030000050900010073797a3000000000050003002f000000df7c2e2bb087491b59eff764d90fd43b42bd32d295958281877fa8b146fbb56c1b55c0805962568c947c6844f25280572d3e2d86af92cffd9b5649"], 0x28}, 0x1, 0x0, 0x0, 0x50800}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r5, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a00000500130008000000050005"], 0x44}, 0x1, 0x0, 0x0, 0x20008802}, 0x30) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES64, @ANYRES8=0x0, @ANYRESDEC, @ANYRES64], 0x1, 0x5f0, &(0x7f0000000c80)="$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") 6.237481868s ago: executing program 3 (id=1068): socket$inet6(0xa, 0x800000000000002, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000003c0), 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000c0, &(0x7f0000000180)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xac}}, 0x9}, 0x1c) socket(0x25, 0xa, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$inet6_udp(0xa, 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x219, 0x183b, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="4dc07f94716330", 0x7) accept4(r2, 0x0, 0x0, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x2e2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xfffffffc) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 4.231817431s ago: executing program 5 (id=1069): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000baf775aa1b71da", 0xe, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007f00)=ANY=[@ANYBLOB="280200001900010028bd7000fbdbdf251d0109005000"], 0x228}, 0x1, 0x0, 0x0, 0x5}, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r4, &(0x7f0000000b00), 0x91) 4.143572872s ago: executing program 2 (id=1070): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="58000000010201010000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000000) 3.035801065s ago: executing program 3 (id=1071): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4008000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="48006172252daccbb2000002060300000000000000000005000007050004000200000005000400000000000900020073797a31000000000500010006000000"], 0x48}}, 0x80) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x165840, 0x2) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) getpriority(0x2, r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, 0x0, 0x2000c000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000003c0), 0x1, 0x59c, &(0x7f0000000400)="$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") syz_init_net_socket$llc(0x1a, 0x1, 0x0) 2.897660526s ago: executing program 1 (id=1072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x9, 0x0, &(0x7f0000002000)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000580), 0x0) 2.586227361s ago: executing program 5 (id=1073): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0xfffe}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x5}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) 2.371713443s ago: executing program 5 (id=1074): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) 2.031751277s ago: executing program 2 (id=1075): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) syz_io_uring_setup(0x20000f02, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='bfs\x00', 0x1a4c008, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x58, 0x2000) 1.027453318s ago: executing program 5 (id=1076): openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24048015) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000040)={[{}]}) 397.170585ms ago: executing program 3 (id=1077): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) 0s ago: executing program 5 (id=1078): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) kernel console output (not intermixed with test programs): y [ 72.994440][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.004190][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.012850][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.021500][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.029745][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.037564][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.049657][ T4273] device veth0_vlan entered promiscuous mode [ 73.080332][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.095927][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.106072][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.133459][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.163616][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.190354][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.211197][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.259284][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.320129][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.336270][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.345474][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.365917][ T4273] device veth1_vlan entered promiscuous mode [ 73.377373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.400505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.408041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.436295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.472605][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.495295][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.579598][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.592846][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.620404][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.633672][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.647169][ T4273] device veth0_macvtap entered promiscuous mode [ 73.675776][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.685523][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.699340][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.722164][ T4273] device veth1_macvtap entered promiscuous mode [ 73.743699][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.757498][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.766204][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.783037][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.794696][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.806217][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.829196][ T4271] device veth0_vlan entered promiscuous mode [ 73.846630][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.861008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.874112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.890476][ T4271] device veth1_vlan entered promiscuous mode [ 73.914778][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.928668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.936851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.948040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.957865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.966996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.987520][ T4284] device veth0_vlan entered promiscuous mode [ 73.995330][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.006583][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.017140][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.026079][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.033773][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.045436][ T4273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.058939][ T4273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.067677][ T4273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.076704][ T4273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.100093][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.113242][ T4284] device veth1_vlan entered promiscuous mode [ 74.122859][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.135841][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.143968][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.185331][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.197391][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.210183][ T4271] device veth0_macvtap entered promiscuous mode [ 74.243492][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.260673][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.270678][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.285886][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.295405][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.331465][ T4271] device veth1_macvtap entered promiscuous mode [ 74.353376][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.362639][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.371561][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.380441][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.389812][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.410972][ T4272] device veth0_vlan entered promiscuous mode [ 74.430795][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.439450][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.456963][ T4284] device veth0_macvtap entered promiscuous mode [ 74.472264][ T4272] device veth1_vlan entered promiscuous mode [ 74.484513][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.495670][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.507870][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.525179][ T4284] device veth1_macvtap entered promiscuous mode [ 74.526147][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.532848][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.548462][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.555986][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.559986][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.576506][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.585255][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.593922][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.602620][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.611923][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.620088][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.627972][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.639802][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.651450][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.662610][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.677608][ T4274] device veth0_vlan entered promiscuous mode [ 74.696790][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.705466][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.714986][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.741794][ T4271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.750946][ T4271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.759808][ T4271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.768562][ T4271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.791474][ T4274] device veth1_vlan entered promiscuous mode [ 74.808639][ T4275] Bluetooth: hci2: command 0x040f tx timeout [ 74.808909][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 74.814677][ T4275] Bluetooth: hci3: command 0x040f tx timeout [ 74.827153][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 74.827172][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 74.834679][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.851201][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.862157][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.863780][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.872842][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.891217][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.902742][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.927326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.935760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.943962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.954542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.964902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.978208][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.989970][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.000377][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.011208][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.022668][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.052700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.065154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.075524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.092165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.105621][ T4284] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.116525][ T4284] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.126549][ T4284] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.136826][ T4284] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.167433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.193795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.206069][ T4272] device veth0_macvtap entered promiscuous mode [ 75.237548][ T4274] device veth0_macvtap entered promiscuous mode [ 75.276291][ T4272] device veth1_macvtap entered promiscuous mode [ 75.322126][ T4274] device veth1_macvtap entered promiscuous mode [ 75.354263][ T4335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.368093][ T4335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.410852][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.421774][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.434267][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.445506][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.456840][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.467382][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.478836][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.486220][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.495214][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.503421][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.512608][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.544033][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.554924][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.565416][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.576640][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.586738][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.597331][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.607217][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.619157][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.631075][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.641431][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.655227][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.665566][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.676684][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.686783][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.697918][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.719188][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.737523][ T4330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.751670][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.762351][ T4330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.767982][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.781235][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.790049][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.798942][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.809652][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.820924][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.830868][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.842062][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.853361][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.864053][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.873903][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.884851][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.896205][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.907466][ T4274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.917817][ T4274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.927482][ T4274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.936598][ T4274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.955373][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.965366][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.981767][ T4272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.992715][ T4272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.001814][ T4272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.011682][ T4272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.040678][ T4301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.062537][ T4301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.103675][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.201195][ T4301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.215024][ T4301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.244385][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.358644][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.423433][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.888589][ T4277] Bluetooth: hci4: command 0x0419 tx timeout [ 76.890263][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.905043][ T4277] Bluetooth: hci3: command 0x0419 tx timeout [ 76.905050][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 76.905078][ T4286] Bluetooth: hci1: command 0x0419 tx timeout [ 76.911205][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 77.228290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 77.405722][ T4365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.429008][ T4365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.713824][ T4322] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 77.866853][ T4330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.892899][ T4330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.946715][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.054785][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.113486][ T4322] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.129749][ T4322] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 78.401295][ T4322] usb 1-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 78.460689][ T4383] QAT: Device 2 not found [ 78.466355][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.613190][ T4322] usb 1-1: config 0 descriptor?? [ 79.099008][ T4330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.118576][ T4330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.130479][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.143757][ T4388] loop3: detected capacity change from 0 to 128 [ 79.263996][ T4384] usb 1-1: USB disconnect, device number 2 [ 79.314659][ T4389] loop1: detected capacity change from 0 to 512 [ 79.352665][ T4389] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.463941][ T4389] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 80.098348][ T4389] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 80.238443][ T4265] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 80.247062][ T4393] overlayfs: filesystem on './file0' not supported as upperdir [ 80.980208][ T4406] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.988528][ T4406] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.012679][ T4406] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 81.101240][ T4407] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11'. [ 81.680077][ T4414] loop3: detected capacity change from 0 to 512 [ 81.790454][ T4414] ======================================================= [ 81.790454][ T4414] WARNING: The mand mount option has been deprecated and [ 81.790454][ T4414] and is ignored by this kernel. Remove the mand [ 81.790454][ T4414] option from the mount to silence this warning. [ 81.790454][ T4414] ======================================================= [ 81.875464][ T4414] EXT4-fs: Ignoring removed i_version option [ 81.883112][ T4414] EXT4-fs: Ignoring removed oldalloc option [ 81.903840][ T4414] EXT4-fs (loop3): Test dummy encryption mode enabled [ 81.931510][ T4414] EXT4-fs (loop3): 1 truncate cleaned up [ 81.937448][ T4414] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 82.021717][ T4424] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 82.061798][ T4424] syz.4.16 uses obsolete (PF_INET,SOCK_PACKET) [ 83.312314][ T4414] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 83.457131][ T4414] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #13: comm syz.3.13: mark_inode_dirty error [ 83.784989][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 84.578270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 84.910314][ T4443] QAT: Device 2 not found [ 86.114196][ T4450] loop0: detected capacity change from 0 to 4096 [ 86.310579][ T4458] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.318617][ T4458] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.333688][ T4458] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 86.378086][ T4458] netlink: 24 bytes leftover after parsing attributes in process `syz.4.25'. [ 87.016100][ T14] cfg80211: failed to load regulatory.db [ 87.111640][ T4320] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 87.195526][ T4463] loop4: detected capacity change from 0 to 512 [ 87.212105][ T4463] EXT4-fs: Ignoring removed i_version option [ 87.232673][ T4463] EXT4-fs: Ignoring removed oldalloc option [ 87.285156][ T4463] EXT4-fs (loop4): Test dummy encryption mode enabled [ 87.338030][ T4320] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.361519][ T4320] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 87.388417][ T4320] usb 4-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 87.407976][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.470438][ T4320] usb 4-1: config 0 descriptor?? [ 87.547265][ T4463] EXT4-fs (loop4): 1 truncate cleaned up [ 87.563242][ T4463] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 87.650448][ T4469] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 88.362055][ T14] usb 4-1: USB disconnect, device number 2 [ 88.374205][ T4472] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 88.424450][ T4472] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #13: comm syz.4.28: mark_inode_dirty error [ 88.572607][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 88.745774][ T4477] loop0: detected capacity change from 0 to 512 [ 88.770992][ T4477] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.844672][ T4477] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 91.377691][ T4498] loop3: detected capacity change from 0 to 4096 [ 91.422171][ T4501] loop2: detected capacity change from 0 to 8 [ 93.050918][ T4513] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 93.622566][ T4273] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 93.642646][ T4273] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 94.580344][ T4529] 9pnet_virtio: no channels available for device 127.0.0.1 [ 94.723887][ T4533] lo speed is unknown, defaulting to 1000 [ 94.730165][ T4533] lo speed is unknown, defaulting to 1000 [ 94.737884][ T4533] lo speed is unknown, defaulting to 1000 [ 94.747709][ T4533] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 94.760570][ T4533] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 94.802602][ T4533] lo speed is unknown, defaulting to 1000 [ 94.809778][ T4533] lo speed is unknown, defaulting to 1000 [ 94.816473][ T4533] lo speed is unknown, defaulting to 1000 [ 94.823872][ T4533] lo speed is unknown, defaulting to 1000 [ 94.831482][ T4533] lo speed is unknown, defaulting to 1000 [ 95.088255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 95.158254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 95.188256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 95.468252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 95.558257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 95.608256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 95.638254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 95.798256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 99.385816][ T4548] loop3: detected capacity change from 0 to 4096 [ 99.634215][ T4555] loop1: detected capacity change from 0 to 32768 [ 100.107413][ T4555] XFS (loop1): Mounting V5 Filesystem [ 100.172712][ T4555] XFS (loop1): Ending clean mount [ 100.185987][ T4555] XFS (loop1): Quotacheck needed: Please wait. [ 100.300974][ T4320] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.316573][ T4555] XFS (loop1): Quotacheck: Done. [ 100.508421][ T4320] usb 1-1: Using ep0 maxpacket: 16 [ 100.515549][ T4320] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 100.724899][ T27] audit: type=1800 audit(1778353272.199:2): pid=4571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.55" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4430 res=0 errno=0 [ 100.926710][ T4320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.091441][ T4572] loop2: detected capacity change from 0 to 164 [ 101.113256][ T4320] usb 1-1: config 0 descriptor?? [ 101.157225][ T4320] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 102.202362][ T4284] XFS (loop1): Unmounting Filesystem [ 103.975396][ T4320] gspca_sonixj: i2c_w8 err -71 [ 104.018385][ T4320] sonixj: probe of 1-1:0.0 failed with error -71 [ 104.104222][ T4320] usb 1-1: USB disconnect, device number 3 [ 105.072564][ T4605] loop2: detected capacity change from 0 to 2048 [ 105.112186][ T4607] loop0: detected capacity change from 0 to 2048 [ 105.212673][ T4592] loop4: detected capacity change from 0 to 32768 [ 105.221015][ T4607] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 105.237388][ T4605] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 105.240043][ T4592] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.63 (4592) [ 105.376117][ T4592] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 105.447257][ T4592] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 105.733457][ T4592] BTRFS info (device loop4): force zlib compression, level 3 [ 105.758088][ T4592] BTRFS info (device loop4): turning on flush-on-commit [ 105.764588][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 105.789355][ T4592] BTRFS info (device loop4): max_inline at 4096 [ 105.827743][ T4592] BTRFS info (device loop4): using free space tree [ 106.136121][ T4627] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.143640][ T4627] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.158275][ T4627] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 106.914624][ T4592] BTRFS error (device loop4): open_ctree failed: -12 [ 107.144745][ T4624] loop2: detected capacity change from 0 to 4096 [ 107.300481][ T4657] loop3: detected capacity change from 0 to 256 [ 108.218042][ T4655] sched: RT throttling activated [ 108.437446][ T4330] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 108.466870][ T4657] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 108.543907][ T4330] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 108.764936][ T4330] EXT4-fs (loop0): This should not happen!! Data will be lost [ 108.764936][ T4330] [ 109.323595][ T4330] EXT4-fs (loop0): Total free blocks count 0 [ 109.345640][ T4330] EXT4-fs (loop0): Free/Dirty block details [ 109.681112][ T4330] EXT4-fs (loop0): free_blocks=2415919504 [ 109.687293][ T4330] EXT4-fs (loop0): dirty_blocks=8192 [ 109.711083][ T4330] EXT4-fs (loop0): Block reservation details [ 109.717093][ T4330] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 110.226356][ T4675] process 'syz.3.76' launched '/dev/fd/4' with NULL argv: empty string added [ 110.475531][ T4674] bridge0: port 3(syz_tun) entered blocking state [ 110.485777][ T4674] bridge0: port 3(syz_tun) entered disabled state [ 110.501424][ T4674] device syz_tun entered promiscuous mode [ 110.717113][ T4301] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 110.809670][ T4682] trusted_key: encrypted_key: insufficient parameters specified [ 110.849278][ T4301] EXT4-fs (loop0): This should not happen!! Data will be lost [ 110.849278][ T4301] [ 111.116217][ T4301] EXT4-fs (loop0): Total free blocks count 0 [ 111.396548][ T4301] EXT4-fs (loop0): Free/Dirty block details [ 111.402601][ T4301] EXT4-fs (loop0): free_blocks=2415919504 [ 111.408988][ T4301] EXT4-fs (loop0): dirty_blocks=6144 [ 111.422696][ T4301] EXT4-fs (loop0): Block reservation details [ 111.544661][ T4301] EXT4-fs (loop0): i_reserved_data_blocks=384 [ 111.644934][ T4675] fuse: Unknown parameter 'use' [ 112.132391][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 113.455161][ T4705] netlink: 88 bytes leftover after parsing attributes in process `syz.1.84'. [ 113.726519][ T4705] netlink: 48 bytes leftover after parsing attributes in process `syz.1.84'. [ 113.779146][ T4707] Bluetooth: MGMT ver 1.22 [ 116.255668][ T4715] loop1: detected capacity change from 0 to 4096 [ 116.654090][ T4724] trusted_key: encrypted_key: insufficient parameters specified [ 116.851613][ T4729] loop0: detected capacity change from 0 to 1024 [ 119.144835][ T4745] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 119.923142][ T4762] loop0: detected capacity change from 0 to 164 [ 121.749044][ T4778] trusted_key: encrypted_key: insufficient parameters specified [ 125.412032][ T4806] netlink: 88 bytes leftover after parsing attributes in process `syz.2.115'. [ 125.456622][ T4806] netlink: 48 bytes leftover after parsing attributes in process `syz.2.115'. [ 128.331042][ T4834] loop2: detected capacity change from 0 to 2048 [ 128.419754][ T4834] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 128.642364][ T4839] lo speed is unknown, defaulting to 1000 [ 129.685931][ T9] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 129.728692][ T9] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 852 with error 28 [ 129.762009][ T9] EXT4-fs (loop2): This should not happen!! Data will be lost [ 129.762009][ T9] [ 129.788420][ T9] EXT4-fs (loop2): Total free blocks count 0 [ 129.804692][ T9] EXT4-fs (loop2): Free/Dirty block details [ 129.825002][ T9] EXT4-fs (loop2): free_blocks=2415919504 [ 129.835101][ T9] EXT4-fs (loop2): dirty_blocks=864 [ 129.854941][ T9] EXT4-fs (loop2): Block reservation details [ 129.868317][ T9] EXT4-fs (loop2): i_reserved_data_blocks=54 [ 129.933692][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 130.331705][ T4864] loop0: detected capacity change from 0 to 1024 [ 132.778811][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.785205][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.655830][ T4901] loop0: detected capacity change from 0 to 2048 [ 133.865647][ T4901] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 135.477193][ T4913] loop1: detected capacity change from 0 to 4096 [ 137.805648][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 137.806984][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 137.821691][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.822130][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.822865][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.823157][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.725299][ T4936] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 138.984006][ T4936] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1284 with error 28 [ 139.176879][ T4936] EXT4-fs (loop0): This should not happen!! Data will be lost [ 139.176879][ T4936] [ 139.445986][ T4936] EXT4-fs (loop0): Total free blocks count 0 [ 139.521571][ T4936] EXT4-fs (loop0): Free/Dirty block details [ 139.527536][ T4936] EXT4-fs (loop0): free_blocks=2415919504 [ 139.563692][ T4936] EXT4-fs (loop0): dirty_blocks=1296 [ 139.733681][ T4936] EXT4-fs (loop0): Block reservation details [ 139.746979][ T4936] EXT4-fs (loop0): i_reserved_data_blocks=81 [ 140.534285][ T4962] loop4: detected capacity change from 0 to 4096 [ 140.624989][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 142.696155][ T4965] loop1: detected capacity change from 0 to 4096 [ 143.067554][ T4274] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 143.130579][ T4274] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 145.334431][ T4989] loop0: detected capacity change from 0 to 2048 [ 146.268143][ T4989] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 148.832407][ T5023] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 148.858557][ T5023] overlayfs: failed to look up (tracing) for ino (-66) [ 149.051424][ T22] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 149.242102][ T22] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 149.257272][ T22] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 149.286092][ T22] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 149.315153][ T22] usb 5-1: config 220 has no interface number 2 [ 149.333031][ T22] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 149.363751][ T22] usb 5-1: config 220 interface 0 has no altsetting 0 [ 149.375563][ T22] usb 5-1: config 220 interface 76 has no altsetting 0 [ 149.398677][ T22] usb 5-1: config 220 interface 1 has no altsetting 0 [ 149.438986][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 149.467666][ T22] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 149.525590][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.554564][ T22] usb 5-1: Product: syz [ 149.582604][ T22] usb 5-1: Manufacturer: syz [ 149.604580][ T22] usb 5-1: SerialNumber: syz [ 149.976713][ T5032] loop0: detected capacity change from 0 to 1024 [ 151.231789][ T22] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 151.338082][ T22] usb 5-1: No valid video chain found. [ 151.344086][ T22] usb 5-1: selecting invalid altsetting 0 [ 151.365347][ T22] usb 5-1: selecting invalid altsetting 0 [ 151.376002][ T22] usbtest: probe of 5-1:220.1 failed with error -22 [ 151.386440][ T22] usb 5-1: USB disconnect, device number 2 [ 153.728576][ T5071] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 153.754265][ T5071] overlayfs: failed to look up (tracing) for ino (-66) [ 153.829528][ T5069] nullb0: [POWERTEC] p1 p2 [ 153.839209][ T5069] nullb0: p1 start 2149187596 is beyond EOD, truncated [ 153.851559][ T5073] loop0: detected capacity change from 0 to 2048 [ 153.864940][ T5069] nullb0: p2 size 1986356271 extends beyond EOD, truncated [ 154.089372][ T5073] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 155.794104][ T4514] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 155.935084][ T4514] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 156.153684][ T4514] EXT4-fs (loop0): This should not happen!! Data will be lost [ 156.153684][ T4514] [ 156.367950][ T4514] EXT4-fs (loop0): Total free blocks count 0 [ 156.470838][ T4514] EXT4-fs (loop0): Free/Dirty block details [ 156.476800][ T4514] EXT4-fs (loop0): free_blocks=2415919504 [ 156.568670][ T4514] EXT4-fs (loop0): dirty_blocks=8192 [ 156.574629][ T4514] EXT4-fs (loop0): Block reservation details [ 156.603372][ T4514] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 156.717998][ T4514] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 157.808148][ T5110] loop1: detected capacity change from 0 to 1024 [ 158.832413][ T5103] loop2: detected capacity change from 0 to 32768 [ 158.996148][ T4264] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 159.219378][ T5120] loop0: detected capacity change from 0 to 4096 [ 162.090821][ T4271] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 162.091459][ T5132] loop1: detected capacity change from 0 to 4096 [ 162.097287][ T4271] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 162.158868][ T5131] trusted_key: encrypted_key: insufficient parameters specified [ 164.503686][ T5151] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 164.520217][ T5151] overlayfs: failed to look up (tracing) for ino (-66) [ 166.888391][ T5173] loop1: detected capacity change from 0 to 4096 [ 167.421479][ T5175] loop1: detected capacity change from 0 to 32768 [ 167.467912][ T5169] loop2: detected capacity change from 0 to 32768 [ 167.478963][ T5169] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.210 (5169) [ 167.503289][ T5175] XFS (loop1): Mounting V5 Filesystem [ 167.510296][ T5169] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 167.538536][ T5169] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 167.550249][ T5169] BTRFS info (device loop2): force clearing of disk cache [ 167.557450][ T5169] BTRFS info (device loop2): metadata ratio 0 [ 167.564414][ T5169] BTRFS info (device loop2): enabling ssd optimizations [ 167.598482][ T5169] BTRFS info (device loop2): using spread ssd allocation scheme [ 167.607150][ T5169] BTRFS info (device loop2): using free space tree [ 167.635773][ T5175] XFS (loop1): Ending clean mount [ 167.645251][ T5175] XFS (loop1): Quotacheck needed: Please wait. [ 167.704880][ T5175] XFS (loop1): Quotacheck: Done. [ 168.492467][ T5169] BTRFS info (device loop2): rebuilding free space tree [ 168.700728][ T5212] loop4: detected capacity change from 0 to 4096 [ 168.793942][ T4284] XFS (loop1): Unmounting Filesystem [ 169.317210][ T4274] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 169.368404][ T4274] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 171.392167][ T5243] trusted_key: encrypted_key: insufficient parameters specified [ 172.021388][ T5245] loop3: detected capacity change from 0 to 256 [ 172.576528][ T5240] loop0: detected capacity change from 0 to 164 [ 172.757615][ T5245] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 174.040456][ T4272] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 174.326763][ T5268] loop3: detected capacity change from 0 to 512 [ 174.436667][ T5268] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 174.496327][ T5268] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 174.535862][ T5268] System zones: 1-12 [ 174.579115][ T5268] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 174.604930][ T5268] EXT4-fs (loop3): 1 truncate cleaned up [ 174.614815][ T5268] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 176.194245][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 176.382677][ T5294] loop4: detected capacity change from 0 to 4096 [ 176.395199][ T5294] EXT4-fs: Ignoring removed bh option [ 176.554218][ T5294] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 176.875123][ T5294] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 176.994860][ T5294] System zones: 0-5 [ 177.013539][ T5294] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 177.181540][ T5298] loop2: detected capacity change from 0 to 4096 [ 178.442386][ T5313] loop0: detected capacity change from 0 to 164 [ 178.471836][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 178.929440][ T5322] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 179.772522][ T5324] loop3: detected capacity change from 0 to 256 [ 179.838027][ T5324] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 181.276042][ T5351] loop0: detected capacity change from 0 to 32768 [ 181.312987][ T5351] XFS (loop0): Mounting V5 Filesystem [ 181.395367][ T5351] XFS (loop0): Ending clean mount [ 181.407192][ T5351] XFS (loop0): Quotacheck needed: Please wait. [ 181.469456][ T5351] XFS (loop0): Quotacheck: Done. [ 181.826074][ T27] audit: type=1800 audit(1778353353.309:3): pid=5364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.248" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0 [ 181.867844][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.274021][ T5367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.276288][ T4271] XFS (loop0): Unmounting Filesystem [ 183.275464][ T5371] loop3: detected capacity change from 0 to 4096 [ 183.357759][ T5373] kvm: pic: non byte write [ 183.773855][ T5380] loop0: detected capacity change from 0 to 4096 [ 186.298820][ T5391] loop2: detected capacity change from 0 to 164 [ 187.889811][ T4271] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 187.898308][ T4271] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 188.327378][ T5406] loop3: detected capacity change from 0 to 32768 [ 188.339879][ T5409] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.347427][ T5409] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.362079][ T5409] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 188.388228][ T5409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.260'. [ 188.820231][ T5414] loop1: detected capacity change from 0 to 256 [ 191.144768][ T5414] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 192.399853][ T5427] loop4: detected capacity change from 0 to 1024 [ 193.048745][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 193.238434][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 193.245878][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 193.461680][ T4275] Bluetooth: hci4: command 0x0406 tx timeout [ 193.470248][ T4275] Bluetooth: hci1: command 0x0406 tx timeout [ 194.586514][ T5445] loop1: detected capacity change from 0 to 4096 [ 194.659086][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.671946][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.382389][ T5451] trusted_key: encrypted_key: insufficient parameters specified [ 196.518401][ T5457] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 197.248596][ T5460] loop0: detected capacity change from 0 to 128 [ 198.281964][ T4284] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 198.291446][ T5456] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 198.307701][ T4284] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 198.827761][ T5465] netlink: 24 bytes leftover after parsing attributes in process `syz.4.276'. [ 200.314643][ T5484] loop3: detected capacity change from 0 to 1024 [ 200.998534][ T5490] loop1: detected capacity change from 0 to 164 [ 201.801560][ T5505] trusted_key: encrypted_key: insufficient parameters specified [ 203.180070][ T5514] loop4: detected capacity change from 0 to 128 [ 205.539865][ T5519] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 205.639078][ T5520] loop0: detected capacity change from 0 to 512 [ 205.715548][ T5520] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 205.802978][ T5520] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 206.463021][ T5520] System zones: 1-12 [ 206.649312][ T5520] EXT4-fs (loop0): 1 truncate cleaned up [ 206.688339][ T5520] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 206.961884][ T5542] loop3: detected capacity change from 0 to 1024 [ 207.433054][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 212.607168][ T5596] loop4: detected capacity change from 0 to 1024 [ 214.620046][ T5606] netlink: 11594 bytes leftover after parsing attributes in process `syz.4.314'. [ 214.674382][ T5606] netlink: 'syz.4.314': attribute type 7 has an invalid length. [ 214.717858][ T5615] loop1: detected capacity change from 0 to 2048 [ 214.754887][ T5606] netlink: 11594 bytes leftover after parsing attributes in process `syz.4.314'. [ 214.899321][ T5615] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 217.006042][ T11] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 217.088918][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 217.138276][ T11] EXT4-fs (loop1): This should not happen!! Data will be lost [ 