last executing test programs: 29m30.460603054s ago: executing program 32 (id=26): sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000540)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@dax_inode}, {@errors_continue}, {@noquota}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@noauto_da_alloc}, {@orlov}, {@user_xattr}, {@barrier}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}], [{@uid_eq}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@euid_gt}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0xfffffe56) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000040)=0x7ff, 0x4) 29m23.764225901s ago: executing program 33 (id=34): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa089, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0x5, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x9, 0x10001, 0xc6d, 0x88000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0xffffff9a, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1000001, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x8, 0x6, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x8, 0x8, 0x5, 0x2, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8000, 0x5, 0x6, 0x8, 0xfa, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x5, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x3, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0x800003, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x5, 0x8, 0x6, 0xe2f3, 0x4, 0x7f, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x10000, 0x480, 0x64c, 0x8, 0x7, 0x8, 0x6, 0x0, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x2005, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x8, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x4007, 0xc28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x81, 0x40, 0x0, 0x9, 0x3feb, 0x7, 0x100, 0x100, 0x7, 0xfffffb98, 0xfffffffb, 0x4, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x3, 0x1, 0x7, 0xb, {0x7, 0x2, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4) 28m44.067553047s ago: executing program 34 (id=82): open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000002c0)={0x2, 0x0, [{0x887, 0x0, 0x1}, {0x0, 0x0, 0x80000000}]}) syz_open_procfs(0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3d, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0xffffffff, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0xb2, 0x15, 0x9, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x105, 0x0, 0x5, 0xe661, 0x4, 0x7, 0x20003, 0x6, 0x4c74, 0xdd27, 0x242, 0x3, 0xa, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0xffffffff, 0x8, 0x8000, 0x1, 0x3c], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xf6ec, 0x129432f6, 0xc8, 0x200000f1, 0xe, 0x2bf, 0x6c7, 0xfffffffe, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1001, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x9, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4dc, 0x381, 0x5, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x8, 0xa, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x2, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0xffffffff, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x20000007, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x14, 0x1000, 0x5, 0xb1, 0x2, 0xbf, 0xa004, 0x3, 0x7ff, 0x12b, 0x4, 0x8, 0xa, 0xffffffff, 0x9, 0x7, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb35, 0x7, 0xb, 0x5, 0x9, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa61d, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0x1, 0xf40, 0x6, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000010401"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x400c000) r7 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x3000000000000) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = msgget$private(0x0, 0x100) msgrcv(r9, 0x0, 0x0, 0x3, 0x2000) msgctl$IPC_SET(r9, 0x1, &(0x7f00000002c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x7}, 0x0, 0x0, 0x1, 0x1414, 0x10002, 0x51, 0xffffffffffffffca, 0x8, 0x8580, 0x3}) wait4(r8, 0x0, 0x8, 0x0) 27m10.879629207s ago: executing program 35 (id=224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000900)="bada30fbc99b5400040000ea0756159288a8", 0x36, 0x8040, &(0x7f00000001c0)={0x11, 0x88a8, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 25m59.520797583s ago: executing program 36 (id=404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x5c, r4, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback={0xffff0000}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) syz_mount_image$jfs(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x1404b, &(0x7f0000000140)=ANY=[@ANYBLOB='discard=0x00000000000000f4,integrity,errors=continue,errors=continue,iocharset=cp864,integrity,errors=remount-ro,errors=continue,uid=', @ANYRESHEX=0xee01, @ANYBLOB='\x00\x00'], 0x24, 0x6276, &(0x7f00000089c0)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 25m54.76364043s ago: executing program 37 (id=413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100f58965f119cc126753b031a7b853d042666cf768bebe72b11c91f6e7bc6d0e32e9d47cec95a610e2a020376872c26056d965af0f902f1ef8179fd9647f3ebdaf305fbf41e7a3d2ec4189b8822a2b"], 0x20}}, 0x0) 24m45.730398312s ago: executing program 38 (id=546): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x109001) close_range(r0, 0xffffffffffffffff, 0x0) 23m58.498724494s ago: executing program 1 (id=644): add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000001f40)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "51f435b675ba491895df818c52f9e875d9b1bd2c20f5c6b1e36d59e2036887f264d726807797b2e0d0768e1391a519f4aac513fc3713901f18f58a56f75b0121", 0x2d}, 0x48, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000180)=0xdc39) recvfrom$inet_nvme(r1, &(0x7f00000001c0)=""/251, 0xfb, 0x40000000, &(0x7f0000000340)=@in6={0xa, 0x4e21, 0x3, @mcast2, 0x5}, 0x80) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0) lseek(r1, 0x7, 0x4) socket(0x1d, 0x3, 0x1) 23m55.98407805s ago: executing program 1 (id=646): r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@fallback=r0, 0x11, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 23m54.10412934s ago: executing program 1 (id=650): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000000)="8f02", 0x2) 23m51.574692357s ago: executing program 1 (id=656): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) writev(r3, &(0x7f00000005c0)=[{&(0x7f00000004c0)='Fi', 0x2}], 0x1) 23m51.204988218s ago: executing program 1 (id=657): getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x805, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e21, @broadcast}], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) r5 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r6, 0x3) accept4$bt_l2cap(r6, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 23m49.224370744s ago: executing program 1 (id=661): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 23m34.052272888s ago: executing program 39 (id=661): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 22m17.799832261s ago: executing program 3 (id=804): sched_setscheduler(0x0, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000cab00)={0x7, [], 0xa8, "a6343e453e62f1"}) 22m17.486668388s ago: executing program 3 (id=806): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(r3, 0x0, 0x0) 22m16.881833483s ago: executing program 3 (id=807): fanotify_init(0x4, 0x800) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x5, 0x434a0c1d, 0x5, 0x8, 0x4, r0}) setpriority(0x1, r1, 0xffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8840}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002180), 0x101000, 0x0) lseek(r5, 0xffffffffffffffff, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, 0x0, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendto$inet6(r6, 0x0, 0x0, 0x24008000, &(0x7f00000001c0)={0xa, 0x2, 0x20398, @empty, 0xffffffff}, 0x1c) 22m15.823420026s ago: executing program 3 (id=808): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x90000011}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000200)={0x2, 0x0, 0x78d, 0x1}, 0x10) 22m14.638480494s ago: executing program 3 (id=809): socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) prlimit64(r0, 0xb, 0x0, &(0x7f0000000100)) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0608262329ba8b0ad775b31b", 0xe, 0xfffffffffffffffc) recvmmsg(r3, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2100, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x0, 0x2, 0x0) 22m13.203185088s ago: executing program 3 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 21m57.535360801s ago: executing program 40 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 21m9.338637879s ago: executing program 0 (id=927): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x60ee, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xf}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 21m6.325441704s ago: executing program 0 (id=935): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r5, 0xc008aec1, &(0x7f0000000d00)={"8858bde0d7f6311bf16c671fc9d87024dbe4bbb080be0900000000000016591b7390035985dcaa66a958a8a970391decb4b7d3e52996ff674f707cdf49c7381d2964c301f29e875ce36aa6b1930032da440a2e212da56797dfe5748aaaae9fbc3f7ffd29500ecab817a7350f98900200000000000000383692bf1b90d3c1bab243eb0d17151ba3e65431ac11adc58b77321481fd65569362b3a8bddbed39d885f990908ce1892580ee43159c1db62d59fe2c8208000000000000b8ee30aadea127f169312855440d9ec40deaf8215a2bdcc65fcbbd5e0b83d2f1e3ea96ef1c9946b76ab53dee477b7ade8550d47e5a3eea926f58efb6fb7f33064fb7b6951eae379648695b27505fa731a2454174592ef7a0227f59ac45d0ed37cccabee68ba44346135659abe531ca418b0841f5a8f285605fc1cfe77f0080a47277ed3f9cc1a9f8a7efd669ba9819c2db199a88aa87c399b7ada0ff033039d0d3a8b043b53335d15c275ea6ce63f3c34655761c1182bc26b1a590a8cb8667e764c3f74dc55dd44ca9e7c6a61c6376761acb0fd9fb1941caca01396905eeeead3e189fd11bd19137b214eecefa07116dc4b4b7ea423308ac9183ffc62c8dc69021249027b7b0929660135b3161d08e109a46b6fd1b7fc08a3bc0934ee2648df2b04716aff5342d9897218f91371f6c06666e0082b8a66e973930c219a568f1e0938a6a1681c7268147b1e0505c41da41a55877c32797bbfa11736d046b681bf70f376112a9094c5f23edd5d7d06014e72730b64d9e33412e3d423cf8213370fc4338e6f0d722dde3135706e615085bf76fa752bac824485910a6acc45b6552537fbbf0909a08d9b891ce78d11af59ca07eaf5bba689017f082dce61d3682695c75e6c2d0388412fe7f36823a0e74de0f91d4fc15397a14a831d37dc60d6bd3d455649347f6257d05cbbd9fc145e958955fd219d1ab60dbc021e874f265daed86f86e6356a782b305d5e2f6e1b190479e6376b4e6247c0f020e607e9468f48fa9a16e0770b05f6bcda150dc373437963a045e0ca1272848ae96fd7823f3eac82ae253a7d907b237ff231bbae89a93ac077db04197707ff3de99ca9191ed561e972fd60356654e89242b3ac8b112092d28e10759bb3e85cfab2ae11ce90b6b52f7d2be1fd3e6d9eaabe37a3083749c11f54c17b6402fc1b5353c1cd46565480faa910856106800ba90c26ccefc230296f498c1304abe91a8fb37eb7abda2072c686aae830cc5abd72b47dc87cb4e0105000000dc6ac2bee572bf601e02d9a51851877f1498d6e2ba3b5947d83d90072eaf0cefed3dceb9bf35b36cbca3f1feba2c3d0f16ce04e13237e8b78689b9599d33db4fe890f9e655ba57658bc1671878ab615bc37943f9c9b8e9d5069bf7de6aaa74b0470389f22935cedbb9e22523e400"}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121d01, 0x82) ppoll(&(0x7f0000000180)=[{r6, 0x82}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) dup3(0xffffffffffffffff, r6, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 21m2.306620968s ago: executing program 0 (id=940): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$inet(r4, 0x0, 0x0, 0x20040) close(r3) r5 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) r6 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r6, 0x4147, 0x0) 21m1.170105344s ago: executing program 0 (id=941): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket(0x11, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file1\x00', 0x2000084c, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYRES64=r1, @ANYRES8=r3, @ANYRES16=r1, @ANYRES64=r1, @ANYBLOB="2c6469736361726459ad809e1eb82c00fb278330ab3b4884d36adf6908d11f5783dc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14fc, &(0x7f0000002a80)="$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") r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 21m0.497412474s ago: executing program 0 (id=942): add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000440)={0x0, "51f435b675ba491895df818c52f9e875d9b1bd2c20f5c6b1e36d59e2036887f264d726807797b2e0d0768e1391a519f4aac513fc3713901f18f58a56f75b0121", 0x2d}, 0x48, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000180)=0xdc39) recvfrom$inet_nvme(r1, &(0x7f00000001c0)=""/251, 0xfb, 0x40000000, &(0x7f0000000340)=@in6={0xa, 0x4e21, 0x3, @mcast2, 0x5}, 0x80) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) 20m55.726658492s ago: executing program 0 (id=949): r0 = socket$inet_smc(0x2b, 0x1, 0x0) close(r0) 20m55.021518483s ago: executing program 41 (id=949): r0 = socket$inet_smc(0x2b, 0x1, 0x0) close(r0) 16m36.014346822s ago: executing program 2 (id=1285): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) socket$key(0xf, 0x3, 0x2) close(0xffffffffffffffff) ustat(0x4, &(0x7f00000001c0)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x800448d3, &(0x7f00000000c0)={'wlan0\x00', 0x1}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90c07d, 0x0, 0x1, 0x0, &(0x7f0000000000)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x8042, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ecb-cast6-avx,blake2s-256)\x00'}, 0x58) fcntl$setlease(r5, 0x400, 0x0) syz_open_dev$sndmidi(0x0, 0x7f, 0x400002) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_open_dev$tty1(0xc, 0x4, 0x2) 16m32.375203255s ago: executing program 2 (id=1287): ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x61) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5008, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0xdd68, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000140)) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x12, 0x0, @tid=r3}, &(0x7f00000001c0)=0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) ioctl$SG_GET_PACK_ID(r6, 0x227c, &(0x7f0000000140)) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000200)={0x9, 0x9, {r3}, {0xee01}, 0x8, 0x3}) timer_create(0x7, &(0x7f0000000040)={0x0, 0x13, 0x2, @tid=r3}, &(0x7f0000000240)=0x0) timer_settime(r7, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 16m29.245944917s ago: executing program 2 (id=1290): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) close(0xffffffffffffffff) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r3, 0x4147, 0x0) 16m26.647632308s ago: executing program 2 (id=1292): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$inet(r4, 0x0, 0x0, 0x20040) close(r3) r5 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) r6 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r6, 0x4147, 0x0) 16m25.336091675s ago: executing program 2 (id=1295): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) socket$key(0xf, 0x3, 0x2) close(0xffffffffffffffff) ustat(0x4, &(0x7f00000001c0)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x800448d3, &(0x7f00000000c0)={'wlan0\x00', 0x1}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90c07d, 0x0, 0x1, 0x0, &(0x7f0000000000)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x8042, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ecb-cast6-avx,blake2s-256)\x00'}, 0x58) fcntl$setlease(r5, 0x400, 0x0) syz_open_dev$sndmidi(0x0, 0x7f, 0x400002) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_open_dev$tty1(0xc, 0x4, 0x2) 16m21.877194456s ago: executing program 2 (id=1297): prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x0, r0, 0x5) socket$inet6(0xa, 0x2, 0x3a) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000380)={0x3ff, 0x1, 0x0, "eef1b7de005bd152f35ed734fc000000000000000000000000000000004000", 0x43353039}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r4, 0x0, 0x0, 0xc806, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000100), 0x0, 0x4004084, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x1, r5}, 0x38) 16m12.395424648s ago: executing program 9 (id=1309): r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x61) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) r1 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0xdd68, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000140)) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x12, 0x0, @tid=r4}, &(0x7f00000001c0)=0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000000140)) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000200)={0x9, 0x9, {r4}, {0xee01}, 0x8, 0x3}) timer_create(0x7, &(0x7f0000000040)={0x0, 0x13, 0x2, @tid=r4}, &(0x7f0000000240)=0x0) timer_settime(r8, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 16m7.522393252s ago: executing program 9 (id=1315): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0'}, 0xb) socket$key(0xf, 0x3, 0x2) close(0xffffffffffffffff) ustat(0x4, &(0x7f00000001c0)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x800448d3, &(0x7f00000000c0)={'wlan0\x00', 0x1}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90c07d, 0x0, 0x1, 0x0, &(0x7f0000000000)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x8042, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ecb-cast6-avx,blake2s-256)\x00'}, 0x58) fcntl$setlease(r5, 0x400, 0x0) syz_open_dev$sndmidi(0x0, 0x7f, 0x400002) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_open_dev$tty1(0xc, 0x4, 0x2) 16m6.116561044s ago: executing program 42 (id=1297): prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x0, r0, 0x5) socket$inet6(0xa, 0x2, 0x3a) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000380)={0x3ff, 0x1, 0x0, "eef1b7de005bd152f35ed734fc000000000000000000000000000000004000", 0x43353039}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r4, 0x0, 0x0, 0xc806, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000100), 0x0, 0x4004084, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x1, r5}, 0x38) 16m4.169270268s ago: executing program 9 (id=1320): socket$inet_sctp(0x2, 0x3, 0x84) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r1 = dup(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 16m1.125752925s ago: executing program 9 (id=1323): r0 = userfaultfd(0x80001) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0}, 0x80) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x3000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r4, 0x2, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r5, 0xc0105502, &(0x7f0000002a40)) socket(0x18, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r6, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) 15m59.852846089s ago: executing program 9 (id=1325): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x90000011}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0]}}, 0x0, 0x33}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x2, 0x0, 0x78d, 0x1}, 0x10) 15m54.718315489s ago: executing program 9 (id=1328): rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000001040)={{r0}, "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"}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000005c0)=0x10) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0x15) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_delrule={0x1c, 0x18, 0xc961a4b31a2c6a35, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0xff, 0x3, 0x0, 0x6, 0x8}}, 0x1c}}, 0x0) 15m39.220447182s ago: executing program 43 (id=1328): rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000001040)={{r0}, "b082aa875e068e300eeb8520b333eea2067c80366316221dd1fa6b0ce90bc4e4ddb7286561e8f30d7b64adbd1f962a4e7dcbf595f3c412a70ce0d7e67f9995783c7475f0d2f17262d0c557dda4e27036b5632199d4179a06fd36e73385ccd746db9d07d67422c21255e40d36cc548c78bb455c16c5294393b10bc029f118a7e116918e87d496a0f3b06e4feec5b13438b97f74a140b18c280d26c7e9011e16c48f4d4c7085255e4a322fd46d9dfcabaf73421615100ffcefaf4c21ddffcad6095c74dc0102450ef231654edaf2e904fe0891fa88d544cd0c53bb189bb90a6f68eb16d25bbf0d4452a0534e705aa144374dd1a2555a2204886fcb6fd0214917eea5da7788b73e69cb6d60d4b2bfca2304cb380da983a8823ef8235870220eaadf271843db93751486358395542d7905fda793f4b6cb5ed46a545e87292a19fbc53f30bd8c673b46b371a6f8e085251371a077766da2d7bc6515905c73cbcdd218c3458d00843fc579beefa7da726da701d8cc76e54ab8cf07cdc05a87c8032b2b3e0b38f17cbf2c4c6be90dddc767ceed73c5b44526623f41f29ad620717e57abc2a44dfec122d72160740eb06ecc42b96bc7b30c15dfc15eac10724550b9ffa73d149b1d604bd31d89a8de606964648d858fef45c7147d990e09963fece61ad1690e66c844507e419eb47fde98a7939ae9e844b3bae5ec52caf1f828d8fb649b1089279b8db5ef1d6deb11f13dc787614a7870d4b7b968bdcdda33de8df8b7e8585f161a7327a27c5b8d55c6c7f3b42daf35de0ad731ddb3e261f21e0e1b7ea94dede963a3393d29c55bc1a8fb8a5c8f938a6f887e86d5f11eccb3be404081c3f44bffd4733008cb509ab00fa6b970d994447bf016a65c967329fb90e6375284b90131d8ce3dc64b6b7b7d7a1df252a8f633a12cb58e66382d42cf8d765ddf0a62e9b6863699c50f074a777b02e2b50c0ee33d21155c28d55748a8947d45121e56729d282fd7f21643b9473f9adc31baed992a6047a4df85294ad2d07911457a1f1317c4dc68082d085ef75cf1201ed450deafa67ad1798c68669d80fcaf6b22e73659c9d8182f1e819f5f962583aad7de279f37ab8aa49f6a8ec911bc13d1e3d626797219c5ac9a221bb526c892f6c07a53e8ec5f4134f63774280ed1365ba04382909e171b847e0731d24cbf5352cb7aef424486a8c1adf5352be3f2137901690b1326c7e8524251f37f728963454dfb01f4837df66f00efa90ad31e509897f1d81f0f652a2d921a097e290aeb35fa17adb7fd36a2a81aa9f2a5a89419b791d9b4bf0868fc42d8df252254b28acf8082d957585ef3fedaa063bd4249d4fa78519be3c161dad5e7c4ff221b012447ebeacd58e7e0fedfc0d79d411043c5086fc5268ba62073f14a6f36279a3847ffb93fd3593e261baafbc7de7e69db48cbe1789edc71c951f2da0176170c4d3f68d7e99b436ea99976dc2ff4e4af4f242be7eb7a4500827fa82e4748ef327620a15673c56c4187965ebaa3b95aa10ce26460cee01b2c3ddd82d2aab652c1b564d0458988354b84036e4f70005aaa4724ef6355a18bd0f976c52f98062668ab7974c479d9dfcae02fa51f1d85d20d6b404c9dad121c67aa2072cb8d4470d1c7d37e48ccd0e2f64143de0ff40c278c44899483e701115a3774cb6e766b9aa033f0a94b1b483c3d8f3ded61a592e46295344dc3cb81aeca8966be4f74517264fcb9ae8fbccd8cfa68be714910c08f095254a801ed1ca52725a7494a3b55185f02956efea36753413586ac1e8c3ec39ef7185261a2f55a90d7eb2bb1463f5a804b9055dac5b5c0f2cdf2274922a90b94515f5dbf4a87c372469bb0ba9577347e8c80de188115db8ca46204d17819196943bb9ac16a8a8948aa90c366189b154cc22bb6b53f7e8795fdb66aea3947374f702187b87be2510e63b422efeecf967f2ef1fbcd8bf4d8365b9e152fbd6218e27c7c5d4aeaf34cf8908ccac73ad2ab9ba06200c6f096fe7ba9de16a940b65241072273c2ca5d6ffa12c5c1e540c659e7e096540f722a459702f821c1a3a24e8cb4adf212572e6f0325e1803f5524056dc6da8249c5c0042bc1f966adf87e2490b59450a067dcdcf12495508b528fe99af5884ec0aea419dcc9cdc2f33de1fdac79ba2648b36270bb3d785f8b43af937628c698d53af94eb883d5c6cb140381a3554608a676a97722cda3d9eb4845c40cb9994b488da26fa470255c8758d787774494efa43f0dbcfb0096ad74089fb451b14374da95c3c9b064558c8b459604f0948e0d2e531bef50e7f0916b615053848fd9f87054be50fba7da9051e4d37fe6a459d9e748d0f55bb503cc5d78ad958e031ed3d1105735d48fee476e809574b87d04c3cfa70cc23b592bb1c160937708a6d868fc4a00a8f3fe801532e69b71a00bcffaaab0fefb3f0ec828bac7ca0af90628716cec36f94f33cb009dc4283270ae1278305be128af4c33c4f4f26850eb6433dd1d714ad31d3502a544987a1b2e238a0b35c1bfff5050953b385ed882309d22064190efa0fff82ad9041e281229ab76896457e8c4d81e42243a1c87687d5d03d5c57303a3e0e03eeceaacd84e1760629a386432ca944cba7098dc70368a0cb393920c924ef282acb439b3cb3eab6903a417d0ef54a09c8f07d2caa0174f80e969d2e4140ebc420e39b3146de4a5e4ed9942f818309697589526c818520b6683725bfd235d9abdbad544779216d94a9edf3e5c9aa0df6453555f0996e136e433b9024d2ea2c0f2c316ea0997e3e8292d91e3df9c0e0ca7207003017d1a9f92079d859f883457dd24f8e51de0ad877664735b5f382f89dcfe923b7070c3d2d3aed968c6595dd18e63dd05ab44aa570ed7f6a87be044e6e2f7e8e60bf161fcc478997e60065702497257dfdaac6536dd8f355e7000f3c6e0796a2e292496d8042ebf4e245c1485d185f01cb941181d12aea43da250f5c87530ca3f799673449faf2249dd7e0e94620eaead79da1daf4533fc46f57c4d8c6ae138f8e94642677202d9df111fa7d775625b1bd54c446c958990e07c5c36db601cfa82f9d87a9e3f2f3526e567bca1bbf3e0edfd4f8f97a05628b168b91e5d306a2edde42be3c81cbf787402254a0435f0de9af60d8675c5f2620d1e3d7f89b0832e783a5c1b72c1219ee5a22f97b6e7377154d78163bef96ceee55594e4ea5aa9817093b26eb0a64a3683b3950cbe77236c13d0e42940d6967e81748895b7fd3f243d98224c513077d441a824d34266f729cf817c926dcbbe22497d5c4665cb712c1ea9e5a66c5e4efb219469502691e1162e575c9544eb7c5e1a304c0b61b9967ae285092d7c50efcb1587766d2aca1a7562b995c496ceabe4e408ddcf5f2a9e470c86fb0abad24b758d36967b46b643e65720fb70eeddfc6630c8d5f7c61a9a9d78a33dcaa1706a4f04e31f3d16194c06a75b48f0da00d9689958affc095b2c8bbd5d33d99c4b33e93443b6aba00ae4a4e1a922d74dccc1d6496456c6e7943cc2a83b0e5d075f2fc447212cf9c298ea3643e51f02ff5f5a6496fdd2c62e0f7c5d396d2a8cca426bc7eb08b32fa1a430eef903aa8bb84e8588921d53757112cd8376a9b11b0e749098cbaf1749877a13292dd47b0a767ec15ab3ddb7317b63d7fb2b4c9b1b25746944c2d2b1b32389c35749fe566d1cd0d2aa5b5ac4f32c24241c879f1a2e68f3c5e424748e1d99c4969b252630613c54479747f5cb5c4f21b30180541b91890f672a45eb5fe018d1817d21b9eb32e84907a9e58d295c5cbf2172107bb7d4741c9d4a8a8cdd5bc94b0ab756babb5bdc4f14a7f254d8e7b247e48c803dce8c908a2222461867435e1709d904977ae31ecf4779deb09142158243dd8e28ec8a4950a5a1e7680b2e3c4af05898f57f7af291ef0f40a4570759de936d2f1c5fbd412f958149feba738222ef695b89fcc12c206a1d2fa527115f0cd30dd224e772a877c7fa8ab86857aa62f0687a832f27e000d79db6082fa0fa0ba98c648af0edcc971ca6fce3756e19b2d42bd3acaf5a1492634e9957b69c0ecc0b34eafc6d06136707555ef067836a509137ed6bc95a05fe714659ad0a451ad9e8d33348738191b32988406bc90ec2474b8282fde7885d4832b1a7a131c5ab8afea026075f57903745293e4fdd4fee3ed650c96c10fbbff07ab77bd7973e145fc6ec3d60e738accc1b292f68c102b2cdbc47461501655a3c6e072b23e7c76dfd5e165f00a234b56a45d4af752cd7f959699afe8998da6745b6d56abd60d248d6e768fbd6bf21ea5de0f4f260e16e21a6e53ac8770c3abd1b982fdaf9fac3cfaeadacc78e63990d60099e61e651c81b44b1b5b7f5fc343e694e105ee07e4fece62599a388e0378710c51fbee302f139e542ed71838df04d27fbb3a4cfaaa47d95100e98fd39799c80594e574d8658413eba04379488255599ef9a73b166d99538d407e09f86d7cf95973df670f692c02e0216a8af53e900520edd65f79c4571994376cf1d180cfcc68cf4845955544e6fe2489f7d747c2863e2a18402420a74125b5defe39a78ee84d59e2c09f43102abfbeb136dc1248cf364621ffbc4112466ce3d9b62a78b74c266b4f28b040098ef7a80cf4b328a7ebd142a62d9d289971acb7915b55d0df6049041624718291d528e3e23b7319b70ff05d248cb4894b50633657797049cc4e03ede47413c59dbd988b2434272826955dae84ff229674a5e213fdda37f4585e30a35796a0eba99dc3ebd8e2303d3c8761f05c316eb5cd0cc527209d141cf20e3a845b15f432cc66cff6b9895bf659a079d89f47f5ee565144c8d291e07309d1c937a52db09103b85a04f8b10c767d7a6334e462511f19d69ba67a0999d1f811cf90ac0db65b5f746c516227f782d9e5f15264b3bf5632159a4cd440c8488e32fb84091ec85ad5b064a48c9b93ea07660cb2f4b374e0e0aeb7e2e3486ef52d7b67ba4cee90987596fe9503a82ea04d3a6730e562350b08b978fa1872fa2c3c1c4e7537a3f29c0c76d6a95e626b01dfe71bc0b18fa862d89e33fcb9e0befdd688c28343b0acefb62724d7a7b79fc5ed833e76a022e08aa563af0e8b3e57628edae298a5e7cc923c0b4f81fc9767de78b3bb974f3d93c579181453a944d44ee30a86b1266a5840c03b6061bea150bffebb812823eac2212da7418c7fafb2fcdc6a4a5fe704647792a16c9038225534599eb2df25ad12bf6f7601f43d86c474e779cc5f13148174bd6df572beb2d89ea477dd09eda6a7fe24b08545e145bf815aef8ae6d73d29436a1dc5edc62cd32d921d3c92cf1f8c51be5300d2be84f900d350d9dc19f42c90e3c0d0127dd8770efa5e593e19c6b2e7b219ce6b86e538fe7cb5f9bf868ab779e206ddf2e1efcabcb26a3656b55bd4a9dd322cb5a79819e9fa2d310e9150d2b89d884cf5239602f7cd1ccef482f001bf36131afe9dc220470213fe7d9f5062ea19ad0babf33e570f5e601d98c633005613d8c2d0ed5268374ec1b7d1bbc0b035aa91fbf68f1c6e9b5ed357bb4ddae393a12371b7eb2eeb2cfdf299659c47b05feec63265c096d7d9822a08df5f099ad92d84b56a7a6026bd828a421a65c698cc5d2351ead66db3f10c597a289081ca5e817285160fc2cfca9cdefc281fd1d97464f4b74ecf4d3c1931c4b82a3ecd2b7f94bee6987fa69fdd0f6b54d1c07fb0801a0857f993cafb768b3685be3e7b1336678f774a2c17ba6f10c9ff054bc012126c1e7b20937"}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000005c0)=0x10) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0x15) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_delrule={0x1c, 0x18, 0xc961a4b31a2c6a35, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0xff, 0x3, 0x0, 0x6, 0x8}}, 0x1c}}, 0x0) 7m57.910583605s ago: executing program 6 (id=2055): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r3) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r5, 0x400, 0x1) r6 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r6, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 7m55.918049132s ago: executing program 6 (id=2058): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) 7m52.761423056s ago: executing program 6 (id=2063): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r3 = socket(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5e20, 0x1ff, @loopback}, 0x1c) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r4, 0x0) 7m51.438494324s ago: executing program 6 (id=2065): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = gettid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = mq_open(&(0x7f0000000200)='!se\xf7ih,\x17i\xeb-\xed\xacP\xe6lNn\x00xseqinux\x10', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x2, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) 7m49.410584502s ago: executing program 6 (id=2068): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) write$binfmt_script(r4, &(0x7f0000000040)={'#! ', './file0'}, 0xb) socket$key(0xf, 0x3, 0x2) close(0xffffffffffffffff) ustat(0x4, &(0x7f00000001c0)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x800448d3, &(0x7f00000000c0)={'wlan0\x00', 0x1}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90c07d, 0x0, 0x1, 0x0, &(0x7f0000000000)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x8042, 0x0) bind$alg(r6, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ecb-cast6-avx,blake2s-256)\x00'}, 0x58) fcntl$setlease(r6, 0x400, 0x0) syz_open_dev$sndmidi(0x0, 0x7f, 0x400002) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_open_dev$tty1(0xc, 0x4, 0x2) 7m47.753120189s ago: executing program 6 (id=2070): prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x0, r0, 0x5) socket$inet6(0xa, 0x2, 0x3a) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(0x0, 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000380)={0x3ff, 0x1, 0x0, "eef1b7de005bd152f35ed734fc000000000000000000000000000000004000", 0x43353039}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r4, 0x0, 0x0, 0xc806, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000100), 0x0, 0x4004084, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x1, r5}, 0x38) 7m31.556182286s ago: executing program 44 (id=2070): prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x0, r0, 0x5) socket$inet6(0xa, 0x2, 0x3a) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(0x0, 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000380)={0x3ff, 0x1, 0x0, "eef1b7de005bd152f35ed734fc000000000000000000000000000000004000", 0x43353039}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r4, 0x0, 0x0, 0xc806, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000100), 0x0, 0x4004084, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x1, r5}, 0x38) 16.42665501s ago: executing program 4 (id=2779): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) creat(0x0, 0x6a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf94d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000480)=@attr_other={0x0, 0x1, 0x1, &(0x7f0000000440)=0x6}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000006000000040000000012000700000000000000000000000300e87dc889cab6d1f10000000000000000"], &(0x7f0000000300)=""/221, 0x42, 0xdd, 0x1}, 0x28) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000080)=0x4740, 0x4) munmap(&(0x7f0000714000/0x4000)=nil, 0x4000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3, @mcast2, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) 13.935456175s ago: executing program 4 (id=2784): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000440)={[{@threads_str={'threads', 0x3d, 'percpu'}}, {@threads_str={'threads', 0x3d, 'percpu'}}, {@threads_str={'threads', 0x3d, 'percpu'}}, {@threads_num={'threads', 0x3d, 0x931d}}]}, 0x1, 0x1b4, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000000)=0xe, 0x4) 11.507677828s ago: executing program 4 (id=2788): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) madvise(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x9) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x2}, 0xe) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) r3 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x3, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) syz_open_dev$evdev(0x0, 0xfffffffffffffff9, 0x100) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) 9.039183761s ago: executing program 7 (id=2794): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 8.000971952s ago: executing program 8 (id=2795): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x1e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 7.670385262s ago: executing program 5 (id=2796): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000440)={[{@threads_str={'threads', 0x3d, 'percpu'}}, {@threads_str={'threads', 0x3d, 'percpu'}}, {@threads_str={'threads', 0x3d, 'percpu'}}, {@threads_num={'threads', 0x3d, 0x931d}}]}, 0x1, 0x1b4, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000000)=0xe, 0x4) 7.644419233s ago: executing program 7 (id=2797): fanotify_init(0x4, 0x800) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x5, 0x434a0c1d, 0x5, 0x8, 0x4, r0}) setpriority(0x1, r1, 0xffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8840}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002180), 0x101000, 0x0) lseek(r5, 0xffffffffffffffff, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 7.639891793s ago: executing program 8 (id=2798): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000040)="b94d060000000037810000000000450e", 0x0, 0xfa, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.378513457s ago: executing program 5 (id=2799): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000440)={[{@threads_str={'threads', 0x3d, 'percpu'}}, {@threads_str={'threads', 0x3d, 'percpu'}}, {@threads_str={'threads', 0x3d, 'percpu'}}, {@threads_num={'threads', 0x3d, 0x931d}}]}, 0x1, 0x1b4, &(0x7f0000000280)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2000}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x2) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) 6.378148507s ago: executing program 7 (id=2800): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) fallocate(0xffffffffffffffff, 0x0, 0x2dc2, 0xfffb) 6.351704449s ago: executing program 8 (id=2801): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000180)=0xdc39) recvfrom$inet_nvme(r1, &(0x7f00000001c0)=""/251, 0xfb, 0x40000000, &(0x7f0000000340)=@in6={0xa, 0x4e21, 0x3, @mcast2, 0x5}, 0x80) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000640)={0x0, 0x103cfa, 0x0, 0x3, 0x69}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x1}}}, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6e56076a00088801fe8000000000000000000000000000aafe800000000000000000000000003a4b3a00020900030008"], 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 6.278027823s ago: executing program 4 (id=2802): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) utimensat(r3, 0x0, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000180)=[@decrefs], 0x0, 0x0, 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) 5.30278924s ago: executing program 5 (id=2803): r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 5.30236128s ago: executing program 7 (id=2804): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0xe, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0xffffffffffffffff, &(0x7f0000000080)=0xfffffffffffffec4) 4.068854852s ago: executing program 5 (id=2805): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.76970573s ago: executing program 7 (id=2806): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x8, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x20000810) 3.269425139s ago: executing program 4 (id=2807): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000440)={[{@threads_str={'threads', 0x3d, 'percpu'}}, {@threads_str={'threads', 0x3d, 'percpu'}}, {@threads_str={'threads', 0x3d, 'percpu'}}, {@threads_num={'threads', 0x3d, 0x931d}}]}, 0x1, 0x1b4, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000000)=0xe, 0x4) 3.166744245s ago: executing program 8 (id=2808): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) creat(0x0, 0x6a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf94d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000480)=@attr_other={0x0, 0x1, 0x1, &(0x7f0000000440)=0x6}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000006000000040000000012000700000000000000000000000300e87dc889cab6d1f10000000000000000"], &(0x7f0000000300)=""/221, 0x42, 0xdd, 0x1}, 0x28) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000080)=0x4740, 0x4) munmap(&(0x7f0000714000/0x4000)=nil, 0x4000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3, @mcast2, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) 1.88245533s ago: executing program 7 (id=2809): fanotify_init(0x4, 0x800) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x5, 0x434a0c1d, 0x5, 0x8, 0x4, r0}) setpriority(0x1, r1, 0xffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8840}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002180), 0x101000, 0x0) lseek(r5, 0xffffffffffffffff, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.448737975s ago: executing program 4 (id=2810): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) madvise(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x9) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x2}, 0xe) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) r3 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x3, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) syz_open_dev$evdev(0x0, 0xfffffffffffffff9, 0x100) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) 1.434406356s ago: executing program 8 (id=2811): fanotify_init(0x4, 0x800) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x5, 0x434a0c1d, 0x5, 0x8, 0x4, r0}) setpriority(0x1, r1, 0xffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8840}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x101000, 0x0) lseek(r5, 0xffffffffffffffff, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, 0x0, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendto$inet6(r6, 0x0, 0x0, 0x24008000, &(0x7f00000001c0)={0xa, 0x2, 0x20398, @empty, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='vegas', 0x5) 1.36654844s ago: executing program 5 (id=2812): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000440)={[{@threads_str={'threads', 0x3d, 'percpu'}}, {@threads_str={'threads', 0x3d, 'percpu'}}, {@threads_str={'threads', 0x3d, 'percpu'}}, {@threads_num={'threads', 0x3d, 0x931d}}]}, 0x1, 0x1b4, &(0x7f0000000280)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2000}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x2) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) 40.017138ms ago: executing program 8 (id=2813): r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 5 (id=2814): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r4, 0x1, 0x22, 0x0, 0x0) syz_io_uring_setup(0x186, 0x0, &(0x7f0000000140), &(0x7f0000000200)) timer_create(0x2, 0x0, &(0x7f0000000480)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x6) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) kernel console output (not intermixed with test programs): 4106][ T7988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.472241][ T7988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.480866][ T7988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.511213][ T7988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.538316][ T8090] syzkaller0: entered promiscuous mode [ 339.544313][ T8090] syzkaller0: entered allmulticast mode [ 339.677590][ T8094] loop1: detected capacity change from 0 to 128 [ 339.720790][ T8094] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 339.741143][ T8094] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 339.987732][ T7988] hsr_slave_0: entered promiscuous mode [ 340.028110][ T7988] hsr_slave_1: entered promiscuous mode [ 340.088430][ T8037] chnl_net:caif_netlink_parms(): no params data found [ 340.144690][ T5766] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 340.552871][ T8037] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.569001][ T8037] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.576967][ T8037] bridge_slave_0: entered allmulticast mode [ 340.588131][ T8037] bridge_slave_0: entered promiscuous mode [ 340.635111][ T8037] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.660245][ T8037] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.669584][ T8037] bridge_slave_1: entered allmulticast mode [ 340.681367][ T8037] bridge_slave_1: entered promiscuous mode [ 340.759685][ T1121] IPVS: stop unused estimator thread 0... [ 340.953392][ T8115] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 340.966290][ T8115] loop4: detected capacity change from 0 to 64 [ 342.659114][ T8112] IPVS: sh: FWM 3 0x00000003 - no destination available [ 342.680157][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 342.957696][ T8037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.973177][ T8037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.038157][ T8118] netlink: 68 bytes leftover after parsing attributes in process `syz.4.436'. [ 343.134946][ T8037] team0: Port device team_slave_0 added [ 343.210422][ T8037] team0: Port device team_slave_1 added [ 343.218163][ T8120] tipc: New replicast peer: 255.255.255.255 [ 343.234652][ T8120] tipc: Enabled bearer , priority 10 [ 343.353408][ T8122] loop4: detected capacity change from 0 to 128 [ 343.379588][ T8122] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 343.407166][ T8122] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 343.419379][ T1121] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.834885][ T8037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.841904][ T8037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.867875][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.882713][ T8037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.981329][ T5968] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 344.022443][ T1121] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.088602][ T8037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.102703][ T8037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.137902][ T8037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.252545][ T1121] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.322541][ T7988] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 344.344568][ T7988] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 344.399620][ T1121] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.414554][ T8140] syz.4.441: attempt to access beyond end of device [ 344.414554][ T8140] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 344.619194][ T7988] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 344.752071][ T8144] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 344.762382][ T8144] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 344.774498][ T8144] loop1: detected capacity change from 0 to 64 [ 345.516630][ T7988] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 345.829364][ T8037] hsr_slave_0: entered promiscuous mode [ 345.852915][ T8037] hsr_slave_1: entered promiscuous mode [ 345.872882][ T8037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.886585][ T8037] Cannot create hsr debugfs directory [ 346.212508][ T1121] tipc: Left network mode [ 346.223895][ T8155] netlink: 68 bytes leftover after parsing attributes in process `syz.1.444'. [ 346.472049][ T8157] tipc: Enabling of bearer rejected, already enabled [ 346.907260][ T8037] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 346.987632][ T8037] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 347.032135][ T8037] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 347.111861][ T8037] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 347.239881][ T7988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.370056][ T7988] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.498367][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.505635][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.548978][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.556284][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.746680][ T7988] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 347.783712][ T7988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.052891][ T8179] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 348.070164][ T8179] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 348.100861][ T8179] loop4: detected capacity change from 0 to 64 [ 348.987587][ T1121] hsr_slave_0: left promiscuous mode [ 349.005240][ T1121] hsr_slave_1: left promiscuous mode [ 349.015436][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.023744][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.036703][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.048927][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.057641][ T1121] bridge_slave_1: left allmulticast mode [ 349.064179][ T8186] netlink: 68 bytes leftover after parsing attributes in process `syz.1.451'. [ 349.073316][ T1121] bridge_slave_1: left promiscuous mode [ 349.079472][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.090195][ T1121] bridge_slave_0: left allmulticast mode [ 349.096660][ T1121] bridge_slave_0: left promiscuous mode [ 349.102544][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.175309][ T1121] veth1_macvtap: left promiscuous mode [ 349.180922][ T1121] veth0_macvtap: left promiscuous mode [ 349.191463][ T1121] veth1_vlan: left promiscuous mode [ 349.196990][ T1121] veth0_vlan: left promiscuous mode [ 349.937791][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 349.992578][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 350.045820][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.117000][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.553054][ T7997] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 350.629570][ T1121] bond0 (unregistering): Released all slaves [ 350.745660][ T8188] tipc: New replicast peer: 255.255.255.255 [ 350.749064][ T7997] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 350.772126][ T7997] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.784031][ T8188] tipc: Enabled bearer , priority 10 [ 350.792549][ T7997] usb 2-1: config 0 descriptor?? [ 350.830575][ T7997] cp210x 2-1:0.0: cp210x converter detected [ 350.868183][ T8037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.003166][ T8037] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.060233][ T7997] usb 2-1: cp210x converter now attached to ttyUSB0 [ 351.104216][ T6474] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.111454][ T6474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.170568][ T7988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.195594][ T6474] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.202816][ T6474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.396412][ T8205] syzkaller0: entered promiscuous mode [ 351.406845][ T8205] syzkaller0: entered allmulticast mode [ 351.870129][ T7988] veth0_vlan: entered promiscuous mode [ 351.910578][ T7988] veth1_vlan: entered promiscuous mode [ 352.015120][ T8037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.032330][ T7988] veth0_macvtap: entered promiscuous mode [ 352.129263][ T7988] veth1_macvtap: entered promiscuous mode [ 352.223054][ T8223] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 352.239606][ T8223] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 352.268957][ T8223] loop4: detected capacity change from 0 to 64 [ 352.822865][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.870620][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.905141][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.929932][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.950267][ T7988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.985794][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.007135][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.036187][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.047188][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.059622][ T7988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.078954][ T8226] netlink: 68 bytes leftover after parsing attributes in process `syz.4.459'. [ 353.104315][ T7988] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.119766][ T7988] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.138339][ T7988] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.157941][ T7988] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.363383][ T5840] usb 2-1: USB disconnect, device number 11 [ 354.941486][ T5840] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 354.950949][ T5840] cp210x 2-1:0.0: device disconnected [ 355.073098][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.134660][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.201164][ T8236] tipc: Enabling of bearer rejected, already enabled [ 355.225477][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.246680][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.336556][ T8037] veth0_vlan: entered promiscuous mode [ 355.374188][ T8037] veth1_vlan: entered promiscuous mode [ 355.476811][ T8037] veth0_macvtap: entered promiscuous mode [ 355.522383][ T8037] veth1_macvtap: entered promiscuous mode [ 355.601120][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.614906][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.625158][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.636311][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.646475][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.684495][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.705925][ T8037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.752985][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.807070][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.836423][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.861426][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.901174][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.912281][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.925889][ T8037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.555858][ T8037] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.643071][ T8037] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.689308][ T8037] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.712110][ T8037] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.280038][ T8261] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 357.353643][ T8261] loop8: detected capacity change from 0 to 64 [ 357.937063][ T6476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.010216][ T6476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.794325][ T6476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.802262][ T6476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.177233][ T8292] syzkaller0: entered promiscuous mode [ 361.193500][ T8292] syzkaller0: entered allmulticast mode [ 361.744085][ T8302] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 361.757862][ T8302] loop8: detected capacity change from 0 to 64 [ 364.823729][ T8325] Illegal XDP return value 4294967274 on prog (id 8) dev syz_tun, expect packet loss! [ 365.178185][ T8331] syzkaller0: entered promiscuous mode [ 365.196100][ T8331] syzkaller0: entered allmulticast mode [ 365.480844][ T8339] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 365.493257][ T8339] loop1: detected capacity change from 0 to 64 [ 366.382059][ T8342] syzkaller0: entered promiscuous mode [ 366.388863][ T8342] syzkaller0: entered allmulticast mode [ 366.939684][ T8350] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 366.946695][ T8350] PKCS7: Only support pkcs7_signedData type [ 369.982370][ T8380] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 370.000276][ T8380] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 370.029556][ T8380] loop1: detected capacity change from 0 to 64 [ 370.406432][ T8385] syzkaller0: entered promiscuous mode [ 370.412071][ T8385] syzkaller0: entered allmulticast mode [ 371.052835][ T8398] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 371.059528][ T8398] PKCS7: Only support pkcs7_signedData type [ 373.809215][ T8397] loop1: detected capacity change from 0 to 32768 [ 374.442885][ T8424] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 374.453262][ T8424] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 374.465450][ T8424] loop4: detected capacity change from 0 to 64 [ 375.238398][ T8419] loop8: detected capacity change from 0 to 4096 [ 375.576060][ T8430] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 376.566171][ T8436] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 376.572689][ T8436] PKCS7: Only support pkcs7_signedData type [ 376.663652][ T28] audit: type=1800 audit(1769896083.025:9): pid=8419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.506" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 376.911835][ T8440] hfsplus: unable to find HFS+ superblock [ 376.995159][ T8443] syzkaller0: entered promiscuous mode [ 377.000718][ T8443] syzkaller0: entered allmulticast mode [ 379.095365][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.101746][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.245164][ T8473] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 380.358125][ T8473] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 380.370214][ T8473] loop8: detected capacity change from 0 to 64 [ 381.253953][ T8485] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 381.260465][ T8485] PKCS7: Only support pkcs7_signedData type [ 381.303472][ T8488] hfsplus: unable to find HFS+ superblock [ 381.682196][ T8494] syzkaller0: entered promiscuous mode [ 381.764997][ T8494] syzkaller0: entered allmulticast mode [ 383.948925][ T8510] syz.9.527: attempt to access beyond end of device [ 383.948925][ T8510] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 386.596219][ T8531] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 386.606842][ T8531] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 386.618960][ T8531] loop8: detected capacity change from 0 to 64 [ 388.433425][ T8538] fuse: Bad value for 'fd' [ 388.648790][ T8544] syzkaller0: entered promiscuous mode [ 388.683755][ T8544] syzkaller0: entered allmulticast mode [ 388.853846][ T8551] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 388.860407][ T8551] PKCS7: Only support pkcs7_signedData type [ 389.779591][ T8552] loop9: detected capacity change from 0 to 512 [ 389.787171][ T8552] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 389.880329][ T8559] loop8: detected capacity change from 0 to 128 [ 389.915062][ T8559] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 389.956624][ T8559] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 392.063927][ T8546] syz.9.534 (8546) used greatest stack depth: 17864 bytes left [ 393.416907][ T8585] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 393.427112][ T8585] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 393.444357][ T8585] loop9: detected capacity change from 0 to 64 [ 394.957330][ T49] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.032452][ T8565] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 395.042254][ T8595] loop4: detected capacity change from 0 to 8192 [ 395.230203][ T8601] syzkaller0: entered promiscuous mode [ 395.341066][ T8604] syz.1.539: attempt to access beyond end of device [ 395.341066][ T8604] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 395.368565][ T8601] syzkaller0: entered allmulticast mode [ 395.782871][ T49] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.956210][ T28] audit: type=1800 audit(1769896102.295:10): pid=8608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.544" name="file1" dev="loop4" ino=1048657 res=0 errno=0 [ 397.195004][ T49] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.248707][ T49] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.776051][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 399.800160][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 399.814908][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 399.832109][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 399.841869][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 399.854119][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 400.364818][ T8644] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 400.375346][ T8644] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 400.387508][ T8644] loop4: detected capacity change from 0 to 64 [ 401.569591][ T8660] syz.9.556: attempt to access beyond end of device [ 401.569591][ T8660] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 401.966345][ T5780] Bluetooth: hci0: command tx timeout [ 402.352228][ T8669] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 402.359124][ T8669] PKCS7: Only support pkcs7_signedData type [ 402.423933][ T8672] syzkaller0: entered promiscuous mode [ 402.444355][ T8672] syzkaller0: entered allmulticast mode [ 404.321706][ T5780] Bluetooth: hci0: command tx timeout [ 404.363954][ T8633] chnl_net:caif_netlink_parms(): no params data found [ 405.168051][ T8703] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 405.178390][ T8703] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 405.190523][ T8703] loop9: detected capacity change from 0 to 64 [ 406.252333][ T8713] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 406.363663][ T5780] Bluetooth: hci0: command tx timeout [ 406.454685][ T49] hsr_slave_0: left promiscuous mode [ 406.484275][ T49] hsr_slave_1: left promiscuous mode [ 406.498285][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.524885][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.594260][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.601758][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.657672][ T49] bridge_slave_1: left allmulticast mode [ 406.752390][ T49] bridge_slave_1: left promiscuous mode [ 406.788658][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.011619][ T49] bridge_slave_0: left allmulticast mode [ 407.053812][ T49] bridge_slave_0: left promiscuous mode [ 407.091385][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.351811][ T8734] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 407.358548][ T8734] PKCS7: Only support pkcs7_signedData type [ 407.398723][ T49] veth1_macvtap: left promiscuous mode [ 407.413686][ T49] veth0_macvtap: left promiscuous mode [ 407.439343][ T49] veth1_vlan: left promiscuous mode [ 407.460695][ T49] veth0_vlan: left promiscuous mode [ 408.474118][ T5780] Bluetooth: hci0: command tx timeout [ 409.781573][ T49] team0 (unregistering): Port device team_slave_1 removed [ 409.913118][ T49] team0 (unregistering): Port device team_slave_0 removed [ 409.970589][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.037018][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.628838][ T49] bond0 (unregistering): Released all slaves [ 410.740097][ T8633] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.748282][ T8633] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.756987][ T8633] bridge_slave_0: entered allmulticast mode [ 410.768673][ T8633] bridge_slave_0: entered promiscuous mode [ 410.915155][ T8750] syzkaller0: entered promiscuous mode [ 410.920672][ T8750] syzkaller0: entered allmulticast mode [ 410.974983][ T8633] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.993242][ T8633] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.029534][ T8633] bridge_slave_1: entered allmulticast mode [ 411.078161][ T8633] bridge_slave_1: entered promiscuous mode [ 411.379238][ T8633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.485738][ T8633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.823739][ T8633] team0: Port device team_slave_0 added [ 412.035684][ T8801] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 412.053892][ T8801] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 412.082457][ T8801] loop4: detected capacity change from 0 to 64 [ 412.208133][ T8804] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 412.705408][ T8633] team0: Port device team_slave_1 added [ 412.946025][ T8633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.953138][ T8633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.979146][ C0] vkms_vblank_simulate: vblank timer overrun [ 413.047760][ T8633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.109970][ T8633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.168819][ T8633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.222559][ T8814] loop9: detected capacity change from 0 to 8 [ 413.252911][ T8814] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 413.288330][ T8633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.349372][ T8633] hsr_slave_0: entered promiscuous mode [ 413.368448][ T5784] udevd[5784]: incorrect cramfs checksum on /dev/loop9 [ 413.610024][ T8633] hsr_slave_1: entered promiscuous mode [ 414.008065][ T5784] udevd[5784]: incorrect cramfs checksum on /dev/loop9 [ 414.193275][ T5784] udevd[5784]: incorrect cramfs checksum on /dev/loop9 [ 414.298789][ T8814] cramfs: Error -5 while decompressing! [ 414.352384][ T8814] cramfs: ffffffff973f4382(26)->ffff88805977b000(4096) [ 414.361806][ T8814] cramfs: Error -3 while decompressing! [ 414.372904][ T8814] cramfs: ffffffff973f439c(16)->ffff888075bc8000(4096) [ 414.382274][ T8814] cramfs: Error -5 while decompressing! [ 414.403871][ T8814] cramfs: ffffffff973f4382(26)->ffff88805977b000(4096) [ 414.411604][ T28] audit: type=1800 audit(1769896120.775:11): pid=8814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.577" name="file2" dev="loop9" ino=348 res=0 errno=0 [ 414.431093][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.184338][ T8839] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 415.201725][ T8839] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 415.229365][ T8839] loop9: detected capacity change from 0 to 64 [ 416.739193][ T5082] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 416.749380][ T5082] CPU: 1 PID: 5082 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 416.756985][ T5082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 416.767100][ T5082] Workqueue: hci1 hci_rx_work [ 416.771849][ T5082] Call Trace: [ 416.775169][ T5082] [ 416.778154][ T5082] dump_stack_lvl+0x18c/0x250 [ 416.782921][ T5082] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 416.788606][ T5082] ? show_regs_print_info+0x20/0x20 [ 416.793855][ T5082] ? load_image+0x400/0x400 [ 416.798420][ T5082] ? sysfs_create_dir_ns+0x243/0x2a0 [ 416.803759][ T5082] sysfs_create_dir_ns+0x26e/0x2a0 [ 416.808925][ T5082] ? sysfs_warn_dup+0xa0/0xa0 [ 416.813652][ T5082] ? do_raw_spin_unlock+0x121/0x230 [ 416.818912][ T5082] kobject_add_internal+0x61c/0xcc0 [ 416.824166][ T5082] kobject_add+0x164/0x240 [ 416.828636][ T5082] ? kobject_init+0x1e0/0x1e0 [ 416.833380][ T5082] ? _raw_spin_unlock+0x3a/0x40 [ 416.838282][ T5082] ? get_device_parent+0x366/0x390 [ 416.843455][ T5082] device_add+0x408/0xc20 [ 416.847839][ T5082] hci_conn_add_sysfs+0xd5/0x1e0 [ 416.852830][ T5082] le_conn_complete_evt+0xf5d/0x1540 [ 416.858207][ T5082] ? lock_chain_count+0x20/0x20 [ 416.863117][ T5082] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 416.869413][ T5082] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 416.875105][ T5082] ? hci_le_meta_evt+0x372/0x580 [ 416.880097][ T5082] hci_le_conn_complete_evt+0x187/0x440 [ 416.885702][ T5082] ? hci_remote_host_features_evt+0x150/0x150 [ 416.891830][ T5082] hci_event_packet+0x7ba/0x1270 [ 416.896828][ T5082] ? bis_list+0x290/0x290 [ 416.901200][ T5082] ? kcov_remote_start+0x2b/0x7e0 [ 416.906281][ T5082] ? hci_send_to_monitor+0xd7/0x4f0 [ 416.911547][ T5082] hci_rx_work+0x43a/0xd60 [ 416.916041][ T5082] ? process_scheduled_works+0x96f/0x15d0 [ 416.921810][ T5082] process_scheduled_works+0xa5d/0x15d0 [ 416.927430][ T5082] ? assign_work+0x430/0x430 [ 416.932069][ T5082] ? assign_work+0x3d0/0x430 [ 416.936721][ T5082] worker_thread+0xa55/0xfc0 [ 416.941359][ T5082] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 416.947301][ T5082] ? _raw_spin_unlock+0x40/0x40 [ 416.952186][ T5082] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 416.958168][ T5082] kthread+0x2fa/0x390 [ 416.962289][ T5082] ? pr_cont_work+0x560/0x560 [ 416.967025][ T5082] ? kthread_blkcg+0xd0/0xd0 [ 416.971653][ T5082] ret_from_fork+0x48/0x80 [ 416.976122][ T5082] ? kthread_blkcg+0xd0/0xd0 [ 416.980768][ T5082] ret_from_fork_asm+0x11/0x20 [ 416.985606][ T5082] [ 417.229470][ T5082] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 417.244314][ T5082] Bluetooth: hci1: failed to register connection device [ 418.868505][ T8876] loop1: detected capacity change from 0 to 40427 [ 418.923646][ T8876] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 419.004686][ T8876] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 419.060518][ T8876] F2FS-fs (loop1): invalid crc value [ 419.068383][ T8871] loop4: detected capacity change from 0 to 40427 [ 419.145006][ T8876] F2FS-fs (loop1): Found nat_bits in checkpoint [ 419.164730][ T8871] F2FS-fs (loop4): Found nat_bits in checkpoint [ 419.304159][ T8633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 419.346023][ T8633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 419.385075][ T8876] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 419.392287][ T8876] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 419.403072][ T8633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 419.434873][ T8871] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 419.493984][ T8633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 419.561600][ T28] audit: type=1804 audit(1769896125.925:12): pid=8876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.588" name="/newroot/180/bus/bus" dev="loop1" ino=10 res=1 errno=0 [ 419.690374][ T5968] syz-executor: attempt to access beyond end of device [ 419.690374][ T5968] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 419.755624][ T5968] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 420.624630][ T8633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.678355][ T8633] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.754574][ T6474] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.761907][ T6474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.775794][ T6474] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.783032][ T6474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.628403][ T8633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.818906][ T8633] veth0_vlan: entered promiscuous mode [ 421.853116][ T8633] veth1_vlan: entered promiscuous mode [ 422.072281][ T8633] veth0_macvtap: entered promiscuous mode [ 422.102483][ T8633] veth1_macvtap: entered promiscuous mode [ 422.269552][ T8633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.295008][ T8633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.305149][ T8633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.315753][ T8633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.468542][ T5780] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 422.515358][ T8633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.083627][ T8633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.098545][ T8633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.178209][ T8633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.201110][ T8633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.212718][ T8633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.243807][ T8633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.263625][ T8633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.284626][ T8633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.327400][ T8633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.358987][ T8633] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.432086][ T8633] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.452707][ T8633] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.464566][ T8633] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.304033][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.312356][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.404394][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.424419][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.749502][ T8986] syzkaller0: entered promiscuous mode [ 425.765659][ T8986] syzkaller0: entered allmulticast mode [ 425.973917][ T5860] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 426.175552][ T5860] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 426.198268][ T5860] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.246792][ T5860] usb 1-1: config 0 interface 0 has no altsetting 0 [ 426.266438][ T5860] usb 1-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 426.320751][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.397422][ T5860] usb 1-1: config 0 descriptor?? [ 427.676308][ T5860] usbhid 1-1:0.0: can't add hid device: -71 [ 427.682385][ T5860] usbhid: probe of 1-1:0.0 failed with error -71 [ 427.945664][ T5860] usb 1-1: USB disconnect, device number 2 [ 428.014016][ T5082] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 429.764971][ T9009] fuse: Bad value for 'fd' [ 432.359860][ T9035] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 432.366441][ T9035] PKCS7: Only support pkcs7_signedData type [ 432.482522][ T9030] syzkaller0: entered promiscuous mode [ 432.509699][ T9030] syzkaller0: entered allmulticast mode [ 433.562381][ T5780] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 434.152538][ T9054] loop1: detected capacity change from 0 to 128 [ 434.242547][ T9054] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 435.785705][ T28] audit: type=1800 audit(1769896142.145:13): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.620" name="file1" dev="loop1" ino=94 res=0 errno=0 [ 435.964035][ T9073] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 435.970570][ T9073] PKCS7: Only support pkcs7_signedData type [ 437.084376][ T9081] fuse: Bad value for 'fd' [ 437.724572][ T5780] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 439.915029][ T5870] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 440.361419][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.368226][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.149580][ T5870] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 442.168974][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.193606][ T5870] usb 5-1: Product: syz [ 442.197842][ T5870] usb 5-1: Manufacturer: syz [ 442.223545][ T5870] usb 5-1: SerialNumber: syz [ 442.250081][ T5870] usb 5-1: config 0 descriptor?? [ 442.565153][ T5082] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 443.243053][ T5870] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -71 [ 443.271354][ T5870] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 443.319227][ T5870] usb 5-1: USB disconnect, device number 7 [ 449.154018][ T23] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 449.160895][ T9187] fuse: Bad value for 'fd' [ 449.353894][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 449.387813][ T23] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 449.563184][ T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 449.793423][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 449.913648][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 449.987299][ T23] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 450.036343][ T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 450.070381][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.318935][ T23] usb 2-1: GET_CAPABILITIES returned 0 [ 450.334815][ T23] usbtmc 2-1:16.0: can't read capabilities [ 450.537777][ T23] usb 2-1: USB disconnect, device number 12 [ 451.387284][ T9216] loop9: detected capacity change from 0 to 16 [ 451.508179][ T9216] erofs: (device loop9): mounted with root inode @ nid 36. [ 452.648896][ T9227] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 452.659203][ T9227] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 452.669252][ T9227] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 452.679095][ T9227] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 452.689082][ T9227] erofs: (device loop9): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 453.399434][ T5082] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 457.824610][ T5780] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 457.834307][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 458.787198][ T5082] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 458.798217][ T5082] CPU: 1 PID: 5082 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 458.805825][ T5082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 458.815934][ T5082] Workqueue: hci0 hci_rx_work [ 458.820744][ T5082] Call Trace: [ 458.824066][ T5082] [ 458.827046][ T5082] dump_stack_lvl+0x18c/0x250 [ 458.831783][ T5082] ? show_regs_print_info+0x20/0x20 [ 458.837038][ T5082] ? load_image+0x400/0x400 [ 458.841606][ T5082] sysfs_create_dir_ns+0x26e/0x2a0 [ 458.846767][ T5082] ? sysfs_warn_dup+0xa0/0xa0 [ 458.851487][ T5082] ? do_raw_spin_unlock+0x121/0x230 [ 458.856750][ T5082] kobject_add_internal+0x61c/0xcc0 [ 458.862020][ T5082] kobject_add+0x164/0x240 [ 458.866483][ T5082] ? kobject_init+0x1e0/0x1e0 [ 458.871202][ T5082] ? _raw_spin_unlock+0x3a/0x40 [ 458.876102][ T5082] ? get_device_parent+0x366/0x390 [ 458.881259][ T5082] device_add+0x408/0xc20 [ 458.885649][ T5082] hci_conn_add_sysfs+0xd5/0x1e0 [ 458.890642][ T5082] le_conn_complete_evt+0xf5d/0x1540 [ 458.895982][ T5082] ? hci_event_packet+0x4cb/0x1270 [ 458.901146][ T5082] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 458.907484][ T5082] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 458.913177][ T5082] ? skb_pull_data+0xfb/0x200 [ 458.917907][ T5082] hci_le_conn_complete_evt+0x187/0x440 [ 458.923510][ T5082] ? hci_remote_host_features_evt+0x150/0x150 [ 458.929646][ T5082] hci_event_packet+0x7ba/0x1270 [ 458.934649][ T5082] ? bis_list+0x290/0x290 [ 458.939027][ T5082] ? kcov_remote_start+0x2b/0x7e0 [ 458.944107][ T5082] ? hci_send_to_monitor+0xd7/0x4f0 [ 458.949362][ T5082] hci_rx_work+0x43a/0xd60 [ 458.953836][ T5082] ? process_scheduled_works+0x96f/0x15d0 [ 458.959606][ T5082] process_scheduled_works+0xa5d/0x15d0 [ 458.965232][ T5082] ? assign_work+0x430/0x430 [ 458.969872][ T5082] ? assign_work+0x3d0/0x430 [ 458.974512][ T5082] worker_thread+0xa55/0xfc0 [ 458.979153][ T5082] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 458.985102][ T5082] ? _raw_spin_unlock+0x40/0x40 [ 458.989988][ T5082] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 458.995948][ T5082] kthread+0x2fa/0x390 [ 459.000060][ T5082] ? pr_cont_work+0x560/0x560 [ 459.004790][ T5082] ? kthread_blkcg+0xd0/0xd0 [ 459.009427][ T5082] ret_from_fork+0x48/0x80 [ 459.013895][ T5082] ? kthread_blkcg+0xd0/0xd0 [ 459.018539][ T5082] ret_from_fork_asm+0x11/0x20 [ 459.023371][ T5082] [ 459.042126][ T5082] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 459.057190][ T5082] Bluetooth: hci0: failed to register connection device [ 459.401437][ T9289] fuse: Bad value for 'fd' [ 461.675365][ T28] audit: type=1326 audit(1769896168.045:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9303 comm="syz.9.675" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f196859aeb9 code=0x0 [ 461.826364][ T9309] loop4: detected capacity change from 0 to 8 [ 461.861657][ T9309] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 461.917075][ T5784] udevd[5784]: incorrect cramfs checksum on /dev/loop4 [ 463.117678][ T9327] process 'syz.9.678' launched '/dev/fd/7' with NULL argv: empty string added [ 463.405851][ T9337] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 463.466096][ T9337] loop4: detected capacity change from 0 to 16 [ 463.495350][ T9337] erofs: (device loop4): mounted with root inode @ nid 36. [ 465.351002][ T5082] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 469.852129][ T28] audit: type=1326 audit(1769896176.215:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9371 comm="syz.9.686" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f196859aeb9 code=0x0 [ 471.021412][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 471.107902][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 471.119449][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 471.128600][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 471.136265][ T5780] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 471.145541][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 473.233929][ T5780] Bluetooth: hci4: command tx timeout [ 473.243182][ T9400] chnl_net:caif_netlink_parms(): no params data found [ 474.011323][ T9400] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.073681][ T9400] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.080897][ T9400] bridge_slave_0: entered allmulticast mode [ 474.148121][ T9400] bridge_slave_0: entered promiscuous mode [ 474.180570][ T9400] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.204843][ T9400] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.218596][ T9400] bridge_slave_1: entered allmulticast mode [ 474.231190][ T9400] bridge_slave_1: entered promiscuous mode [ 474.409145][ T9400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.548241][ T9400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.990153][ T9400] team0: Port device team_slave_0 added [ 475.017819][ T9400] team0: Port device team_slave_1 added [ 475.495543][ T5780] Bluetooth: hci4: command tx timeout [ 476.989148][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.145746][ T9400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.152762][ T9400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.233739][ T9400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.264355][ T9400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.283603][ T9400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.351217][ T9400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.478281][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.553625][ T5780] Bluetooth: hci4: command tx timeout [ 477.870150][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.915769][ T28] audit: type=1326 audit(1769896184.285:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.0.695" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f738099aeb9 code=0x0 [ 478.006101][ T9400] hsr_slave_0: entered promiscuous mode [ 478.029968][ T9400] hsr_slave_1: entered promiscuous mode [ 478.114577][ T9400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 478.122224][ T9400] Cannot create hsr debugfs directory [ 478.224214][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.513210][ T49] tipc: Disabling bearer [ 479.529581][ T49] tipc: Left network mode [ 479.633665][ T5780] Bluetooth: hci4: command tx timeout [ 481.967653][ T9505] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 482.017832][ T9505] PKCS7: Only support pkcs7_signedData type [ 483.974163][ T9532] loop4: detected capacity change from 0 to 1024 [ 484.035820][ T8301] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 484.388394][ T8301] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 484.401691][ T8301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.413297][ T8301] usb 1-1: Product: syz [ 484.423689][ T8301] usb 1-1: Manufacturer: syz [ 484.428385][ T8301] usb 1-1: SerialNumber: syz [ 484.502730][ T8301] usb 1-1: config 0 descriptor?? [ 484.541439][ T5859] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 485.159802][ T8301] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 485.310111][ T1121] hfsplus: b-tree write err: -5, ino 4 [ 485.322930][ T5859] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 485.346182][ T5859] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.396818][ T5859] usb 10-1: config 0 descriptor?? [ 485.432265][ T5859] cp210x 10-1:0.0: cp210x converter detected [ 485.787407][ T9400] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 485.937403][ T5859] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 485.988258][ T5859] cp210x 10-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 486.054302][ T5859] cp210x 10-1:0.0: GPIO initialisation failed: -121 [ 486.088888][ T5859] usb 10-1: cp210x converter now attached to ttyUSB0 [ 486.128805][ T9400] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 486.182994][ T9400] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 486.278125][ T49] hsr_slave_0: left promiscuous mode [ 486.318176][ T49] hsr_slave_1: left promiscuous mode [ 486.346450][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.394651][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.412405][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.421862][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.443171][ T49] bridge_slave_1: left allmulticast mode [ 486.461647][ T49] bridge_slave_1: left promiscuous mode [ 486.489771][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.519917][ T49] bridge_slave_0: left allmulticast mode [ 486.527411][ T49] bridge_slave_0: left promiscuous mode [ 486.533237][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.621216][ T8301] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 486.645929][ T49] veth1_macvtap: left promiscuous mode [ 486.651550][ T49] veth0_macvtap: left promiscuous mode [ 486.663719][ T49] veth1_vlan: left promiscuous mode [ 486.675310][ T8301] usb 1-1: USB disconnect, device number 3 [ 486.681436][ T49] veth0_vlan: left promiscuous mode [ 487.642861][ T5860] usb 10-1: USB disconnect, device number 2 [ 487.694346][ T5860] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 487.702880][ T5860] cp210x 10-1:0.0: device disconnected [ 490.921188][ T9593] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 490.928010][ T9593] PKCS7: Only support pkcs7_signedData type [ 491.992176][ T49] team0 (unregistering): Port device team_slave_1 removed [ 492.066273][ T49] team0 (unregistering): Port device team_slave_0 removed [ 492.120453][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.180970][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.622454][ T49] bond0 (unregistering): Released all slaves [ 492.724824][ T9400] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 492.735839][ T9564] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 492.743601][ T9564] IPv6: NLM_F_CREATE should be set when creating new route [ 492.750994][ T9564] IPv6: NLM_F_CREATE should be set when creating new route [ 493.223168][ T9614] loop0: detected capacity change from 0 to 512 [ 493.307759][ T9614] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.717: inode has both inline data and extents flags [ 493.435897][ T9614] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.717: couldn't read orphan inode 15 (err -117) [ 493.694978][ T9614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.968620][ T9400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.984789][ T8633] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.082027][ T9400] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.098208][ T49] IPVS: stop unused estimator thread 0... [ 495.163542][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.170732][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.184993][ T5826] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 495.217707][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.224979][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.409705][ T5826] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 495.429961][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.439439][ T5826] usb 5-1: Product: syz [ 495.444530][ T5826] usb 5-1: Manufacturer: syz [ 495.449298][ T5826] usb 5-1: SerialNumber: syz [ 495.463706][ T5870] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 495.472157][ T5826] usb 5-1: config 0 descriptor?? [ 497.210492][ T5870] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 497.233702][ T5870] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.262524][ T5870] usb 1-1: config 0 interface 0 has no altsetting 0 [ 497.281571][ T5826] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 497.291330][ T5870] usb 1-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 497.319578][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.340720][ T5870] usb 1-1: config 0 descriptor?? [ 497.546086][ T9400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.710163][ T9400] veth0_vlan: entered promiscuous mode [ 497.764115][ T9400] veth1_vlan: entered promiscuous mode [ 497.821004][ T5870] usbhid 1-1:0.0: can't add hid device: -71 [ 497.833445][ T5870] usbhid: probe of 1-1:0.0 failed with error -71 [ 497.871052][ T5870] usb 1-1: USB disconnect, device number 4 [ 497.892694][ T9400] veth0_macvtap: entered promiscuous mode [ 497.925371][ T9400] veth1_macvtap: entered promiscuous mode [ 497.991641][ T9400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.029721][ T9400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.050079][ T9400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.073504][ T9400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.103549][ T9400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.135993][ T9400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.155758][ T9400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.188652][ T9400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.210936][ T9400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.234947][ T9400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.265891][ T9400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.293737][ T9400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.323542][ T9400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.345654][ T9400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.399120][ T9400] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.442002][ T9400] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.451809][ T9400] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.479221][ T9400] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.691706][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.713042][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.811338][ T6475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.860241][ T6475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.905863][ T5826] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 498.926137][ T5826] usb 5-1: USB disconnect, device number 8 [ 499.341985][ T9675] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 499.348643][ T9675] PKCS7: Only support pkcs7_signedData type [ 502.344640][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.354003][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.563228][ T9716] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 507.569975][ T9716] PKCS7: Only support pkcs7_signedData type [ 508.673662][ T5860] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 508.876803][ T5860] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 508.887114][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.915194][ T5860] usb 4-1: Product: syz [ 508.923584][ T5860] usb 4-1: Manufacturer: syz [ 508.928308][ T5860] usb 4-1: SerialNumber: syz [ 508.965184][ T5860] usb 4-1: config 0 descriptor?? [ 511.173585][ T5860] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -110 [ 511.298500][ T5860] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -110 [ 512.482613][ T5870] usb 4-1: USB disconnect, device number 2 [ 515.634185][ T9772] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 515.665413][ T9772] PKCS7: Only support pkcs7_signedData type [ 516.456806][ T9776] loop9: detected capacity change from 0 to 32768 [ 516.485372][ T9776] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 scanned by syz.9.736 (9776) [ 516.592561][ T9776] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 516.641795][ T9776] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 516.661582][ T9776] BTRFS info (device loop9): force clearing of disk cache [ 516.682528][ T9776] BTRFS info (device loop9): enabling auto defrag [ 516.722518][ T9776] BTRFS info (device loop9): enabling ssd optimizations [ 516.763743][ T9776] BTRFS info (device loop9): setting nodatacow, compression disabled [ 516.771914][ T9776] BTRFS info (device loop9): enabling disk space caching [ 516.833574][ T9776] BTRFS info (device loop9): disk space caching is enabled [ 517.493919][ T9776] BTRFS info (device loop9): rebuilding free space tree [ 517.770225][ T9776] BTRFS info (device loop9): disabling free space tree [ 517.799351][ T9776] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 517.889280][ T9776] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 517.964115][ T9776] BTRFS info (device loop9): checking UUID tree [ 520.004444][ T8037] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 522.956353][ T9845] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 523.113535][ T9845] PKCS7: Only support pkcs7_signedData type [ 524.993880][ T5082] Bluetooth: hci0: command 0x0406 tx timeout [ 527.477816][ T9900] syz.3.767: attempt to access beyond end of device [ 527.477816][ T9900] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 527.796071][ T5780] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 527.805991][ T5780] CPU: 0 PID: 5780 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 527.813593][ T5780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 527.823700][ T5780] Workqueue: hci0 hci_rx_work [ 527.828445][ T5780] Call Trace: [ 527.831762][ T5780] [ 527.834744][ T5780] dump_stack_lvl+0x18c/0x250 [ 527.839479][ T5780] ? show_regs_print_info+0x20/0x20 [ 527.844732][ T5780] ? load_image+0x400/0x400 [ 527.849307][ T5780] sysfs_create_dir_ns+0x26e/0x2a0 [ 527.854469][ T5780] ? sysfs_warn_dup+0xa0/0xa0 [ 527.859188][ T5780] ? do_raw_spin_unlock+0x121/0x230 [ 527.864442][ T5780] kobject_add_internal+0x61c/0xcc0 [ 527.869700][ T5780] kobject_add+0x164/0x240 [ 527.874169][ T5780] ? kobject_init+0x1e0/0x1e0 [ 527.878893][ T5780] ? _raw_spin_unlock+0x3a/0x40 [ 527.883798][ T5780] ? get_device_parent+0x366/0x390 [ 527.888999][ T5780] device_add+0x408/0xc20 [ 527.893388][ T5780] hci_conn_add_sysfs+0xd5/0x1e0 [ 527.898384][ T5780] le_conn_complete_evt+0xf5d/0x1540 [ 527.903748][ T5780] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 527.910052][ T5780] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 527.915736][ T5780] ? lockdep_hardirqs_on+0x98/0x150 [ 527.921157][ T5780] ? skb_pull_data+0xfb/0x200 [ 527.925905][ T5780] hci_le_conn_complete_evt+0x187/0x440 [ 527.931521][ T5780] ? hci_remote_host_features_evt+0x150/0x150 [ 527.937643][ T5780] hci_event_packet+0x7ba/0x1270 [ 527.942639][ T5780] ? bis_list+0x290/0x290 [ 527.947053][ T5780] ? kcov_remote_start+0x2b/0x7e0 [ 527.952133][ T5780] ? hci_send_to_monitor+0xd7/0x4f0 [ 527.957401][ T5780] hci_rx_work+0x43a/0xd60 [ 527.961883][ T5780] ? process_scheduled_works+0x96f/0x15d0 [ 527.967651][ T5780] process_scheduled_works+0xa5d/0x15d0 [ 527.973274][ T5780] ? assign_work+0x430/0x430 [ 527.977927][ T5780] ? assign_work+0x3d0/0x430 [ 527.982575][ T5780] worker_thread+0xa55/0xfc0 [ 527.987244][ T5780] kthread+0x2fa/0x390 [ 527.991362][ T5780] ? pr_cont_work+0x560/0x560 [ 527.996088][ T5780] ? kthread_blkcg+0xd0/0xd0 [ 528.000727][ T5780] ret_from_fork+0x48/0x80 [ 528.005190][ T5780] ? kthread_blkcg+0xd0/0xd0 [ 528.009822][ T5780] ret_from_fork_asm+0x11/0x20 [ 528.014658][ T5780] [ 528.067631][ T5780] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 528.081959][ T5780] Bluetooth: hci0: failed to register connection device [ 530.509118][ T5082] Bluetooth: hci0: command 0x0406 tx timeout [ 531.293987][ T9934] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 531.523673][ T9934] PKCS7: Only support pkcs7_signedData type [ 532.611509][ T5082] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 532.621947][ T5082] CPU: 1 PID: 5082 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 532.629548][ T5082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 532.639650][ T5082] Workqueue: hci0 hci_rx_work [ 532.644386][ T5082] Call Trace: [ 532.647703][ T5082] [ 532.650668][ T5082] dump_stack_lvl+0x18c/0x250 [ 532.655410][ T5082] ? show_regs_print_info+0x20/0x20 [ 532.660660][ T5082] ? load_image+0x400/0x400 [ 532.665218][ T5082] sysfs_create_dir_ns+0x26e/0x2a0 [ 532.670413][ T5082] ? sysfs_warn_dup+0xa0/0xa0 [ 532.675140][ T5082] ? do_raw_spin_unlock+0x121/0x230 [ 532.680391][ T5082] kobject_add_internal+0x61c/0xcc0 [ 532.685648][ T5082] kobject_add+0x164/0x240 [ 532.690114][ T5082] ? kobject_init+0x1e0/0x1e0 [ 532.694836][ T5082] ? _raw_spin_unlock+0x3a/0x40 [ 532.699740][ T5082] ? get_device_parent+0x366/0x390 [ 532.704903][ T5082] device_add+0x408/0xc20 [ 532.709287][ T5082] hci_conn_add_sysfs+0xd5/0x1e0 [ 532.714280][ T5082] le_conn_complete_evt+0xf5d/0x1540 [ 532.719614][ T5082] ? hci_event_packet+0x4cb/0x1270 [ 532.724780][ T5082] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 532.731082][ T5082] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 532.736771][ T5082] ? skb_pull_data+0xfb/0x200 [ 532.741518][ T5082] hci_le_conn_complete_evt+0x187/0x440 [ 532.747130][ T5082] ? hci_remote_host_features_evt+0x150/0x150 [ 532.753240][ T5082] hci_event_packet+0x7ba/0x1270 [ 532.758236][ T5082] ? bis_list+0x290/0x290 [ 532.762621][ T5082] ? kcov_remote_start+0x2b/0x7e0 [ 532.767692][ T5082] ? hci_send_to_monitor+0xd7/0x4f0 [ 532.772948][ T5082] hci_rx_work+0x43a/0xd60 [ 532.777434][ T5082] ? process_scheduled_works+0x96f/0x15d0 [ 532.783201][ T5082] process_scheduled_works+0xa5d/0x15d0 [ 532.788847][ T5082] ? assign_work+0x430/0x430 [ 532.793491][ T5082] ? assign_work+0x3d0/0x430 [ 532.798141][ T5082] worker_thread+0xa55/0xfc0 [ 532.802790][ T5082] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 532.808738][ T5082] ? _raw_spin_unlock+0x40/0x40 [ 532.813626][ T5082] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 532.819614][ T5082] kthread+0x2fa/0x390 [ 532.823729][ T5082] ? pr_cont_work+0x560/0x560 [ 532.828461][ T5082] ? kthread_blkcg+0xd0/0xd0 [ 532.833095][ T5082] ret_from_fork+0x48/0x80 [ 532.837558][ T5082] ? kthread_blkcg+0xd0/0xd0 [ 532.842187][ T5082] ret_from_fork_asm+0x11/0x20 [ 532.847027][ T5082] [ 532.894719][ T5082] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 532.909260][ T5082] Bluetooth: hci0: failed to register connection device [ 532.943708][ T8044] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 533.329905][ T8044] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 533.364847][ T8044] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.398643][ T8044] usb 5-1: Product: syz [ 533.412300][ T8044] usb 5-1: Manufacturer: syz [ 533.433655][ T8044] usb 5-1: SerialNumber: syz [ 533.464595][ T8044] usb 5-1: config 0 descriptor?? [ 533.524714][ T9958] syz.0.779: attempt to access beyond end of device [ 533.524714][ T9958] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 533.693108][ T8044] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 536.740524][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 536.748819][ T8044] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -110 [ 537.055680][ T8301] usb 5-1: USB disconnect, device number 9 [ 540.372765][T10031] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 540.379372][T10031] PKCS7: Only support pkcs7_signedData type [ 542.424414][ T968] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 542.608145][ T968] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 542.617644][ T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.648188][ T968] usb 4-1: Product: syz [ 542.652438][ T968] usb 4-1: Manufacturer: syz [ 542.668634][ T968] usb 4-1: SerialNumber: syz [ 542.690057][ T968] usb 4-1: config 0 descriptor?? [ 542.923600][ T968] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 544.321647][ T968] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 544.351033][ T968] usb 4-1: USB disconnect, device number 3 [ 549.314913][T10114] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 549.321413][T10114] PKCS7: Only support pkcs7_signedData type [ 550.293965][ T28] audit: type=1326 audit(1769896256.655:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10119 comm="syz.3.812" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fccf839aeb9 code=0x0 [ 556.760035][T10180] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 556.766651][T10180] PKCS7: Only support pkcs7_signedData type [ 563.524620][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.548865][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.332204][T10263] fuse: Bad value for 'fd' [ 566.555822][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 566.578484][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 566.587580][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 566.598106][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 566.605884][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 566.613235][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 567.246379][ T1108] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.471122][ T1108] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.747795][ T1108] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.960544][ T1108] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.131848][T10275] loop4: detected capacity change from 0 to 40427 [ 568.244603][T10275] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 568.310684][T10275] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 568.369475][T10275] F2FS-fs (loop4): invalid crc value [ 568.409332][T10275] F2FS-fs (loop4): Found nat_bits in checkpoint [ 568.415642][T10267] chnl_net:caif_netlink_parms(): no params data found [ 568.674166][T10275] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 568.700048][ T5780] Bluetooth: hci2: command tx timeout [ 568.712487][T10275] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 569.309015][T10267] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.373767][T10267] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.381051][T10267] bridge_slave_0: entered allmulticast mode [ 569.418096][T10267] bridge_slave_0: entered promiscuous mode [ 569.493790][T10311] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 569.500318][T10311] PKCS7: Only support pkcs7_signedData type [ 569.523829][T10267] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.531025][T10267] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.580483][T10267] bridge_slave_1: entered allmulticast mode [ 569.605926][T10267] bridge_slave_1: entered promiscuous mode [ 569.899906][T10267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.036373][T10267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.311957][T10267] team0: Port device team_slave_0 added [ 570.336858][T10267] team0: Port device team_slave_1 added [ 570.753974][ T5780] Bluetooth: hci2: command tx timeout [ 570.822045][T10267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.852481][T10267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.903556][T10267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.994518][T10267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.017994][T10267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.084191][T10267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.458386][ T1108] hsr_slave_0: left promiscuous mode [ 571.464711][ T1108] hsr_slave_1: left promiscuous mode [ 571.490762][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.523650][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.554763][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.572735][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.604517][ T1108] bridge_slave_1: left allmulticast mode [ 571.610238][ T1108] bridge_slave_1: left promiscuous mode [ 571.646696][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.693229][ T1108] bridge_slave_0: left allmulticast mode [ 571.709272][ T1108] bridge_slave_0: left promiscuous mode [ 571.719997][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.784285][T10341] fuse: Bad value for 'fd' [ 571.792425][ T1108] veth1_macvtap: left promiscuous mode [ 571.811983][ T1108] veth0_macvtap: left promiscuous mode [ 571.817823][ T1108] veth1_vlan: left promiscuous mode [ 571.823348][ T1108] veth0_vlan: left promiscuous mode [ 572.862760][ T5780] Bluetooth: hci2: command tx timeout [ 574.207736][T10371] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 574.233796][T10371] PKCS7: Only support pkcs7_signedData type [ 574.490447][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 574.655576][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 574.773166][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.904619][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.913950][ T5780] Bluetooth: hci2: command tx timeout [ 575.618606][ T1108] bond0 (unregistering): Released all slaves [ 575.758993][T10267] hsr_slave_0: entered promiscuous mode [ 575.772359][T10267] hsr_slave_1: entered promiscuous mode [ 575.794754][T10267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 575.802398][T10267] Cannot create hsr debugfs directory [ 575.980339][T10384] fuse: Bad value for 'fd' [ 576.205815][ T7997] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 576.637865][ T7997] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 576.651968][ T7997] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.372101][ T7997] usb 10-1: Product: syz [ 577.376492][ T7997] usb 10-1: Manufacturer: syz [ 577.381380][ T7997] usb 10-1: SerialNumber: syz [ 577.388859][ T7997] usb 10-1: config 0 descriptor?? [ 577.781458][ T7997] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 579.242871][T10267] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 579.338039][T10267] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 579.372922][T10267] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 579.397595][T10267] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 579.535746][ T7997] dvb_usb_rtl28xxu: probe of 10-1:0.0 failed with error -71 [ 579.562472][ T7997] usb 10-1: USB disconnect, device number 3 [ 579.707904][T10267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.766074][T10267] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.790670][ T6475] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.797939][ T6475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.844989][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.852227][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.998840][T10267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 580.690371][T10454] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 580.697036][T10454] PKCS7: Only support pkcs7_signedData type [ 581.506247][T10267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.702545][T10457] fuse: Bad value for 'fd' [ 581.908276][T10267] veth0_vlan: entered promiscuous mode [ 581.958579][T10267] veth1_vlan: entered promiscuous mode [ 582.033086][T10267] veth0_macvtap: entered promiscuous mode [ 582.071921][T10267] veth1_macvtap: entered promiscuous mode [ 582.118420][T10267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.133100][T10267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.169570][T10267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.186836][T10267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.199380][T10267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.212296][T10267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.229641][T10267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 582.271223][T10267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.307391][T10267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.322326][T10267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.346845][T10267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.368306][T10267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.402541][T10267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.414525][T10267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.442861][T10267] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.467842][T10267] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.486802][T10267] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.513544][ T28] audit: type=1326 audit(1769896288.875:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.9.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196859aeb9 code=0x7ffc0000 [ 582.533287][T10267] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.560940][ T28] audit: type=1326 audit(1769896288.875:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.9.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196859aeb9 code=0x7ffc0000 [ 582.619355][ T28] audit: type=1326 audit(1769896288.915:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.9.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f196859aeb9 code=0x7ffc0000 [ 582.697345][ T28] audit: type=1326 audit(1769896288.915:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.9.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196859aeb9 code=0x7ffc0000 [ 582.820263][ T28] audit: type=1326 audit(1769896288.915:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.9.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196859aeb9 code=0x7ffc0000 [ 582.882911][ T6474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.914298][ T6474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.945762][ T984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.973565][ T984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.066643][T10469] loop4: detected capacity change from 0 to 32768 [ 584.083988][T10469] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.872 (10469) [ 584.887724][T10493] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 584.895266][T10493] PKCS7: Only support pkcs7_signedData type [ 585.476675][T10469] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 585.748150][T10469] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 585.819213][T10497] fuse: Bad value for 'fd' [ 585.823994][T10469] BTRFS info (device loop4): using free space tree [ 585.906721][T10469] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 585.960236][T10469] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 585.995295][T10469] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 587.739905][T10469] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 587.785962][T10469] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 587.842855][T10469] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 587.914417][T10469] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 588.034966][T10469] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 588.072652][T10469] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 588.086037][T10469] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 588.108043][T10469] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 588.119113][T10469] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 588.137294][T10469] BTRFS error (device loop4): open_ctree failed: -12 [ 590.609153][T10554] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 590.615766][T10554] PKCS7: Only support pkcs7_signedData type [ 595.934773][T10572] fuse: Bad value for 'fd' [ 598.513646][ T8044] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 598.715804][ T8044] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 598.747843][ T8044] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.804778][ T8044] usb 5-1: config 0 interface 0 has no altsetting 0 [ 598.823546][ T8044] usb 5-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 598.849989][ T8044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.884509][ T8044] usb 5-1: config 0 descriptor?? [ 602.153994][ T8044] usbhid 5-1:0.0: can't add hid device: -71 [ 602.160085][ T8044] usbhid: probe of 5-1:0.0 failed with error -71 [ 602.175028][ T8044] usb 5-1: USB disconnect, device number 10 [ 602.347481][T10629] fuse: Bad value for 'fd' [ 606.635611][ T8044] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 608.005546][ T8044] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 608.038800][ T8044] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.063604][ T8044] usb 10-1: config 0 interface 0 has no altsetting 0 [ 608.088169][ T8044] usb 10-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 608.134578][ T8044] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.175047][ T8044] usb 10-1: config 0 descriptor?? [ 608.893928][ T8044] lenovo 0003:17EF:60EE.0009: unknown main item tag 0x0 [ 609.003572][ T8044] lenovo 0003:17EF:60EE.0009: unknown main item tag 0x0 [ 609.041250][ T8044] lenovo 0003:17EF:60EE.0009: unknown main item tag 0x0 [ 609.077209][ T8044] lenovo 0003:17EF:60EE.0009: unknown main item tag 0x0 [ 609.129424][ T8044] lenovo 0003:17EF:60EE.0009: unknown main item tag 0x0 [ 609.189460][ T8044] lenovo 0003:17EF:60EE.0009: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.9-1/input0 [ 609.247495][ T8044] lenovo 0003:17EF:60EE.0009: Failed to switch middle button: -71 [ 609.261849][ T8044] lenovo 0003:17EF:60EE.0009: Fn-lock setting failed: -71 [ 609.273940][ T8044] lenovo 0003:17EF:60EE.0009: Sensitivity setting failed: -71 [ 609.299711][ T8044] usb 10-1: USB disconnect, device number 4 [ 609.503311][T10699] fido_id[10699]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 611.669549][T10728] fuse: Bad value for 'fd' [ 611.853548][T10733] loop9: detected capacity change from 0 to 4096 [ 611.927035][T10736] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 611.991679][ T28] audit: type=1800 audit(1769896318.355:23): pid=10733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.922" name="file2" dev="loop9" ino=16 res=0 errno=0 [ 614.238390][ T968] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 615.149041][T10778] loop9: detected capacity change from 0 to 4096 [ 615.158501][ T968] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 615.170053][ T968] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.180323][ T968] usb 1-1: config 0 interface 0 has no altsetting 0 [ 615.187335][ T968] usb 1-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 615.196928][ T968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.207911][ T968] usb 1-1: config 0 descriptor?? [ 615.318239][T10779] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 615.393951][ T28] audit: type=1800 audit(1769896321.735:24): pid=10778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.931" name="file2" dev="loop9" ino=16 res=0 errno=0 [ 615.662581][ T968] lenovo 0003:17EF:60EE.000A: unknown main