217.138276][ T11] [ 217.168336][ T11] EXT4-fs (loop1): Total free blocks count 0 [ 217.178494][ T11] EXT4-fs (loop1): Free/Dirty block details [ 217.184432][ T11] EXT4-fs (loop1): free_blocks=2415919504 [ 217.320953][ T11] EXT4-fs (loop1): dirty_blocks=8192 [ 217.326324][ T11] EXT4-fs (loop1): Block reservation details [ 217.355440][ T11] EXT4-fs (loop1): i_reserved_data_blocks=512 [ 217.514450][ T4963] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 217.561121][ T5643] loop2: detected capacity change from 0 to 1024 [ 218.145790][ T5646] loop4: detected capacity change from 0 to 164 [ 218.659467][ T5654] loop1: detected capacity change from 0 to 4096 [ 221.485796][ T5676] loop4: detected capacity change from 0 to 2048 [ 221.629729][ T5676] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 222.416809][ T5691] loop2: detected capacity change from 0 to 1024 [ 224.880533][ T4369] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 225.008359][ T4369] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 225.008421][ T4369] EXT4-fs (loop4): This should not happen!! Data will be lost [ 225.008421][ T4369] [ 225.008437][ T4369] EXT4-fs (loop4): Total free blocks count 0 [ 225.008450][ T4369] EXT4-fs (loop4): Free/Dirty block details [ 225.008464][ T4369] EXT4-fs (loop4): free_blocks=2415919504 [ 225.008479][ T4369] EXT4-fs (loop4): dirty_blocks=8192 [ 225.008492][ T4369] EXT4-fs (loop4): Block reservation details [ 225.008504][ T4369] EXT4-fs (loop4): i_reserved_data_blocks=512 [ 226.025360][ T4369] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 227.047567][ T5729] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 227.140270][ T5729] overlayfs: failed to look up (tracing) for ino (-66) [ 227.657708][ T5742] loop1: detected capacity change from 0 to 1024 [ 228.181499][ T4274] EXT4-fs: 7 callbacks suppressed [ 228.181537][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 229.956397][ T5766] loop4: detected capacity change from 0 to 32768 [ 230.382568][ T5766] XFS (loop4): Mounting V5 Filesystem [ 230.602256][ T5771] loop1: detected capacity change from 0 to 2048 [ 230.657119][ T5766] XFS (loop4): Ending clean mount [ 230.666856][ T5766] XFS (loop4): Quotacheck needed: Please wait. [ 231.063740][ T5771] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 231.122081][ T5766] XFS (loop4): Quotacheck: Done. [ 231.538634][ T27] audit: type=1800 audit(1778353402.999:4): pid=5790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.360" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4430 res=0 errno=0 [ 231.580430][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.820061][ T5771] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 231.953692][ T5771] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.996196][ T4274] XFS (loop4): Unmounting Filesystem [ 232.032716][ T5791] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 232.112908][ T5791] overlayfs: failed to look up (tracing) for ino (-66) [ 233.282434][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 233.404594][ T5802] netlink: 'syz.1.369': attribute type 1 has an invalid length. [ 233.438398][ T5802] 8021q: adding VLAN 0 to HW filter on device bond1 [ 233.524949][ T5807] bond1: (slave ip6gretap1): making interface the new active one [ 234.210929][ T5807] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 234.385900][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 236.231342][ T5832] netlink: 24 bytes leftover after parsing attributes in process `syz.4.367'. [ 236.877899][ T5842] loop4: detected capacity change from 0 to 4096 [ 238.205185][ T5852] lo speed is unknown, defaulting to 1000 [ 239.743255][ T5866] loop2: detected capacity change from 0 to 2048 [ 240.382879][ T5866] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 240.750469][ T5868] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 240.763872][ T5866] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 240.828645][ T5866] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.908682][ T5886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.387'. [ 241.599619][ T5884] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 241.620266][ T5884] overlayfs: failed to look up (tracing) for ino (-66) [ 241.945730][ T5892] loop1: detected capacity change from 0 to 4096 [ 242.013132][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 244.156576][ T5918] loop4: detected capacity change from 0 to 164 [ 245.982536][ T5935] netlink: 24 bytes leftover after parsing attributes in process `syz.2.401'. [ 246.964627][ T5937] loop2: detected capacity change from 0 to 131072 [ 246.997739][ T5937] F2FS-fs (loop2): invalid crc value [ 247.017885][ T5941] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 247.032535][ T5941] overlayfs: failed to look up (tracing) for ino (-66) [ 247.171756][ T5946] loop0: detected capacity change from 0 to 1024 [ 247.445638][ T5937] F2FS-fs (loop2): Found nat_bits in checkpoint [ 247.491794][ T5937] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 247.508703][ T5937] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 247.541235][ T27] audit: type=1800 audit(1778353419.089:5): pid=5937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.403" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 250.542384][ T5975] loop3: detected capacity change from 0 to 128 [ 250.751940][ T5980] binder: 5979:5980 ioctl c0306201 2000000003c0 returned -14 [ 250.842482][ T5985] netlink: 24 bytes leftover after parsing attributes in process `syz.0.414'. [ 250.952501][ T5975] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 251.141979][ T5975] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 251.439225][ T5987] loop4: detected capacity change from 0 to 164 [ 252.517031][ T6001] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 252.591966][ T6001] overlayfs: failed to look up (tracing) for ino (-66) [ 253.277542][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 253.433488][ T6003] loop4: detected capacity change from 0 to 1024 [ 255.619325][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.628522][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.665364][ T6034] loop4: detected capacity change from 0 to 164 [ 259.047211][ T6051] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 259.125058][ T6051] overlayfs: failed to look up (tracing) for ino (-66) [ 259.963102][ T6058] netlink: 68 bytes leftover after parsing attributes in process `syz.1.431'. [ 260.897946][ T6063] loop0: detected capacity change from 0 to 1024 [ 262.546273][ T127] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 263.088521][ T127] usb 2-1: Using ep0 maxpacket: 16 [ 263.135316][ T127] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 263.365674][ T127] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 263.494918][ T127] usb 2-1: config 8 has no interface number 0 [ 263.501406][ T127] usb 2-1: config 8 interface 206 altsetting 1 has an invalid endpoint with address 0xF7, skipping [ 263.512557][ T127] usb 2-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.526526][ T127] usb 2-1: config 8 interface 206 has no altsetting 0 [ 263.549902][ T127] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 263.566934][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.583706][ T127] usb 2-1: Product: syz [ 263.591361][ T127] usb 2-1: Manufacturer: syz [ 263.596480][ T127] usb 2-1: SerialNumber: syz [ 263.994195][ T127] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 265.027455][ T6093] loop1: detected capacity change from 0 to 164 [ 266.407638][ T127] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 266.420838][ T127] garmin_gps: probe of ttyUSB0 failed with error -22 [ 266.430556][ T127] usb 2-1: USB disconnect, device number 2 [ 266.438351][ T127] garmin_gps 2-1:8.206: device disconnected [ 266.900349][ T6103] block device autoloading is deprecated and will be removed. [ 266.911285][ T6100] block device autoloading is deprecated and will be removed. [ 268.252745][ T6122] loop2: detected capacity change from 0 to 1024 [ 271.980808][ T6147] loop2: detected capacity change from 0 to 164 [ 272.341979][ T6154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.456'. [ 272.894021][ T6156] netlink: 68 bytes leftover after parsing attributes in process `syz.0.459'. [ 276.564290][ T6190] loop4: detected capacity change from 0 to 1024 [ 277.063952][ T6197] loop2: detected capacity change from 0 to 164 [ 282.026055][ T6237] loop2: detected capacity change from 0 to 164 [ 282.459597][ T6240] loop3: detected capacity change from 0 to 32768 [ 283.317568][ T6240] XFS (loop3): Mounting V5 Filesystem [ 283.652448][ T6240] XFS (loop3): Ending clean mount [ 283.660041][ T6240] XFS (loop3): Quotacheck needed: Please wait. [ 283.800328][ T6240] XFS (loop3): Quotacheck: Done. [ 283.928745][ T6261] loop2: detected capacity change from 0 to 2048 [ 284.050662][ T6261] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 284.145194][ T27] audit: type=1800 audit(1778353455.639:6): pid=6268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.486" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0 [ 284.624067][ T4273] XFS (loop3): Unmounting Filesystem [ 284.937903][ T4335] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 285.019287][ T4335] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 285.048492][ T4335] EXT4-fs (loop2): This should not happen!! Data will be lost [ 285.048492][ T4335] [ 285.098249][ T4335] EXT4-fs (loop2): Total free blocks count 0 [ 285.109024][ T4335] EXT4-fs (loop2): Free/Dirty block details [ 285.125182][ T4335] EXT4-fs (loop2): free_blocks=2415919504 [ 285.218275][ T4335] EXT4-fs (loop2): dirty_blocks=4336 [ 285.223627][ T4335] EXT4-fs (loop2): Block reservation details [ 285.266980][ T4335] EXT4-fs (loop2): i_reserved_data_blocks=271 [ 285.564187][ T4335] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 286.869311][ T6286] loop1: detected capacity change from 0 to 4096 [ 287.332658][ T6289] loop4: detected capacity change from 0 to 1024 [ 288.063702][ T6289] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 292.347423][ T4274] EXT4-fs warning (device loop4): empty_inline_dir:1884: bad inline directory (dir #12) - no `..' [ 292.463407][ T4274] EXT4-fs warning (device loop4): empty_inline_dir:1884: bad inline directory (dir #12) - no `..' [ 292.490865][ T4274] EXT4-fs warning (device loop4): empty_inline_dir:1884: bad inline directory (dir #12) - no `..' [ 292.502695][ T4274] EXT4-fs warning (device loop4): empty_inline_dir:1884: bad inline directory (dir #12) - no `..' [ 292.514424][ T4274] EXT4-fs warning (device loop4): empty_inline_dir:1884: bad inline directory (dir #12) - no `..' [ 292.528790][ T4274] EXT4-fs warning (device loop4): empty_inline_dir:1884: bad inline directory (dir #12) - no `..' [ 292.540776][ T4274] EXT4-fs warning (device loop4): empty_inline_dir:1884: bad inline directory (dir #12) - no `..' [ 292.552151][ T4274] EXT4-fs warning (device loop4): empty_inline_dir:1884: bad inline directory (dir #12) - no `..' [ 292.564100][ T4274] EXT4-fs warning (device loop4): empty_inline_dir:1884: bad inline directory (dir #12) - no `..' [ 292.575369][ T4274] EXT4-fs warning (device loop4): empty_inline_dir:1884: bad inline directory (dir #12) - no `..' [ 292.767044][ T6125] EXT4-fs (loop4): unmounting filesystem. [ 293.030196][ T6316] loop0: detected capacity change from 0 to 2048 [ 293.147044][ T6316] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 293.486590][ T6330] Bluetooth: hci0: unsupported parameter 255 [ 293.516052][ T6330] Bluetooth: hci0: unsupported parameter 255 [ 293.863268][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 294.186730][ T4365] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.760059][ T4365] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.456675][ T6348] loop0: detected capacity change from 0 to 4096 [ 296.884284][ T4365] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.736722][ T4365] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.509606][ T6382] loop0: detected capacity change from 0 to 164 [ 299.535366][ T4275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.587321][ T4275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.673978][ T4275] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.685408][ T4275] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.693452][ T4277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 299.702431][ T4275] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.753162][ T6380] loop2: detected capacity change from 0 to 2048 [ 299.808041][ T6380] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 299.863757][ T6383] lo speed is unknown, defaulting to 1000 [ 301.147357][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 301.622439][ T6383] chnl_net:caif_netlink_parms(): no params data found [ 301.709761][ T6422] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 301.912193][ T4275] Bluetooth: hci3: command 0x0409 tx timeout [ 302.820049][ T6432] loop3: detected capacity change from 0 to 32768 [ 302.946750][ T6432] XFS (loop3): Mounting V5 Filesystem [ 302.994797][ T6432] XFS (loop3): Ending clean mount [ 303.004301][ T6432] XFS (loop3): Quotacheck needed: Please wait. [ 303.047778][ T6436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.126720][ T6432] XFS (loop3): Quotacheck: Done. [ 303.568561][ T27] audit: type=1800 audit(1778353474.979:7): pid=6453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.534" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0 [ 304.017153][ T4275] Bluetooth: hci3: command 0x041b tx timeout [ 304.072994][ T4273] XFS (loop3): Unmounting Filesystem [ 304.117778][ T6455] loop0: detected capacity change from 0 to 2048 [ 304.365666][ T6383] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.373506][ T6455] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 304.393288][ T6383] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.730439][ T6383] device bridge_slave_0 entered promiscuous mode [ 304.996111][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 305.339353][ T6383] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.346508][ T6383] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.381867][ T6383] device bridge_slave_1 entered promiscuous mode [ 305.483879][ T6383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.542390][ T6484] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 