item tag 0x0 [ 615.681303][ T968] lenovo 0003:17EF:60EE.000A: unknown main item tag 0x0 [ 615.705969][ T968] lenovo 0003:17EF:60EE.000A: unknown main item tag 0x0 [ 615.733166][ T968] lenovo 0003:17EF:60EE.000A: unknown main item tag 0x0 [ 615.747208][T10769] loop4: detected capacity change from 0 to 32768 [ 615.758340][ T968] lenovo 0003:17EF:60EE.000A: unknown main item tag 0x0 [ 615.795019][ T968] lenovo 0003:17EF:60EE.000A: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.0-1/input0 [ 615.874349][ T968] lenovo 0003:17EF:60EE.000A: Failed to switch middle button: -71 [ 615.893974][ T968] lenovo 0003:17EF:60EE.000A: Fn-lock setting failed: -71 [ 615.935705][ T968] lenovo 0003:17EF:60EE.000A: Sensitivity setting failed: -71 [ 616.018634][ T968] usb 1-1: USB disconnect, device number 5 [ 616.064238][T10769] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 616.064238][T10769] [ 616.076057][T10769] ERROR: (device loop4): remounting filesystem as read-only [ 616.159948][T10787] fido_id[10787]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 618.385021][T10802] fuse: Bad value for 'fd' [ 621.816788][T10838] loop0: detected capacity change from 0 to 256 [ 621.969315][T10838] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 622.120598][T10814] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.129873][T10814] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.151996][T10814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.216532][T10859] loop9: detected capacity change from 0 to 32768 [ 624.220726][T10814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.681547][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.688155][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.928977][T10814] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.952647][T10814] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.966944][T10814] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.976439][T10814] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.997851][T10877] fuse: Bad value for 'fd' [ 627.225963][ T6474] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.540564][ T6474] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.724847][ T6474] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.542702][ T6474] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.845437][ T5082] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 632.859039][ T5082] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 632.867864][ T5082] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 632.878012][ T5082] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 632.919912][ T5082] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 632.943845][ T5082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 634.995221][ T5780] Bluetooth: hci0: command tx timeout [ 637.690300][ T5780] Bluetooth: hci0: command tx timeout [ 639.714077][ T5780] Bluetooth: hci0: command tx timeout [ 639.723760][T10914] chnl_net:caif_netlink_parms(): no params data found [ 639.916463][ T6474] hsr_slave_0: left promiscuous mode [ 640.039975][ T6474] hsr_slave_1: left promiscuous mode [ 640.047041][ T6474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.069285][ T6474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.134426][ T6474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.142340][ T6474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.204444][ T6474] bridge_slave_1: left allmulticast mode [ 640.210257][ T6474] bridge_slave_1: left promiscuous mode [ 640.258847][ T6474] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.309433][ T6474] bridge_slave_0: left allmulticast mode [ 640.334842][ T6474] bridge_slave_0: left promiscuous mode [ 640.350892][ T6474] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.480876][ T6474] veth1_macvtap: left promiscuous mode [ 640.493663][ T6474] veth0_macvtap: left promiscuous mode [ 640.510699][ T6474] veth1_vlan: left promiscuous mode [ 640.537596][ T6474] veth0_vlan: left promiscuous mode [ 641.794442][ T5780] Bluetooth: hci0: command tx timeout [ 646.789311][ T6474] team0 (unregistering): Port device team_slave_1 removed [ 646.894242][T11010] loop4: detected capacity change from 0 to 4096 [ 646.937056][T11011] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 646.972830][ T6474] team0 (unregistering): Port device team_slave_0 removed [ 646.982820][ T28] audit: type=1800 audit(1769896353.355:25): pid=11010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.969" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 647.182384][ T6474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.324771][ T6474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 647.541187][ T27] libceph: connect (1)[c::]:6789 error -101 [ 647.623332][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 647.907923][T11015] ceph: No mds server is up or the cluster is laggy [ 647.960480][ T27] libceph: connect (1)[c::]:6789 error -101 [ 647.997229][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 649.880296][T11031] loop9: detected capacity change from 0 to 128 [ 649.982918][T11031] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 649.997856][ T6474] bond0 (unregistering): Released all slaves [ 650.009875][T11031] ext4 filesystem being mounted at /141/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 651.989969][T10914] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.997364][T10914] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.013866][T10914] bridge_slave_0: entered allmulticast mode [ 652.035094][T10914] bridge_slave_0: entered promiscuous mode [ 652.088249][T10914] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.113003][T10914] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.120791][T10914] bridge_slave_1: entered allmulticast mode [ 652.246500][T10914] bridge_slave_1: entered promiscuous mode [ 652.414373][T10914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.471971][T10914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.508844][T11036] loop4: detected capacity change from 0 to 32768 [ 652.591223][T11036] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 652.699365][T10914] team0: Port device team_slave_0 added [ 652.764281][T10914] team0: Port device team_slave_1 added [ 652.822818][T11036] XFS (loop4): Ending clean mount [ 652.957771][T10914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.996173][T10914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.129220][T10914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.307754][ T5968] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 653.509366][T10914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.593555][T10914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.683562][T10914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.919201][T10914] hsr_slave_0: entered promiscuous mode [ 653.970872][T10914] hsr_slave_1: entered promiscuous mode [ 656.543269][ T8037] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 658.640298][T11101] loop2: detected capacity change from 0 to 32768 [ 658.807520][T11108] loop9: detected capacity change from 0 to 32768 [ 658.896761][T11108] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 658.933288][T11112] loop4: detected capacity change from 0 to 4096 [ 658.988719][T11108] XFS (loop9): Ending clean mount [ 659.006808][T11108] XFS (loop9): Quotacheck needed: Please wait. [ 659.050974][T11123] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 659.067198][T10914] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 659.109273][T10914] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 659.130402][ T28] audit: type=1800 audit(1769896365.495:26): pid=11112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.987" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 659.160403][T11108] XFS (loop9): Quotacheck: Done. [ 659.200317][T10914] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 659.240386][T10914] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 660.533240][T10914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.620343][ T8037] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 660.644039][T10914] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.720362][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.727667][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.166147][ T6474] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.173454][ T6474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.651402][T10914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 662.225587][ T7997] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 663.465861][ T7997] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 663.535599][ T7997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.626826][ T7997] usb 3-1: Product: syz [ 663.631070][ T7997] usb 3-1: Manufacturer: syz [ 663.709686][ T7997] usb 3-1: SerialNumber: syz [ 663.780488][ T7997] usb 3-1: config 0 descriptor?? [ 664.505386][ T7997] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 665.356818][T10914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.244436][T11202] loop9: detected capacity change from 0 to 1024 [ 666.309169][T10914] veth0_vlan: entered promiscuous mode [ 666.334333][T10914] veth1_vlan: entered promiscuous mode [ 666.351345][T11202] Quota error (device loop9): do_check_range: Getting block 64 out of range 1-5 [ 666.365041][T11202] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 666.375027][T11202] EXT4-fs error (device loop9): ext4_acquire_dquot:6949: comm syz.9.997: Failed to acquire dquot type 0 [ 666.412104][T11202] EXT4-fs error (device loop9): mb_free_blocks:1954: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 666.435285][T11202] EXT4-fs error (device loop9): ext4_do_update_inode:5248: inode #13: comm syz.9.997: corrupted inode contents [ 666.456785][T11202] EXT4-fs error (device loop9): ext4_dirty_inode:6124: inode #13: comm syz.9.997: mark_inode_dirty error [ 666.480123][T10914] veth0_macvtap: entered promiscuous mode [ 666.488277][T11202] EXT4-fs error (device loop9): ext4_do_update_inode:5248: inode #13: comm syz.9.997: corrupted inode contents [ 666.512896][T10914] veth1_macvtap: entered promiscuous mode [ 666.526442][ T7997] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 666.547337][ T7997] usb 3-1: USB disconnect, device number 2 [ 666.553981][T11202] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #13: comm syz.9.997: mark_inode_dirty error [ 666.577671][T11202] EXT4-fs error (device loop9): ext4_do_update_inode:5248: inode #13: comm syz.9.997: corrupted inode contents [ 666.601035][T10914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.618763][T11202] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 666.633530][T10914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.645082][T11202] EXT4-fs error (device loop9): ext4_do_update_inode:5248: inode #13: comm syz.9.997: corrupted inode contents [ 666.657177][T10914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.670482][T11202] EXT4-fs error (device loop9): ext4_truncate:4294: inode #13: comm syz.9.997: mark_inode_dirty error [ 666.682103][T10914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.694990][T11202] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 666.709130][T10914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.739622][T10914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.756992][T11202] EXT4-fs (loop9): 1 truncate cleaned up [ 666.764216][T11202] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.773797][T10914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.801798][T10914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.815116][T11191] loop4: detected capacity change from 0 to 32768 [ 666.822893][T10914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.841339][T10914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.933304][T10914] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.082463][T10914] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.138364][T10914] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.173608][T10914] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.060163][ T8037] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.131261][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.166099][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.302925][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.350859][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.383680][T10828] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 673.582285][T10828] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 673.609904][T10828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.638701][T10828] usb 6-1: Product: syz [ 673.643030][T10828] usb 6-1: Manufacturer: syz [ 673.672897][T10828] usb 6-1: SerialNumber: syz [ 673.695892][T10828] usb 6-1: config 0 descriptor?? [ 673.933936][T10828] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 677.390730][T10828] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -110 [ 677.559915][T10829] usb 6-1: USB disconnect, device number 3 [ 678.645585][T11283] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 678.813148][T11279] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 686.214291][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.220808][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.781233][T11337] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 686.787940][T11337] PKCS7: Only support pkcs7_signedData type [ 693.956990][T10830] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 694.178245][T10830] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 694.217354][T10830] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.266908][T10830] usb 10-1: Product: syz [ 694.271231][T10830] usb 10-1: Manufacturer: syz [ 694.307044][T10830] usb 10-1: SerialNumber: syz [ 694.345812][T10830] usb 10-1: config 0 descriptor?? [ 694.818515][T10830] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 695.609113][T11394] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 695.615950][T11394] PKCS7: Only support pkcs7_signedData type [ 698.614636][T10830] dvb_usb_rtl28xxu: probe of 10-1:0.0 failed with error -110 [ 698.858453][ T5859] usb 10-1: USB disconnect, device number 5 [ 704.034845][ T28] audit: type=1326 audit(1769896410.405:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11431 comm="syz.2.1035" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffba559aeb9 code=0x0 [ 706.631103][T11429] loop4: detected capacity change from 0 to 32768 [ 706.828811][T11429] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 706.907665][T11429] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop4": -EINTR [ 706.908562][T11429] XFS (loop4): log mount failed [ 706.999302][T11466] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 707.005812][T11466] PKCS7: Only support pkcs7_signedData type [ 708.843598][ T788] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 709.022981][T11479] fuse: Bad value for 'fd' [ 709.085525][ T788] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 709.114027][ T788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.131521][ T788] usb 6-1: Product: syz [ 709.154070][ T788] usb 6-1: Manufacturer: syz [ 709.181406][ T788] usb 6-1: SerialNumber: syz [ 709.233655][ T788] usb 6-1: config 0 descriptor?? [ 709.467411][ T788] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 712.695706][ T788] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 713.015481][ T788] usb 6-1: USB disconnect, device number 4 [ 721.172896][ T788] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 721.387782][ T788] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 721.413483][ T788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.433696][ T788] usb 5-1: Product: syz [ 721.437934][ T788] usb 5-1: Manufacturer: syz [ 721.442569][ T788] usb 5-1: SerialNumber: syz [ 721.490632][ T788] usb 5-1: config 0 descriptor?? [ 721.763703][ T788] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 724.135326][ T788] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 724.216574][ T788] usb 5-1: USB disconnect, device number 11 [ 745.233619][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 748.102209][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.112067][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.362605][T11813] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 752.369974][T11813] IPv6: NLM_F_CREATE should be set when creating new route [ 752.377349][T11813] IPv6: NLM_F_CREATE should be set when creating new route [ 753.390763][T11812] loop4: detected capacity change from 0 to 32768 [ 755.152735][T11812] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 755.239493][T11812] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop4": -EINTR [ 755.240189][T11812] XFS (loop4): log mount failed [ 767.295338][T11907] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 777.025517][T11974] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 777.032881][T11974] IPv6: NLM_F_CREATE should be set when creating new route [ 777.040253][T11974] IPv6: NLM_F_CREATE should be set when creating new route [ 782.140898][T11987] loop5: detected capacity change from 0 to 32768 [ 782.368278][T11987] read_mapping_page failed! [ 782.393526][T11987] jfs_mount: Failed to read AGGREGATE_I [ 782.403704][T11987] Mount JFS Failure: -5 [ 788.119422][T12038] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 795.886524][ T7997] libceph: connect (1)[c::]:6789 error -101 [ 795.904036][ T7997] libceph: mon0 (1)[c::]:6789 connect error [ 795.931415][ T7997] libceph: connect (1)[c::]:6789 error -101 [ 795.954754][ T7997] libceph: mon0 (1)[c::]:6789 connect error [ 796.201650][T12097] ceph: No mds server is up or the cluster is laggy [ 796.471442][ T7997] libceph: connect (1)[c::]:6789 error -101 [ 796.477685][ T7997] libceph: mon0 (1)[c::]:6789 connect error [ 797.212617][T12117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 801.733438][T12148] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 801.740822][T12148] IPv6: NLM_F_CREATE should be set when creating new route [ 801.748211][T12148] IPv6: NLM_F_CREATE should be set when creating new route [ 806.466163][T12187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 809.379002][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.385819][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 817.349463][T12270] loop9: detected capacity change from 0 to 32768 [ 817.519071][T12270] JBD2: Ignoring recovery information on journal [ 817.910377][T12270] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 819.031302][ T8037] ocfs2: Unmounting device (7,9) on (node local) [ 820.634574][T12324] loop5: detected capacity change from 0 to 8 [ 842.778976][T12488] fuse: Bad value for 'fd' [ 850.456441][T12568] fuse: Bad value for 'fd' [ 856.221669][T12624] fuse: Bad value for 'fd' [ 857.423484][T10829] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 857.940494][T10829] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 857.982152][T10829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.997206][T10829] usb 6-1: Product: syz [ 858.001556][T10829] usb 6-1: Manufacturer: syz [ 858.053387][T10829] usb 6-1: SerialNumber: syz [ 858.082644][T10829] usb 6-1: config 0 descriptor?? [ 858.260167][T12655] loop9: detected capacity change from 0 to 256 [ 858.333581][T10829] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 858.345751][T12655] exfat: Deprecated parameter 'utf8' [ 858.403797][T12655] exfat: Deprecated parameter 'namecase' [ 858.409607][T12655] exfat: Deprecated parameter 'namecase' [ 858.552843][T12655] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f81e, utbl_chksum : 0xe619d30d) [ 858.735783][ T9] libceph: connect (1)[c::]:6789 error -101 [ 858.782640][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 858.944641][T12660] ceph: No mds server is up or the cluster is laggy [ 860.305810][T10829] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 860.421947][T10829] usb 6-1: USB disconnect, device number 5 [ 860.575008][T12682] loop2: detected capacity change from 0 to 1024 [ 860.605117][T12682] EXT4-fs: Ignoring removed oldalloc option [ 862.365855][T12682] EXT4-fs: Ignoring removed bh option [ 862.418281][T12682] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 862.715897][T12682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 862.944839][ T28] audit: type=1804 audit(1769896569.305:28): pid=12682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1255" name="/newroot/97/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 863.154640][T10267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.164531][T12697] fuse: Bad value for 'fd' [ 870.442676][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.451308][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 879.446324][T12795] loop2: detected capacity change from 0 to 32768 [ 879.634289][T12795] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 879.948873][T12795] XFS (loop2): Ending clean mount [ 880.039151][T12795] XFS (loop2): Quotacheck needed: Please wait. [ 881.329730][T12795] XFS (loop2): Quotacheck: Done. [ 883.734325][T10267] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 904.217094][T12946] fuse: Bad value for 'fd' [ 909.978823][T12986] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1307'. [ 913.627370][T13008] fuse: Bad value for 'fd' [ 919.437345][T13054] fuse: Bad value for 'fd' [ 921.397220][T11752] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 921.423217][T11752] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 921.437889][T11752] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 921.448900][T11752] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 921.462311][T11752] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 921.474891][T11752] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 923.556046][T11752] Bluetooth: hci2: command tx timeout [ 925.635209][T11752] Bluetooth: hci2: command tx timeout [ 927.713498][T11752] Bluetooth: hci2: command tx timeout [ 929.823723][T11752] Bluetooth: hci2: command tx timeout [ 930.456315][T13086] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 