306.098251][ T4275] Bluetooth: hci3: command 0x040f tx timeout [ 306.271265][ T6383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.430519][ T6383] team0: Port device team_slave_0 added [ 306.439237][ T6383] team0: Port device team_slave_1 added [ 307.332306][ T6499] loop3: detected capacity change from 0 to 164 [ 307.429103][ T6383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.438284][ T6383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.490265][ T6383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.747627][ T4365] device hsr_slave_0 left promiscuous mode [ 307.857278][ T4365] device hsr_slave_1 left promiscuous mode [ 307.904975][ T6505] loop0: detected capacity change from 0 to 32768 [ 307.942962][ T6507] loop1: detected capacity change from 0 to 2048 [ 307.951895][ T4365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.972325][ T6505] XFS (loop0): Mounting V5 Filesystem [ 307.995952][ T4365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.018029][ T6503] loop2: detected capacity change from 0 to 4096 [ 308.056289][ T6505] XFS (loop0): Ending clean mount [ 308.068307][ T6505] XFS (loop0): Quotacheck needed: Please wait. [ 308.100363][ T4365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.108054][ T4365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.117921][ T4365] device bridge_slave_1 left promiscuous mode [ 308.126862][ T4365] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.137125][ T4365] device bridge_slave_0 left promiscuous mode [ 308.143480][ T4365] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.189453][ T4275] Bluetooth: hci3: command 0x0419 tx timeout [ 308.298630][ T6505] XFS (loop0): Quotacheck: Done. [ 308.502431][ T4365] device veth1_macvtap left promiscuous mode [ 308.520978][ T4365] device veth0_macvtap left promiscuous mode [ 308.815571][ T4365] device veth1_vlan left promiscuous mode [ 308.879378][ T4365] device veth0_vlan left promiscuous mode [ 309.054295][ T6507] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 309.094624][ T4271] XFS (loop0): Unmounting Filesystem [ 309.593194][ T6535] loop2: detected capacity change from 0 to 4096 [ 309.735478][ T6536] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 310.650495][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 312.271190][ T6570] loop2: detected capacity change from 0 to 164 [ 312.294276][ T6569] "syz.1.560" (6569) uses obsolete ecb(arc4) skcipher [ 312.546360][ T6572] loop1: detected capacity change from 0 to 4096 [ 313.072722][ T4365] team0 (unregistering): Port device team_slave_1 removed [ 313.123978][ T4365] team0 (unregistering): Port device team_slave_0 removed [ 313.183163][ T4365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.258748][ T4365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.463618][ T6579] loop2: detected capacity change from 0 to 2048 [ 313.638334][ T6581] trusted_key: encrypted_key: key user:syz not found [ 313.665005][ T6579] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 314.019343][ T4365] bond0 (unregistering): Released all slaves [ 314.046814][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 314.164383][ T6383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.175255][ T6383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.210288][ T6383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.285315][ T6588] trusted_key: encrypted_key: key user:syz not found [ 316.294635][ T6383] device hsr_slave_0 entered promiscuous mode [ 317.261989][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.268411][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.319983][ T6383] device hsr_slave_1 entered promiscuous mode [ 317.648557][ T6383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.845059][ T6383] Cannot create hsr debugfs directory [ 318.379666][ T6612] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 318.388473][ T6612] overlayfs: overlapping lowerdir path [ 319.487003][ T6383] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 319.517043][ T6622] loop2: detected capacity change from 0 to 164 [ 319.536059][ T6617] loop3: detected capacity change from 0 to 4096 [ 319.944550][ T6383] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 320.064931][ T6383] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 320.115235][ T6383] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 320.164641][ T6625] loop1: detected capacity change from 0 to 2048 [ 320.335248][ T6625] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 320.627395][ T6383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.642706][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 320.668846][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 320.690274][ T6383] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.711151][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 320.731072][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 320.756039][ T4936] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.763251][ T4936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.772039][ T6636] loop0: detected capacity change from 0 to 32768 [ 320.873431][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 320.884662][ T6636] XFS (loop0): Mounting V5 Filesystem [ 320.896423][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 321.014542][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 321.044642][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 321.063073][ T6636] XFS (loop0): Ending clean mount [ 321.070973][ T6636] XFS (loop0): Quotacheck needed: Please wait. [ 321.131658][ T6636] XFS (loop0): Quotacheck: Done. [ 321.226325][ T4936] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.234820][ T4936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.428603][ T6255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 322.514133][ T4271] XFS (loop0): Unmounting Filesystem [ 322.552235][ T6255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 322.582979][ T6255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 322.612959][ T6255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 322.636579][ T6255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 322.648622][ T6255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 322.676288][ T6383] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 322.744392][ T6383] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 322.868800][ T6255] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 322.902683][ T6255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 322.939697][ T6255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 322.995408][ T6255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 323.058286][ T6255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 323.067060][ T6255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 323.451927][ T6684] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 323.489335][ T6684] overlayfs: overlapping lowerdir path [ 324.629766][ T6695] loop3: detected capacity change from 0 to 4096 [ 326.838308][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 327.160382][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 327.227634][ T6725] trusted_key: encrypted_key: key user:syz not found [ 327.272972][ T6383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.513247][ T6738] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 327.521878][ T6738] overlayfs: overlapping lowerdir path [ 330.099845][ T6759] loop2: detected capacity change from 0 to 164 [ 333.044972][ T6789] trusted_key: encrypted_key: key user:syz not found [ 333.364274][ T6798] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 333.379655][ T6798] overlayfs: overlapping lowerdir path [ 334.793046][ T6809] "syz.3.611" (6809) uses obsolete ecb(arc4) skcipher [ 334.968493][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 334.978918][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 335.509485][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 335.525687][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 335.585550][ T6383] device veth0_vlan entered promiscuous mode [ 336.004640][ T6383] device veth1_vlan entered promiscuous mode [ 336.420853][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 336.428934][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 336.439321][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 336.605726][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 336.666551][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.683102][ T6383] device veth0_macvtap entered promiscuous mode [ 336.739771][ T6383] device veth1_macvtap entered promiscuous mode [ 336.793346][ T6827] trusted_key: encrypted_key: key user:syz not found [ 336.799505][ T6383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.817064][ T6383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.826946][ T6383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.837692][ T6383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.889067][ T6383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.076546][ T6383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.105790][ T6383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.116834][ T6383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.129338][ T6383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.138971][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 337.164476][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 337.176394][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 337.554857][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 337.814099][ T6383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.838051][ T6383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.898892][ T6383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.006327][ T6383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.049547][ T6383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.087997][ T6383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.122635][ T6383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.154191][ T6383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.894031][ T6383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.956159][ T6383] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.033243][ T6383] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.054506][ T6383] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.064414][ T6383] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.238427][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 339.264214][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 340.087148][ T4471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.303389][ T4471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.650772][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 341.895599][ T6877] trusted_key: encrypted_key: key user:syz not found [ 341.930873][ T4369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.946068][ T4369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.075977][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 345.386259][ T6920] loop3: detected capacity change from 0 to 32768 [ 346.774752][ T6925] netlink: 24 bytes leftover after parsing attributes in process `syz.0.636'. [ 347.201221][ T6931] trusted_key: encrypted_key: key user:syz not found [ 347.362782][ T6920] XFS (loop3): Mounting V5 Filesystem [ 347.604793][ T6920] XFS (loop3): Ending clean mount [ 347.612347][ T6920] XFS (loop3): Quotacheck needed: Please wait. [ 347.732165][ T6920] XFS (loop3): Quotacheck: Done. [ 348.138188][ T27] audit: type=1800 audit(1778353525.622:8): pid=6954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.637" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 348.713068][ T4273] XFS (loop3): Unmounting Filesystem [ 351.955728][ T6991] netlink: 24 bytes leftover after parsing attributes in process `syz.3.651'. [ 352.516842][ T6993] trusted_key: encrypted_key: key user:syz not found [ 353.062077][ T7007] loop3: detected capacity change from 0 to 32768 [ 353.384667][ T7007] XFS (loop3): Mounting V5 Filesystem [ 353.403241][ T27] audit: type=1326 audit(1778353530.952:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.1.657" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe80519cdd9 code=0x0 [ 353.585385][ T7007] XFS (loop3): Ending clean mount [ 353.593797][ T7007] XFS (loop3): Quotacheck needed: Please wait. [ 353.696357][ T7007] XFS (loop3): Quotacheck: Done. [ 354.283093][ T27] audit: type=1800 audit(1778353531.562:10): pid=7032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.655" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0 [ 354.324828][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.953906][ T4273] XFS (loop3): Unmounting Filesystem [ 355.849988][ T7054] loop1: detected capacity change from 0 to 164 [ 355.908056][ T7056] netlink: 24 bytes leftover after parsing attributes in process `syz.5.665'. [ 356.880685][ T7058] trusted_key: encrypted_key: key user:syz not found [ 359.098433][ T7105] netlink: 24 bytes leftover after parsing attributes in process `syz.0.679'. [ 360.188731][ T7112] trusted_key: encrypted_key: key user:syz not found [ 363.159802][ T7145] loop1: detected capacity change from 0 to 32768 [ 363.253092][ T7146] loop3: detected capacity change from 0 to 1024 [ 363.285382][ T7145] XFS (loop1): Mounting V5 Filesystem [ 363.509462][ T7161] netlink: 68 bytes leftover after parsing attributes in process `syz.0.692'. [ 364.328038][ T7145] XFS (loop1): Ending clean mount [ 364.335564][ T7145] XFS (loop1): Quotacheck needed: Please wait. [ 364.363598][ T7145] XFS (loop1): Quotacheck: Done. [ 364.654477][ T27] audit: type=1800 audit(1778353542.142:11): pid=7170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.690" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4430 res=0 errno=0 [ 365.052479][ T7169] loop0: detected capacity change from 0 to 4096 [ 365.092816][ T4284] XFS (loop1): Unmounting Filesystem [ 366.231804][ T7192] trusted_key: encrypted_key: key user:syz not found [ 369.213788][ T7224] loop0: detected capacity change from 0 to 4096 [ 371.269043][ T7258] netlink: 68 bytes leftover after parsing attributes in process `syz.3.704'. [ 371.933358][ T7272] loop1: detected capacity change from 0 to 1024 [ 373.877651][ T7283] loop0: detected capacity change from 0 to 4096 [ 374.932915][ T27] audit: type=1326 