930.470385][T13086] IPv6: NLM_F_CREATE should be set when creating new route [ 930.480808][T13086] IPv6: NLM_F_CREATE should be set when creating new route [ 930.804824][ T5840] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 931.073998][ T5840] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 931.142283][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.183499][ T5840] usb 6-1: Product: syz [ 931.188733][ T5840] usb 6-1: Manufacturer: syz [ 931.253493][ T5840] usb 6-1: SerialNumber: syz [ 931.261831][T13061] chnl_net:caif_netlink_parms(): no params data found [ 931.313148][ T5840] usb 6-1: config 0 descriptor?? [ 933.806859][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.807183][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.303991][ T5840] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -71 [ 934.357956][ T5840] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 934.404352][ T5840] usb 6-1: USB disconnect, device number 6 [ 936.038487][T13061] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.086119][T13061] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.133845][T13061] bridge_slave_0: entered allmulticast mode [ 936.151141][T13061] bridge_slave_0: entered promiscuous mode [ 936.173039][T13061] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.243711][T13061] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.261154][T13061] bridge_slave_1: entered allmulticast mode [ 937.655853][T13061] bridge_slave_1: entered promiscuous mode [ 937.859862][T13123] loop5: detected capacity change from 0 to 512 [ 937.954306][T13123] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 938.095298][T13123] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 938.251042][T13061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.428107][T13061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.628698][T13123] EXT4-fs error (device loop5): mb_free_blocks:1954: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 938.709364][T13123] EXT4-fs error (device loop5): ext4_do_update_inode:5248: inode #11: comm syz.5.1333: corrupted inode contents [ 938.818164][T13123] EXT4-fs error (device loop5): ext4_dirty_inode:6124: inode #11: comm syz.5.1333: mark_inode_dirty error [ 938.986893][T13123] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1333: invalid indirect mapped block 1 (level 1) [ 939.061442][T13061] team0: Port device team_slave_0 added [ 939.064839][T13123] EXT4-fs error (device loop5): ext4_do_update_inode:5248: inode #11: comm syz.5.1333: corrupted inode contents [ 939.169175][T13061] team0: Port device team_slave_1 added [ 939.189337][T13123] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 939.269333][T13123] EXT4-fs error (device loop5): ext4_do_update_inode:5248: inode #11: comm syz.5.1333: corrupted inode contents [ 939.357227][T13123] EXT4-fs error (device loop5): ext4_truncate:4294: inode #11: comm syz.5.1333: mark_inode_dirty error [ 939.422789][T13123] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 939.494360][T13123] EXT4-fs (loop5): 1 truncate cleaned up [ 939.515683][T13123] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 940.078842][T13131] loop4: detected capacity change from 0 to 32768 [ 940.176688][T13131] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 940.356163][T13131] XFS (loop4): Ending clean mount [ 940.371543][T13131] XFS (loop4): Quotacheck needed: Please wait. [ 940.449245][T13061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.510231][T13061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.531592][T10914] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.665934][T13061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.738524][T13131] XFS (loop4): Quotacheck: Done. [ 941.353635][T13061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.426988][T13061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.853443][T13061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 942.160025][ T5968] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 944.135084][T13061] hsr_slave_0: entered promiscuous mode [ 944.415172][T13061] hsr_slave_1: entered promiscuous mode [ 944.433460][ T5870] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 944.609302][T13061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 944.641319][T13061] Cannot create hsr debugfs directory [ 944.677402][ T5870] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 944.742031][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.793573][ T5870] usb 6-1: Product: syz [ 944.799274][ T5870] usb 6-1: Manufacturer: syz [ 944.843424][ T5870] usb 6-1: SerialNumber: syz [ 944.904831][ T5870] usb 6-1: config 0 descriptor?? [ 946.283256][ T5870] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 946.519216][T13171] loop4: detected capacity change from 0 to 512 [ 946.656485][T13171] EXT4-fs error (device loop4): ext4_orphan_get:1398: inode #15: comm syz.4.1339: inode has both inline data and extents flags [ 946.758368][T13171] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.1339: couldn't read orphan inode 15 (err -117) [ 946.798026][T13171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 947.029237][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 947.072521][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 947.092629][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 947.113233][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 947.149448][ T5780] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 947.158593][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 947.395629][ T172] hsr_slave_0: left promiscuous mode [ 947.549538][ T172] hsr_slave_1: left promiscuous mode [ 947.603686][ T172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 947.678978][ T172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 947.777949][ T172] bridge_slave_1: left allmulticast mode [ 947.786967][ T172] bridge_slave_1: left promiscuous mode [ 947.822138][ T172] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.839440][ T5968] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.910353][ T5870] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 947.927538][ T172] bridge_slave_0: left allmulticast mode [ 947.973884][ T172] bridge_slave_0: left promiscuous mode [ 947.984317][ T172] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.023662][ T5870] usb 6-1: USB disconnect, device number 7 [ 949.396492][T11752] Bluetooth: hci4: command tx timeout [ 951.518965][T11752] Bluetooth: hci4: command tx timeout [ 953.307466][ T172] team0 (unregistering): Port device team_slave_1 removed [ 953.555783][T11752] Bluetooth: hci4: command tx timeout [ 953.650454][ T172] team0 (unregistering): Port device team_slave_0 removed [ 954.142087][ T172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 954.745418][ T172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 955.087119][T10828] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 955.335033][T10828] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 955.346781][T10828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.380678][T10828] usb 6-1: Product: syz [ 955.386012][T10828] usb 6-1: Manufacturer: syz [ 955.391019][T10828] usb 6-1: SerialNumber: syz [ 955.401372][T10828] usb 6-1: config 0 descriptor?? [ 955.645280][T10828] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 955.656496][T11752] Bluetooth: hci4: command tx timeout [ 955.749861][ T172] bond0 (unregistering): Released all slaves [ 959.973544][T10828] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 960.008462][T10828] usb 6-1: USB disconnect, device number 8 [ 965.636309][ T172] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.749312][T13175] chnl_net:caif_netlink_parms(): no params data found [ 965.793739][T13231] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 965.853208][ T172] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.023742][T13231] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 966.039977][ T172] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.054049][T13231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.076505][T13231] usb 5-1: Product: syz [ 966.093930][T13231] usb 5-1: Manufacturer: syz [ 966.109470][T13231] usb 5-1: SerialNumber: syz [ 966.140173][T13231] usb 5-1: config 0 descriptor?? [ 966.246922][ T172] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.343530][T13061] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 966.408609][T13231] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 966.451014][T13061] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 966.479626][T13061] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 966.610592][T13175] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.619924][T13175] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.633983][T13175] bridge_slave_0: entered allmulticast mode [ 966.654791][T13175] bridge_slave_0: entered promiscuous mode [ 966.673555][T13061] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 966.697030][T13175] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.716193][T13175] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.724779][T13175] bridge_slave_1: entered allmulticast mode [ 966.735312][T13175] bridge_slave_1: entered promiscuous mode [ 966.941665][T13175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 966.979834][T13175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 967.347620][T13175] team0: Port device team_slave_0 added [ 967.362004][T13175] team0: Port device team_slave_1 added [ 967.693507][T13175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 967.701509][T13175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 967.735441][T13175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.815647][T13175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 967.842950][T13175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 967.890403][T13175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 968.030107][T13298] loop5: detected capacity change from 0 to 512 [ 968.091443][T13231] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 968.119185][T13231] usb 5-1: USB disconnect, device number 12 [ 968.327433][T13298] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 968.345255][T13175] hsr_slave_0: entered promiscuous mode [ 968.359258][T13175] hsr_slave_1: entered promiscuous mode [ 968.367524][T13298] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 968.384048][T13175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 968.392835][T13175] Cannot create hsr debugfs directory [ 968.525716][T13298] EXT4-fs error (device loop5): ext4_do_update_inode:5248: inode #2: comm syz.5.1359: corrupted inode contents [ 968.566293][T13298] EXT4-fs error (device loop5): ext4_dirty_inode:6124: inode #2: comm syz.5.1359: mark_inode_dirty error [ 968.793969][T13298] EXT4-fs error (device loop5): ext4_do_update_inode:5248: inode #2: comm syz.5.1359: corrupted inode contents [ 968.840159][T13298] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.1359: mark_inode_dirty error [ 970.038373][T10914] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.091119][T13061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 971.726173][T13061] 8021q: adding VLAN 0 to HW filter on device team0 [ 972.729023][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.737208][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.991412][ T984] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.999248][ T984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 973.219742][T13317] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 973.778686][ T172] hsr_slave_0: left promiscuous mode [ 973.873672][ T172] hsr_slave_1: left promiscuous mode [ 973.963776][ T172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 974.020573][ T172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 974.041725][ T172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 974.059771][ T172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 974.100976][ T172] bridge_slave_1: left allmulticast mode [ 974.108568][ T172] bridge_slave_1: left promiscuous mode [ 974.128731][ T172] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.151628][ T172] bridge_slave_0: left allmulticast mode [ 974.170461][ T172] bridge_slave_0: left promiscuous mode [ 974.191003][ T172] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.435866][T13321] loop4: detected capacity change from 0 to 256 [ 974.451662][T13321] exfat: Deprecated parameter 'utf8' [ 974.458864][T13321] exfat: Deprecated parameter 'namecase' [ 974.591247][T13321] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 975.016354][ T172] veth1_macvtap: left promiscuous mode [ 975.045282][ T172] veth0_macvtap: left promiscuous mode [ 975.051245][ T172] veth1_vlan: left promiscuous mode [ 975.089358][ T172] veth0_vlan: left promiscuous mode [ 978.471404][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 978.513694][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 978.566484][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 978.594663][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 978.624290][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 978.632454][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 979.381726][ T172] team0 (unregistering): Port device team_slave_1 removed [ 979.545300][ T172] team0 (unregistering): Port device team_slave_0 removed [ 979.900347][ T172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 980.056204][ T172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 980.763757][T11752] Bluetooth: hci1: command tx timeout [ 981.216215][ T172] bond0 (unregistering): Released all slaves [ 982.838853][T11752] Bluetooth: hci1: command tx timeout [ 984.500399][T13347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1370'. [ 984.943540][T11752] Bluetooth: hci1: command tx timeout [ 986.633018][T13329] chnl_net:caif_netlink_parms(): no params data found [ 986.677798][T13175] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 986.740772][T13175] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 986.793229][T13175] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 986.857874][T13175] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 986.994071][T11752] Bluetooth: hci1: command tx timeout [ 987.170666][T13329] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.180551][T13329] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.191498][T13329] bridge_slave_0: entered allmulticast mode [ 987.199892][T13329] bridge_slave_0: entered promiscuous mode [ 987.210853][T13329] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.221991][T13329] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.231535][T13329] bridge_slave_1: entered allmulticast mode [ 987.240081][T13329] bridge_slave_1: entered promiscuous mode [ 987.364521][T13329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 987.448390][T13329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 987.688213][T13329] team0: Port device team_slave_0 added [ 987.718168][T13329] team0: Port device team_slave_1 added [ 987.852483][T13329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 987.864106][T13329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.891583][ C0] vkms_vblank_simulate: vblank timer overrun [ 987.916155][T13329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.986092][T13329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 988.009766][T13329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 988.083883][T13329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 988.955971][T13329] hsr_slave_0: entered promiscuous mode [ 988.982760][T13329] hsr_slave_1: entered promiscuous mode [ 989.008789][T13329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 989.053413][T13329] Cannot create hsr debugfs directory [ 989.592037][T13175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 989.690983][T13175] 8021q: adding VLAN 0 to HW filter on device team0 [ 989.779564][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.787368][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 989.849210][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.857321][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 990.032845][T13384] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1377'. [ 990.689846][T13329] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 990.724171][T13329] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 990.753124][T13392] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 990.767890][T13392] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 990.784846][T13392] loop5: detected capacity change from 0 to 64 [ 990.867153][T13329] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 990.890571][T13329] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 990.916329][ T172] hsr_slave_0: left promiscuous mode [ 990.926830][ T172] hsr_slave_1: left promiscuous mode [ 990.935406][ T172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 990.944371][ T172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 990.998338][ T172] bridge_slave_1: left allmulticast mode [ 991.011337][ T172] bridge_slave_1: left promiscuous mode [ 991.018619][ T172] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.040867][ T172] bridge_slave_0: left allmulticast mode [ 991.051397][ T172] bridge_slave_0: left promiscuous mode [ 991.060573][ T172] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.196574][T13394] fuse: Bad value for 'fd' [ 991.730268][ T172] team0 (unregistering): Port device team_slave_1 removed [ 991.800098][ T172] team0 (unregistering): Port device team_slave_0 removed [ 991.878975][ T172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 991.966720][ T172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 992.667568][ T172] bond0 (unregistering): Released all slaves [ 992.996710][ T5840] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 993.247113][ T5840] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 993.266519][T13329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 993.274249][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.274281][ T5840] usb 6-1: Product: syz [ 993.274298][ T5840] usb 6-1: Manufacturer: syz [ 993.274316][ T5840] usb 6-1: SerialNumber: syz [ 993.316784][ T5840] usb 6-1: config 0 descriptor?? [ 993.324254][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.331070][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.436251][T13329] 8021q: adding VLAN 0 to HW filter on device team0 [ 993.564955][ T5840] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 993.600220][T13175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 993.625029][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.633388][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.737366][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.745367][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.459159][T13175] veth0_vlan: entered promiscuous mode [ 994.508504][T13175] veth1_vlan: entered promiscuous mode [ 994.549365][T13329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 994.671501][T13175] veth0_macvtap: entered promiscuous mode [ 994.728631][T13175] veth1_macvtap: entered promiscuous mode [ 994.773363][T13175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 994.785499][T13175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.833064][T13175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 994.990594][T13175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.045180][T13175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 995.149246][T13175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.198804][T13175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.245154][T13175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.320364][T13175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.384271][T13175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.572315][T13175] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.600461][T13175] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.628237][T13175] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.628518][ T5840] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 995.663598][T13175] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.724225][ T5840] usb 6-1: USB disconnect, device number 9 [ 995.805320][T13464] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 995.819771][T13464] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 995.834968][T13464] loop4: detected capacity change from 0 to 64 [ 995.989966][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.019875][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.132926][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.157263][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.380753][T13329] veth0_vlan: entered promiscuous mode [ 996.578232][T13329] veth1_vlan: entered promiscuous mode [ 999.810082][T13329] veth0_macvtap: entered promiscuous mode [ 999.859808][T13329] veth1_macvtap: entered promiscuous mode [ 999.917633][T13329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.943689][T13329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.980899][T13329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.023369][T13329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.088097][T13329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.132243][T13329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.191059][T13329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1000.211807][T13329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1000.240268][T13329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.251644][T13329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1000.266333][T13329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.280352][T13329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1000.294697][T13329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.308192][T13329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1000.331476][T13329] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.352658][T13329] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.374486][T13329] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.395622][T13329] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.605719][ T6476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.637243][ T6476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.846340][ T984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.899702][ T984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.790582][T13519] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1001.802203][T13519] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1001.816521][T13519] loop5: detected capacity change from 0 to 64 [ 1001.844221][ T5840] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 1002.078494][ T5840] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1002.096226][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.742031][ T5840] usb 5-1: Product: syz [ 1002.834735][ T5840] usb 5-1: Manufacturer: syz [ 1002.947024][ T5840] usb 5-1: SerialNumber: syz [ 1003.005045][ T5840] usb 5-1: config 0 descriptor?? [ 1003.313216][ T5840] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1005.718052][ T5840] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 1005.796698][ T5840] usb 5-1: USB disconnect, device number 13 [ 1006.084866][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 1006.128655][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 1006.168664][T13567] ceph: No mds server is up or the cluster is laggy [ 1007.623451][T13592] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma? [ 1010.732700][ T7997] libceph: connect (1)[c::]:6789 error -101 [ 1010.759315][ T7997] libceph: mon0 (1)[c::]:6789 connect error [ 1010.780329][T13617] ceph: No mds server is up or the cluster is laggy [ 1011.043584][ T5840] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1012.044822][ T5840] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1012.055317][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.078861][ T5840] usb 6-1: Product: syz [ 1012.084246][ T5840] usb 6-1: Manufacturer: syz [ 1012.089332][ T5840] usb 6-1: SerialNumber: syz [ 1012.886578][ T5840] usb 6-1: config 0 descriptor?? [ 1014.330349][T13643] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1015.349133][ T5840] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -110 [ 1015.522000][ T5840] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -110 [ 1015.601204][ T8044] usb 6-1: USB disconnect, device number 10 [ 1015.633196][T13650] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma? [ 1018.367961][T13685] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 1018.376186][T13685] PKCS7: Only support pkcs7_signedData type [ 1024.907303][T13734] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 1024.915066][T13734] PKCS7: Only support pkcs7_signedData type [ 1027.970254][T13751] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 1028.892067][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 1028.936533][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 1028.998263][T13756] ceph: No mds server is up or the cluster is laggy [ 1029.084639][T13744] loop7: detected capacity change from 0 to 32768 [ 1031.235178][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 1032.362429][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1447'. [ 1033.820690][T13805] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1035.021444][T13827] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1456'. [ 1036.855758][T13822] loop6: detected capacity change from 0 to 32768 [ 1037.984951][T13860] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma? [ 1040.566840][T13881] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma? [ 1041.279117][T13883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1466'. [ 1043.277032][T13905] loop4: detected capacity change from 0 to 32768 [ 1043.356013][T13905] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1044.552572][T13905] XFS (loop4): Ending clean mount [ 1044.561766][T13905] XFS (loop4): Quotacheck needed: Please wait. [ 1044.677772][T13905] XFS (loop4): Quotacheck: Done. [ 1044.967490][ T5968] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1046.393542][T13930] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1478'. [ 1047.013651][T13940] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma? [ 1048.698448][T10824] libceph: connect (1)[c::]:6789 error -101 [ 1048.704789][T10824] libceph: mon0 (1)[c::]:6789 connect error [ 1048.723358][T13954] ceph: No mds server is up or the cluster is laggy [ 1049.966066][T13976] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma? [ 1052.070986][T13988] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma? [ 1054.761467][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.768174][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.622443][T14051] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1060.450083][T14053] fuse: Bad value for 'fd' [ 1066.638274][T14115] fuse: Bad value for 'fd' [ 1067.864545][T14109] loop5: detected capacity change from 0 to 32768 [ 1068.009664][T11752] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 1068.270604][T14135] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma? [ 1072.734314][T14161] fuse: Bad value for 'fd' [ 1074.012826][T11752] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 1074.368462][T14182] RDS: rds_bind could not find a transport for ::ffff:172.30.0.8, load rds_tcp or rds_rdma? [ 1080.543396][T14215] fuse: Bad value for 'fd' [ 1080.560912][T11752] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 1081.796685][T14235] RDS: rds_bind could not find a transport for ::ffff:172.30.0.8, load rds_tcp or rds_rdma? [ 1085.187509][T14241] loop4: detected capacity change from 0 to 32768 [ 1087.553789][T14275] Bluetooth: hci4: command 0x0406 tx timeout [ 1087.703018][T14296] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 1089.966136][T14305] fuse: Bad value for 'fd' [ 1091.443360][T14330] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1093.156418][T14342] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1554'. [ 1093.343790][T14347] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma? [ 1097.097187][T14385] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1100.147075][T14403] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1100.157219][T14403] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1100.174570][T14403] loop7: detected capacity change from 0 to 64 [ 1102.913703][T11752] Bluetooth: hci1: command 0x0406 tx timeout [ 1106.081022][T14457] RDS: rds_bind could not find a transport for ::ffff:172.30.0.8, load rds_tcp or rds_rdma? [ 1107.126684][T14467] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1107.145930][T14467] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1107.175383][T14467] loop5: detected capacity change from 0 to 64 [ 1110.202336][T14486] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 1110.209071][T14486] PKCS7: Only support pkcs7_signedData type [ 1116.000637][T14534] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1116.033919][T14534] loop4: detected capacity change from 0 to 64 [ 1117.541326][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.550589][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.365304][T14540] loop4: detected capacity change from 0 to 32768 [ 1120.142880][T14567] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 1120.149553][T14567] PKCS7: Only support pkcs7_signedData type [ 1126.384778][T14610] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 1126.391291][T14610] PKCS7: Only support pkcs7_signedData type [ 1127.736688][T14606] loop7: detected capacity change from 0 to 32768 [ 1131.869450][T14657] loop5: detected capacity change from 0 to 4096 [ 1137.476287][T14692] fuse: Bad value for 'fd' [ 1137.975111][T14701] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 1137.981675][T14701] PKCS7: Only support pkcs7_signedData type [ 1144.314148][T14751] fuse: Bad value for 'fd' [ 1144.433609][T14275] Bluetooth: hci1: command 0x0406 tx timeout [ 1147.310631][T14776] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 1150.924479][T14803] fuse: Bad value for 'fd' [ 1154.241715][T14824] fuse: Bad value for 'fd' [ 1154.636580][T14831] RDS: rds_bind could not find a transport for ::ffff:172.30.0.8, load rds_tcp or rds_rdma? [ 1164.759250][T14893] fuse: Bad value for 'fd' [ 1167.836923][T14942] RDS: rds_bind could not find a transport for ::ffff:172.30.0.8, load rds_tcp or rds_rdma? [ 1171.394416][T14275] Bluetooth: hci1: command 0x0406 tx timeout [ 1177.496651][T14275] Bluetooth: hci1: command 0x0406 tx timeout [ 1177.640022][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.647063][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.192933][T11752] Bluetooth: hci1: command 0x0406 tx timeout [ 1185.414770][T15074] RDS: rds_bind could not find a transport for ::ffff:172.30.0.8, load rds_tcp or rds_rdma? [ 1185.941191][T15082] loop7: detected capacity change from 0 to 512 [ 1191.732724][T15127] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1192.593697][T11752] Bluetooth: hci1: command 0x0406 tx timeout [ 1196.055291][T15168] RDS: rds_bind could not find a transport for ::ffff:172.30.0.8, load rds_tcp or rds_rdma? [ 1199.755225][T14275] Bluetooth: hci1: command 0x0406 tx timeout [ 1207.007505][T15248] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma? [ 1208.763627][T15260] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1713'. [ 1208.888673][T15263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1713'. [ 1210.427194][T15273] syzkaller1: entered promiscuous mode [ 1210.432837][T15273] syzkaller1: entered allmulticast mode [ 1211.909956][T15291] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1214.673368][T14275] Bluetooth: hci1: command 0x0406 tx timeout [ 1219.512094][T15360] loop5: detected capacity change from 0 to 40427 [ 1219.868881][T15360] F2FS-fs (loop5): invalid crc value [ 1219.992730][T15360] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1220.093520][T15360] F2FS-fs (loop5): Start checkpoint disabled! [ 1220.146720][T15360] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1221.391353][ T28] audit: type=1800 audit(1769896927.725:29): pid=15373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1731" name="bus" dev="loop5" ino=10 res=0 errno=0 [ 1221.475823][T15373] syz.5.1731: attempt to access beyond end of device [ 1221.475823][T15373] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1221.497172][T15373] syz.5.1731: attempt to access beyond end of device [ 1221.497172][T15373] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1221.514227][T15373] syz.5.1731: attempt to access beyond end of device [ 1221.514227][T15373] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1221.532704][T15373] syz.5.1731: attempt to access beyond end of device [ 1221.532704][T15373] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1221.550113][T15373] syz.5.1731: attempt to access beyond end of device [ 1221.550113][T15373] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1221.576608][T15373] syz.5.1731: attempt to access beyond end of device [ 1221.576608][T15373] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1221.593708][T15373] syz.5.1731: attempt to access beyond end of device [ 1221.593708][T15373] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1221.609376][T15373] syz.5.1731: attempt to access beyond end of device [ 1221.609376][T15373] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1221.624913][T15373] syz.5.1731: attempt to access beyond end of device [ 1221.624913][T15373] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1221.640552][T15373] syz.5.1731: attempt to access beyond end of device [ 1221.640552][T15373] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1223.379705][T15382] loop4: detected capacity change from 0 to 4096 [ 1223.659186][ T11] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1223.700327][ T11] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1226.988280][T15443] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1228.139788][T15452] fuse: Unknown parameter '0xffffffffffffffff' [ 1230.702033][T15488] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 1232.803793][T15514] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1757'. [ 1233.394137][T11752] Bluetooth: hci1: command 0x0406 tx timeout [ 1233.703722][T15529] fuse: Unknown parameter '0xffffffffffffffff' [ 1238.060790][T15582] fuse: Unknown parameter '0xffffffffffffffff' [ 1239.102763][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.112354][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.187124][T15607] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma? [ 1242.456703][T15646] RDS: rds_bind could not find a transport for ::ffff:172.30.0.8, load rds_tcp or rds_rdma? [ 1246.137457][T15682] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 1250.848319][T15736] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1256.050913][T15781] RDS: rds_bind could not find a transport for ::ffff:172.30.0.8, load rds_tcp or rds_rdma? [ 1257.069419][T15795] fuse: Bad value for 'fd' [ 1263.753968][ T9] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 1263.943358][ T9] usb 5-1: device descriptor read/64, error -71 [ 1264.253449][ T9] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 1264.793465][ T9] usb 5-1: device descriptor read/64, error -71 [ 1265.164530][ T9] usb usb5-port1: attempt power cycle [ 1266.603262][ T9] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1266.673611][ T9] usb 5-1: device descriptor read/8, error -71 [ 1268.863379][T15902] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1273.199980][T15943] overlayfs: failed to clone lowerpath [ 1275.989579][T15975] RDS: rds_bind could not find a transport for ::ffff:172.30.0.8, load rds_tcp or rds_rdma? [ 1280.770773][T16024] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 1286.989325][T16064] RDS: rds_bind could not find a transport for ::ffff:172.30.0.8, load rds_tcp or rds_rdma? [ 1297.788541][T16151] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 1300.539653][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.546165][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1309.527653][T16245] overlayfs: failed to clone lowerpath [ 1324.099714][T16348] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 1330.412210][T16392] RDS: rds_bind could not find a transport for ::ffff:172.30.0.8, load rds_tcp or rds_rdma? [ 1336.310505][T16442] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma? [ 1343.109013][T16501] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1350.523254][T10825] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1350.762218][T10825] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1350.993043][T10825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.025881][T10825] usb 5-1: Product: syz [ 1351.030120][T10825] usb 5-1: Manufacturer: syz [ 1351.035281][T10825] usb 5-1: SerialNumber: syz [ 1351.054014][T10825] usb 5-1: config 0 descriptor?? [ 1351.573508][T10825] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1351.851086][T10825] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 1353.291141][T10825] usb 5-1: USB disconnect, device number 18 [ 1354.806909][T16626] loop4: detected capacity change from 0 to 40427 [ 1354.865320][T16626] F2FS-fs (loop4): invalid crc value [ 1354.891359][T16626] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1354.971610][T16626] F2FS-fs (loop4): Start checkpoint disabled! [ 1355.009923][T16626] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1357.416184][T16647] loop4: detected capacity change from 0 to 32768 [ 1357.507579][T16647] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1357.639134][T16647] XFS (loop4): Ending clean mount [ 1357.661124][T16647] XFS (loop4): Quotacheck needed: Please wait. [ 1357.830925][T16647] XFS (loop4): Quotacheck: Done. [ 1359.702433][ T5968] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1361.983846][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.990240][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.548485][T16720] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1974'. [ 1363.632924][T16722] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1974'. [ 1365.957296][T16748] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma? [ 1366.432494][T16747] loop4: detected capacity change from 0 to 40427 [ 1366.482290][T16747] F2FS-fs (loop4): invalid crc value [ 1366.504026][T16747] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1366.557870][T16747] F2FS-fs (loop4): Start checkpoint disabled! [ 1366.587588][T16747] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1368.137776][T16768] fuse: Bad value for 'fd' [ 1372.297614][T16807] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1375.224335][T16829] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1375.413731][T14275] Bluetooth: hci1: command 0x0406 tx timeout [ 1381.144604][T16906] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1403.748914][T17125] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma? [ 1408.290182][T14275] Bluetooth: hci1: command 0x0406 tx timeout [ 1413.693199][T15848] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1415.045423][T15848] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1415.074391][T15848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.082472][T15848] usb 5-1: Product: syz [ 1415.226784][T14275] Bluetooth: hci1: command 0x0406 tx timeout [ 1416.139087][T15848] usb 5-1: Manufacturer: syz [ 1416.161170][T15848] usb 5-1: SerialNumber: syz [ 1416.191069][T15848] usb 5-1: config 0 descriptor?? [ 1416.539725][T15848] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -71 [ 1416.607779][T15848] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 1416.671159][T17226] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 1417.215394][T15848] usb 5-1: USB disconnect, device number 19 [ 1423.819320][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.825840][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1430.226953][T17317] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1431.767559][T13232] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 1431.984538][T13232] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1432.008301][T13232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.046373][T13232] usb 5-1: Product: syz [ 1432.061061][T13232] usb 5-1: Manufacturer: syz [ 1432.082010][T13232] usb 5-1: SerialNumber: syz [ 1432.128620][T13232] usb 5-1: config 0 descriptor?? [ 1432.347558][T13232] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1432.448616][T17146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1432.471332][T17146] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1432.484520][T17146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1432.504183][T17146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1432.516544][T17146] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1432.524984][T17146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1434.593588][T17146] Bluetooth: hci2: command tx timeout [ 1434.708625][T13232] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 1435.938833][T15848] usb 5-1: USB disconnect, device number 20 [ 1437.295468][T17146] Bluetooth: hci2: command tx timeout [ 1437.960171][T13120] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.137452][T17343] chnl_net:caif_netlink_parms(): no params data found [ 1439.192187][T17343] bridge0: port 1(bridge_slave_0) entered blocking state [ 1439.303506][T17343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1439.310812][T17343] bridge_slave_0: entered allmulticast mode [ 1439.317116][T17146] Bluetooth: hci2: command tx timeout [ 1439.430798][T17343] bridge_slave_0: entered promiscuous mode [ 1440.525807][T13120] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.735167][T17343] bridge0: port 2(bridge_slave_1) entered blocking state [ 1441.393415][T17146] Bluetooth: hci2: command tx timeout [ 1441.403383][T17343] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.410664][T17343] bridge_slave_1: entered allmulticast mode [ 1441.564739][T17343] bridge_slave_1: entered promiscuous mode [ 1441.677524][T17343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1441.731442][T17343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1443.180502][T13120] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.126699][T17343] team0: Port device team_slave_0 added [ 1444.175085][T17343] team0: Port device team_slave_1 added [ 1444.525534][T13120] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.054450][T17343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1445.061422][T17343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1445.143392][T17343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1445.223033][T17343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1445.230441][T17343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1445.477416][T17343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1447.209536][T17343] hsr_slave_0: entered promiscuous mode [ 1447.234176][T17343] hsr_slave_1: entered promiscuous mode [ 1447.253191][T17343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1447.279248][T17343] Cannot create hsr debugfs directory [ 1453.383693][T16868] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 1453.666599][T16868] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1453.727631][T16868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.844621][T16868] usb 5-1: Product: syz [ 1453.849404][T16868] usb 5-1: Manufacturer: syz [ 1453.856469][T16868] usb 5-1: SerialNumber: syz [ 1453.870080][T16868] usb 5-1: config 0 descriptor?? [ 1454.093288][T16868] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1455.746254][T16868] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 1456.808580][T13232] usb 5-1: USB disconnect, device number 21 [ 1457.493385][T17343] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1457.564067][T17343] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1457.602039][T17343] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1457.671779][T17343] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1458.053459][