audit(1778353552.462:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7285 comm="syz.3.727" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c3ef9cdd9 code=0x0 [ 376.161597][ T7315] netlink: 68 bytes leftover after parsing attributes in process `syz.5.734'. [ 378.701880][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.715845][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.050735][ T7360] netlink: 68 bytes leftover after parsing attributes in process `syz.5.748'. [ 380.566030][ T7375] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.574763][ T7375] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.586867][ T7375] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 380.606936][ T7375] netlink: 24 bytes leftover after parsing attributes in process `syz.5.751'. [ 382.058262][ T4275] Bluetooth: unknown link type 73 [ 382.197205][ T7416] netlink: 68 bytes leftover after parsing attributes in process `syz.0.761'. [ 382.209318][ T5269] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 383.000220][ T5269] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 383.025293][ T5269] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.194560][ T5269] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 383.204199][ T5269] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.227581][ T5269] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 383.238023][ T5269] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 383.246527][ T5269] usb 3-1: Product: syz [ 383.358199][ T5269] usb 3-1: Manufacturer: syz [ 383.412335][ T5269] cdc_wdm 3-1:1.0: skipping garbage [ 383.417603][ T5269] cdc_wdm 3-1:1.0: skipping garbage [ 383.453075][ T5269] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 383.463417][ T5269] cdc_wdm 3-1:1.0: Unknown control protocol [ 386.059651][ T7435] loop3: detected capacity change from 0 to 1024 [ 386.135106][ T127] usb 3-1: USB disconnect, device number 2 [ 387.257259][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.771'. [ 387.277266][ T7452] netlink: 64 bytes leftover after parsing attributes in process `syz.2.772'. [ 387.363327][ T7456] overlayfs: overlapping lowerdir path [ 387.605838][ T7462] overlayfs: unrecognized mount option "upperdir=" or missing value [ 387.772046][ T7470] capability: warning: `syz.5.773' uses 32-bit capabilities (legacy support in use) [ 387.850924][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 388.097492][ T7] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 388.289552][ T7] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 388.463873][ T7] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 390.075274][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.366015][ T7] usb 4-1: can't set config #27, error -71 [ 390.424738][ T7498] Zero length message leads to an empty skb [ 390.442908][ T7] usb 4-1: USB disconnect, device number 3 [ 392.951984][ T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 393.010225][ T7528] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.125264][ T7538] tipc: Started in network mode [ 393.158360][ T7538] tipc: Node identity 92d12060a04, cluster identity 4711 [ 393.168484][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 393.174358][ T7538] tipc: Enabled bearer , priority 0 [ 393.190967][ T7] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 393.193905][ T7542] device syzkaller0 entered promiscuous mode [ 393.291632][ T7] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 393.366316][ T7528] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.382949][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.776636][ T7] usb 6-1: config 0 descriptor?? [ 393.840717][ T7538] tipc: Resetting bearer [ 393.981765][ T7528] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.010564][ T7529] tipc: Resetting bearer [ 394.046984][ T7529] tipc: Disabling bearer [ 394.195720][ T7528] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.727675][ T7560] netlink: 24 bytes leftover after parsing attributes in process `syz.1.792'. [ 395.150210][ T7528] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.231718][ T7528] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.357944][ T7528] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.400174][ T7528] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.308008][ T7583] netlink: 68 bytes leftover after parsing attributes in process `syz.3.799'. [ 396.785597][ T7588] loop1: detected capacity change from 0 to 164 [ 397.603075][ T7597] trusted_key: encrypted_key: key user:syz not found [ 397.965268][ T7589] loop0: detected capacity change from 0 to 1024 [ 399.330951][ T7618] netlink: 24 bytes leftover after parsing attributes in process `syz.0.807'. [ 403.075520][ T7656] fscrypt: Error allocating hmac(sha512): -2 [ 403.180415][ T4650] usb 6-1: USB disconnect, device number 2 [ 404.179348][ T5269] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 404.610541][ T5269] usb 3-1: Using ep0 maxpacket: 8 [ 404.651836][ T5269] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 405.032595][ T5269] usb 3-1: config 0 has no interface number 0 [ 405.039098][ T5269] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 405.050143][ T5269] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 405.084172][ T7665] loop3: detected capacity change from 0 to 1024 [ 405.096038][ T5269] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 405.187437][ T5269] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 405.368972][ T7691] netlink: 24 bytes leftover after parsing attributes in process `syz.1.821'. [ 405.439137][ T5269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.478081][ T5269] usb 3-1: config 0 descriptor?? [ 405.756740][ T5269] ldusb 3-1:0.55: Interrupt in endpoint not found [ 405.774955][ T5269] usb 3-1: USB disconnect, device number 3 [ 406.869900][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.826'. [ 407.015181][ T7707] overlayfs: overlapping lowerdir path [ 408.100695][ T7734] loop2: detected capacity change from 0 to 164 [ 408.118186][ T5269] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 408.310157][ T5269] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 408.327843][ T5269] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 408.348329][ T4351] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 408.387904][ T5269] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 408.417466][ T5269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.477067][ T7707] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 408.548612][ T4351] usb 6-1: Using ep0 maxpacket: 8 [ 408.561664][ T4351] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 408.617707][ T4351] usb 6-1: config 0 has no interface number 0 [ 408.662730][ T4351] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 408.781343][ T4351] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 408.863302][ T4351] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 408.887959][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.833'. [ 408.921895][ T4351] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 408.940993][ T4351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.967954][ T4351] usb 6-1: config 0 descriptor?? [ 409.010994][ T4351] ldusb 6-1:0.55: Interrupt in endpoint not found [ 409.013773][ T7] usb 1-1: USB disconnect, device number 4 [ 409.353547][ T4321] usb 6-1: USB disconnect, device number 3 [ 411.392557][ T7770] netlink: 24 bytes leftover after parsing attributes in process `syz.0.838'. [ 411.528600][ T4351] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 411.788707][ T4351] usb 4-1: Using ep0 maxpacket: 8 [ 411.823216][ T4351] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 411.938215][ T4351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.001111][ T4351] pvrusb2: Hardware description: Terratec Grabster AV400 [ 412.012804][ T4351] pvrusb2: ********** [ 412.017071][ T4351] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 412.100122][ T4351] pvrusb2: Important functionality might not be entirely working. [ 412.131103][ T7760] loop5: detected capacity change from 0 to 1024 [ 412.157819][ T4351] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 412.311281][ T4351] pvrusb2: ********** [ 413.320594][ T2310] pvrusb2: Invalid write control endpoint [ 413.702722][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.711193][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.739641][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.754345][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.767722][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.776989][ T4279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.798166][ T5269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.811205][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.871220][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.890119][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.987677][ T2310] pvrusb2: Invalid write control endpoint [ 414.041787][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 414.194711][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 414.962041][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 415.087973][ T7798] netlink: 68 bytes leftover after parsing attributes in process `syz.5.844'. [ 415.142570][ T2310] pvrusb2: Device being rendered inoperable [ 415.258265][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 415.286445][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 415.430402][ T14] usb 4-1: USB disconnect, device number 4 [ 415.533080][ T2310] pvrusb2: Attached sub-driver cx25840 [ 415.609578][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 415.768256][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 415.907385][ T7806] overlayfs: failed to resolve './file7': -2 [ 416.015156][ T7808] trusted_key: encrypted_key: key user:syz not found [ 416.767617][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.846'. [ 416.900430][ T7810] overlayfs: overlapping lowerdir path [ 417.789794][ T7817] device syzkaller0 entered promiscuous mode [ 418.338225][ T4360] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 418.531596][ T4360] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 418.546254][ T4360] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 419.352617][ T4360] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 419.449660][ T6255] net_ratelimit: 5 callbacks suppressed [ 419.449671][ T6255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.464042][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.472222][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.481674][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.490241][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.512368][ T4360] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.562162][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.856'. [ 419.574148][ T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.583004][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.608345][ T4360] usb 1-1: can't set config #27, error -71 [ 419.661699][ T4360] usb 1-1: USB disconnect, device number 5 [ 419.661785][ T7848] overlayfs: overlapping lowerdir path [ 421.199066][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.451869][ T7859] fscrypt: Error allocating hmac(sha512): -2 [ 421.738294][ T4653] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 422.664225][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.732814][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.864013][ T4653] usb 6-1: device descriptor read/all, error -71 [ 425.377893][ T4923] net_ratelimit: 1 callbacks suppressed [ 425.377909][ T4923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.392391][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.438046][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.450239][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.627212][ T7918] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 425.769288][ T4653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.461652][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.871'. [ 426.496537][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.588879][ T7921] overlayfs: overlapping lowerdir path [ 427.600094][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.618282][ T4653] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 427.792414][ T7938] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 428.549029][ T4653] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 428.605471][ T4653] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 428.656584][ T5269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.724201][ T4653] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 429.457916][ T7950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.875'. [ 429.467054][ T4653] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.489515][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.524292][ T4653] usb 3-1: can't set config #27, error -71 [ 429.535476][ T7950] overlayfs: overlapping lowerdir path [ 429.584259][ T4653] usb 3-1: USB disconnect, device number 4 [ 429.706607][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.098338][ T4653] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 430.292554][ T4653] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 430.317845][ T4653] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 430.353434][ T4653] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 430.398248][ T4653] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.452676][ T7950] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 431.286499][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.294700][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.321920][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.330793][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.468991][ T7] usb 3-1: USB disconnect, device number 5 [ 431.933760][ T7990] loop0: detected capacity change from 0 to 32768 [ 432.102333][ T4263] udevd[4263]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 432.229432][ T7990] XFS (loop0): Mounting V5 Filesystem [ 432.287176][ T7990] XFS (loop0): Ending clean mount [ 432.400647][ T7990] XFS (loop0): Quotacheck needed: Please wait. [ 432.414243][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.505839][ T8005] netlink: 24 bytes leftover after parsing attributes in process `syz.5.887'. [ 432.576617][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.589605][ T7990] XFS (loop0): Quotacheck: Done. [ 432.836027][ T27] audit: type=1800 audit(1778353610.312:13): pid=8007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.885" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0 [ 432.912171][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.5.889'. [ 433.105981][ T4271] XFS (loop0): Unmounting Filesystem [ 433.150598][ T8015] overlayfs: overlapping lowerdir path [ 433.463653][ T5269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.668238][ T4653] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 433.865394][ T4653] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 433.940584][ T4653] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 433.978545][ T4653] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 433.987715][ T4653] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.088046][ T8010] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 434.909283][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.149831][ T4322] usb 6-1: USB disconnect, device number 6 [ 436.384895][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.402203][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.804654][ T14] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 436.952304][ T8063] overlayfs: failed to resolve './file7': -2 [ 437.073977][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.085538][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.471896][ T14] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 437.826502][ T14] usb 4-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 437.863723][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.192342][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.288638][ T14] usb 4-1: config 0 descriptor?? [ 438.704044][ T8070] loop1: detected capacity change from 0 to 164 [ 438.715156][ T14] hid-alps 0003:044E:120C.0001: unknown main item tag 0x0 [ 438.724206][ T8068] netlink: 24 bytes leftover after parsing attributes in process `syz.5.899'. [ 438.758204][ T14] hid-alps 0003:044E:120C.0001: unexpected long global item [ 438.793110][ T14] hid-alps 0003:044E:120C.0001: parse failed [ 438.812016][ T14] hid-alps: probe of 0003:044E:120C.0001 failed with error -22 [ 438.911218][ T14] usb 4-1: USB disconnect, device number 5 [ 439.671921][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.689326][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.930471][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.936849][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.020833][ T8085] netlink: 'syz.3.903': attribute type 21 has an invalid length. [ 440.029439][ T8085] netlink: 132 bytes leftover after parsing attributes in process `syz.3.903'. [ 440.613226][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.743906][ T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.424861][ T8100] netlink: 68 bytes leftover after parsing attributes in process `syz.2.904'. [ 442.097933][ T8099] syz.5.907 (8099) used greatest stack depth: 20664 bytes left [ 442.113794][ T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.317833][ T8107] netlink: 24 bytes leftover after parsing attributes in process `syz.5.910'. [ 442.467048][ T8113] loop5: detected capacity change from 0 to 164 [ 442.729174][ T4653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.133598][ T5269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.540473][ T8133] loop0: detected capacity change from 0 to 32768 [ 443.637363][ T8133] XFS (loop0): Mounting V5 Filesystem [ 443.686815][ T8133] XFS (loop0): Ending clean mount [ 443.696633][ T8133] XFS (loop0): Quotacheck needed: Please wait. [ 443.811139][ T8133] XFS (loop0): Quotacheck: Done. [ 443.969995][ T27] audit: type=1800 audit(1778353621.522:14): pid=8143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.915" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0 [ 444.176222][ T5269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.331542][ T4271] XFS (loop0): Unmounting Filesystem [ 445.221687][ T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.768677][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.268261][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.468341][ T127] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 447.643265][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.695284][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.705574][ T127] usb 6-1: Using ep0 maxpacket: 8 [ 448.718884][ T127] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 448.786460][ T127] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.808404][ T4650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.849845][ T127] pvrusb2: Hardware description: Terratec Grabster AV400 [ 448.898987][ T127] pvrusb2: ********** [ 448.903056][ T127] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 448.940517][ T8190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.923'. [ 448.952102][ T127] pvrusb2: Important functionality might not be entirely working. [ 448.978151][ T127] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 449.008175][ T127] pvrusb2: ********** [ 450.105394][ T5269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.238019][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.879116][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.156765][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.179057][ T2310] pvrusb2: Invalid write control endpoint [ 451.194155][ T127] usb 6-1: USB disconnect, device number 7 [ 451.269501][ T5269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.397994][ T2310] pvrusb2: Invalid write control endpoint [ 451.410061][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 451.506750][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 451.553598][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 451.751393][ T2310] pvrusb2: Device being rendered inoperable [ 451.761685][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 451.781451][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 451.801034][ T2310] pvrusb2: Attached sub-driver cx25840 [ 451.810937][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 451.861018][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 451.899731][ T8204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.927'. [ 452.538285][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.860208][ T5269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.868973][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.931487][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.939676][ T5269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.948056][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.093261][ T8219] loop0: detected capacity change from 0 to 164 [ 454.975791][ T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.027836][ T5269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.099076][ T4650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.208313][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.233558][ T5269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.796310][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.935'. [ 456.890808][ T8249] overlayfs: overlapping lowerdir path [ 457.238173][ T5269] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 457.471593][ T5269] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 457.509192][ T5269] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 457.522077][ T8260] netlink: 68 bytes leftover after parsing attributes in process `syz.2.938'. [ 457.570302][ T5269] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 457.610064][ T5269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.633197][ T8249] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 457.972634][ T14] usb 2-1: USB disconnect, device number 3 [ 458.023921][ T8270] netlink: 'syz.2.940': attribute type 21 has an invalid length. [ 458.038471][ T8270] netlink: 132 bytes leftover after parsing attributes in process `syz.2.940'. [ 458.348542][ T5269] net_ratelimit: 4 callbacks suppressed [ 458.348556][ T5269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.363220][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.800630][ T8285] PKCS7: Unknown OID: [4] 0.0 [ 458.806018][ T8285] PKCS7: Only support pkcs7_signedData type [ 458.874083][ T8286] netlink: 452 bytes leftover after parsing attributes in process `syz.3.936'. [ 459.154724][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.854916][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.863063][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.886673][ T5269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.040570][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.109851][ T8299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.118932][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.305354][ T8299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.246607][ T8323] netlink: 'syz.3.951': attribute type 21 has an invalid length. [ 461.302533][ T8323] netlink: 132 bytes leftover after parsing attributes in process `syz.3.951'. [ 461.490818][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.954'. [ 461.593739][ T8335] overlayfs: overlapping lowerdir path [ 462.098263][ T4653] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 462.330118][ T4653] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 462.348216][ T4653] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 462.368194][ T4653] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 462.387656][ T4653] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.467383][ T8330] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 462.562674][ T8345] PKCS7: Unknown OID: [4] 0.0 [ 462.567499][ T8345] PKCS7: Only support pkcs7_signedData type [ 462.601533][ T8345] netlink: 452 bytes leftover after parsing attributes in process `syz.5.956'. [ 464.270121][ T4653] usb 3-1: USB disconnect, device number 6 [ 464.279945][ T4351] net_ratelimit: 17 callbacks suppressed [ 464.279961][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.303076][ T5269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.737773][ T8336] syz.3.955 (8336) used greatest stack depth: 17776 bytes left [ 465.194429][ T8366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.203490][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.214755][ T4650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.233956][ T8366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.243159][ T4650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.269818][ T4650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.278639][ T8373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.282855][ T4650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.963260][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.974'. [ 468.272485][ T8412] overlayfs: overlapping lowerdir path [ 469.369687][ T4650] net_ratelimit: 21 callbacks suppressed [ 469.369705][ T4650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.379164][ T4351] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 469.383934][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.632250][ T4351] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 469.664300][ T8429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.977'. [ 469.682251][ T4351] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 469.735064][ T4351] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 469.799089][ T4351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.638524][ T8412] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 470.771897][ T5269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.781118][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.877563][ T4351] usb 1-1: USB disconnect, device number 6 [ 471.288691][ T4650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.361719][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.370181][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.433660][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.711787][ T8457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.720774][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.005214][ T8471] PKCS7: Unknown OID: [4] 0.0 [ 474.010193][ T8471] PKCS7: Only support pkcs7_signedData type [ 474.656297][ T4351] net_ratelimit: 3 callbacks suppressed [ 474.656314][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.670453][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.956123][ T8478] overlayfs: failed to set xattr on upper [ 474.962420][ T8478] overlayfs: ...falling back to index=off,metacopy=off. [ 475.044228][ T8478] device macsec1 entered promiscuous mode [ 476.188916][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.197211][ T4650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.215453][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.226175][ T4650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.234861][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.796320][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.805962][ T4650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.815633][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.891830][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.992'. [ 477.120110][ T8488] overlayfs: overlapping lowerdir path [ 477.213624][ T4351] kernel write not supported for file [eventfd] (pid: 4351 comm: kworker/1:5) [ 477.706463][ T8500] kAFS: No cell specified [ 478.278327][ T4322] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 478.365947][ T8509] netlink: 24 bytes leftover after parsing attributes in process `syz.5.996'. [ 479.926330][ T4360] net_ratelimit: 3 callbacks suppressed [ 479.926346][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.947356][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.102025][ T4322] usb 4-1: device descriptor read/all, error -71 [ 480.273383][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.281827][ T4650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.545478][ T8516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.602327][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.808969][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.291433][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.292788][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.308727][ T5267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.640537][ T8525] PKCS7: Unknown OID: [4] 0.0 [ 481.645321][ T8525] PKCS7: Only support pkcs7_signedData type [ 483.548363][ T8543] loop2: detected capacity change from 0 to 1024 [ 483.906451][ T8559] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1011'. [ 484.837084][ T8561] loop2: detected capacity change from 0 to 32768 [ 484.912059][ T8561] XFS (loop2): Mounting V5 Filesystem [ 484.980572][ T8561] XFS (loop2): Ending clean mount [ 484.989948][ T8561] XFS (loop2): Quotacheck needed: Please wait. [ 485.121390][ T8561] XFS (loop2): Quotacheck: Done. [ 485.134090][ T27] audit: type=1800 audit(1778353662.682:15): pid=8561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1012" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 485.234268][ T4272] XFS (loop2): Unmounting Filesystem [ 486.486259][ T7] net_ratelimit: 13 callbacks suppressed [ 486.486277][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.828441][ T4653] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 487.061253][ T4653] usb 2-1: unable to get BOS descriptor or descriptor too short [ 487.097368][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.105897][ T5269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.107416][ T4653] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 487.246479][ T4653] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.296821][ T4653] usb 2-1: Product: syz [ 487.318819][ T4653] usb 2-1: Manufacturer: syz [ 487.336544][ T4653] usb 2-1: SerialNumber: syz [ 487.368629][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.699857][ T8594] kAFS: No cell specified [ 488.333745][ T5269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.344634][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.410065][ T8596] loop5: detected capacity change from 0 to 1024 [ 489.389530][ T5269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.397811][ T5269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.423342][ T4653] usb 2-1: 1:1: cannot set freq 48000 to ep 0x1 [ 489.508334][ T4653] usb 2-1: USB disconnect, device number 4 [ 489.641368][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.844546][ T4584] udevd[4584]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 489.860958][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.768399][ T14] net_ratelimit: 6 callbacks suppressed [ 491.768412][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.182243][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.190972][ T5269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.623308][ T5269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.088507][ T4650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.105727][ T5269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.168453][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.112262][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.294628][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.201244][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.523955][ T8676] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.531317][ T8676] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.554910][ T8678] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1040'. [ 497.132419][ T4319] net_ratelimit: 2 callbacks suppressed [ 497.132436][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.208509][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.215356][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.340198][ T8689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1043'. [ 497.368728][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.256269][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.426093][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.488426][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.168439][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.196268][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.205827][ T4650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.280313][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.286709][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.297847][ T8727] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1054'. [ 502.509319][ T8728] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1055'. [ 502.751465][ T14] net_ratelimit: 2 callbacks suppressed [ 502.751482][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.813353][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.823918][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.832784][ T5269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.843580][ T4514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.853056][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.868497][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.985061][ T8738] loop3: detected capacity change from 0 to 1024 [ 503.344140][ T8738] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 503.354011][ T8738] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.603723][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.629773][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 503.848475][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.931219][ T5269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.472579][ T8776] loop1: detected capacity change from 0 to 1024 [ 508.882495][ T4322] net_ratelimit: 9 callbacks suppressed [ 508.882510][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.928287][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.943799][ T4514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.959691][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.888468][ T8794] PKCS7: Unknown OID: [4] 0.0 [ 509.893206][ T8794] PKCS7: Only support pkcs7_signedData type [ 509.949400][ T8792] netlink: 452 bytes leftover after parsing attributes in process `syz.5.1069'. [ 510.039026][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.047449][ T4650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.083758][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.092270][ T5269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.102301][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.249870][ T8797] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1070'. [ 511.049818][ T8806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.550268][ T8812] loop3: detected capacity change from 0 to 1024 [ 512.199048][ T8812] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 512.208220][ T8812] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 512.438367][ T8819] kAFS: No cell specified [ 512.717372][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 513.029631][ T8820] mmap: syz.2.1075 (8820) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 513.079327][ T8820] [ 513.081707][ T8820] ====================================================== [ 513.088738][ T8820] WARNING: possible circular locking dependency detected [ 513.095783][ T8820] syzkaller #0 Not tainted [ 513.100207][ T8820] ------------------------------------------------------ [ 513.107228][ T8820] syz.2.1075/8820 is trying to acquire lock: [ 513.113214][ T8820] ffff8880568f8290 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: process_measurement+0x3a2/0x1c30 [ 513.123977][ T8820] [ 513.123977][ T8820] but task is already holding lock: [ 513.131350][ T8820] ffff88807a370158 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1a4/0x7b0 [ 513.141393][ T8820] [ 513.141393][ T8820] which lock already depends on the new lock. [ 513.141393][ T8820] [ 513.151789][ T8820] [ 513.151789][ T8820] the existing dependency chain (in reverse order) is: [ 513.160968][ T8820] [ 513.160968][ T8820] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 513.168519][ T8820] down_read_killable+0x4c/0x340 [ 513.173996][ T8820] mmap_read_lock_killable+0x1d/0x60 [ 513.179795][ T8820] lock_mm_and_find_vma+0x2b1/0x2f0 [ 513.185504][ T8820] do_user_addr_fault+0x2db/0xb10 [ 513.191051][ T8820] exc_page_fault+0x60/0x100 [ 513.196161][ T8820] asm_exc_page_fault+0x22/0x30 [ 513.201525][ T8820] fault_in_readable+0x13e/0x1f0 [ 513.206984][ T8820] fault_in_iov_iter_readable+0xbb/0x2e0 [ 513.213229][ T8820] generic_perform_write+0x1f1/0x5c0 [ 513.219035][ T8820] __generic_file_write_iter+0x148/0x2a0 [ 513.225185][ T8820] generic_file_write_iter+0xab/0x2e0 [ 513.231075][ T8820] vfs_write+0x4b1/0xa30 [ 513.235862][ T8820] ksys_write+0x14c/0x250 [ 513.240706][ T8820] do_syscall_64+0x4c/0xa0 [ 513.245741][ T8820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.252164][ T8820] [ 513.252164][ T8820] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 513.260938][ T8820] __lock_acquire+0x2d07/0x7d10 [ 513.266311][ T8820] lock_acquire+0x1bb/0x4a0 [ 513.271335][ T8820] down_write+0x36/0x60 [ 513.276016][ T8820] process_measurement+0x3a2/0x1c30 [ 513.281814][ T8820] ima_file_mmap+0x102/0x150 [ 513.286914][ T8820] __se_sys_remap_file_pages+0x559/0x7b0 [ 513.293063][ T8820] do_syscall_64+0x4c/0xa0 [ 513.298006][ T8820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.304490][ T8820] [ 513.304490][ T8820] other info that might help us debug this: [ 513.304490][ T8820] [ 513.314709][ T8820] Possible unsafe locking scenario: [ 513.314709][ T8820] [ 513.322159][ T8820] CPU0 CPU1 [ 513.327514][ T8820] ---- ---- [ 513.332868][ T8820] lock(&mm->mmap_lock); [ 513.337195][ T8820] lock(&sb->s_type->i_mutex_key#13); [ 513.345169][ T8820] lock(&mm->mmap_lock); [ 513.352005][ T8820] lock(&sb->s_type->i_mutex_key#13); [ 513.357462][ T8820] [ 513.357462][ T8820] *** DEADLOCK *** [ 513.357462][ T8820] [ 513.365603][ T8820] 1 lock held by syz.2.1075/8820: [ 513.370617][ T8820] #0: ffff88807a370158 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1a4/0x7b0 [ 513.381064][ T8820] [ 513.381064][ T8820] stack backtrace: [ 513.387039][ T8820] CPU: 1 PID: 8820 Comm: syz.2.1075 Not tainted syzkaller #0 [ 513.394403][ T8820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 513.404464][ T8820] Call Trace: [ 513.407824][ T8820] [ 513.410749][ T8820] dump_stack_lvl+0x188/0x24e [ 513.415439][ T8820] ? load_image+0x400/0x400 [ 513.419936][ T8820] ? show_regs_print_info+0x12/0x12 [ 513.425135][ T8820] ? print_circular_bug+0x12b/0x1a0 [ 513.430336][ T8820] check_noncircular+0x296/0x330 [ 513.435273][ T8820] ? look_up_lock_class+0x75/0x140 [ 513.440380][ T8820] ? add_chain_block+0x940/0x940 [ 513.445320][ T8820] ? lockdep_lock+0xf1/0x1f0 [ 513.449908][ T8820] ? _find_first_zero_bit+0xcf/0x100 [ 513.455274][ T8820] __lock_acquire+0x2d07/0x7d10 [ 513.460127][ T8820] ? ima_match_policy+0x107/0x2120 [ 513.465234][ T8820] ? __lock_acquire+0x7d10/0x7d10 [ 513.470257][ T8820] ? verify_lock_unused+0x140/0x140 [ 513.475459][ T8820] ? ima_match_policy+0x107/0x2120 [ 513.480563][ T8820] ? ima_match_policy+0x2093/0x2120 [ 513.485761][ T8820] lock_acquire+0x1bb/0x4a0 [ 513.490264][ T8820] ? process_measurement+0x3a2/0x1c30 [ 513.495718][ T8820] ? __might_sleep+0xd0/0xd0 [ 513.500305][ T8820] ? read_lock_is_recursive+0x10/0x10 [ 513.505674][ T8820] ? ima_get_action+0x71/0xa0 [ 513.510346][ T8820] down_write+0x36/0x60 [ 513.514509][ T8820] ? process_measurement+0x3a2/0x1c30 [ 513.519873][ T8820] process_measurement+0x3a2/0x1c30 [ 513.525069][ T8820] ? ima_file_mmap+0x150/0x150 [ 513.529828][ T8820] ? aa_file_perm+0x112/0xf00 [ 513.534517][ T8820] ? aa_file_perm+0x112/0xf00 [ 513.539188][ T8820] ? mtree_load+0x100/0xa70 [ 513.543693][ T8820] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 513.549838][ T8820] ima_file_mmap+0x102/0x150 [ 513.554431][ T8820] ? end_current_label_crit_section+0x14b/0x170 [ 513.560662][ T8820] ? ima_file_free+0x3e0/0x3e0 [ 513.565416][ T8820] ? common_file_perm+0x171/0x1c0 [ 513.570432][ T8820] ? bpf_lsm_mmap_file+0x5/0x10 [ 513.575284][ T8820] ? security_mmap_file+0x11b/0x180 [ 513.580479][ T8820] __se_sys_remap_file_pages+0x559/0x7b0 [ 513.586118][ T8820] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 513.591835][ T8820] ? lock_chain_count+0x20/0x20 [ 513.596735][ T8820] ? lockdep_hardirqs_on+0x94/0x140 [ 513.601953][ T8820] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 513.607691][ T8820] do_syscall_64+0x4c/0xa0 [ 513.612114][ T8820] ? clear_bhb_loop+0x60/0xb0 [ 513.616855][ T8820] ? clear_bhb_loop+0x60/0xb0 [ 513.621528][ T8820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.627420][ T8820] RIP: 0033:0x7fbb81b9cdd9 [ 513.631850][ T8820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.651465][ T8820] RSP: 002b:00007fbb82a8c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 513.659882][ T8820] RAX: ffffffffffffffda RBX: 00007fbb81e16090 RCX: 00007fbb81b9cdd9 [ 513.667847][ T8820] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 00002000002ec000 [ 513.675812][ T8820] RBP: 00007fbb81c32d69 R08: 0000000000002000 R09: 0000000000000000 [ 513.683778][ T8820] R10: 0000000000000058 R11: 0000000000000246 R12: 0000000000000000 [ 513.691742][ T8820] R13: 00007fbb81e16128 R14: 00007fbb81e16090 R15: 00007ffd34ca36b8 [ 513.699713][ T8820] [ 514.730874][ T4360] net_ratelimit: 12 callbacks suppressed [ 514.730892][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.744847][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.818475][ T4376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.827464][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.835993][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.768675][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.776847][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.168328][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.810726][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.819103][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.930768][ T4351] net_ratelimit: 7 callbacks suppressed [ 519.930785][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.944624][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.888357][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.970924][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.979160][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.848846][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.008475][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.016687][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.258351][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.050688][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog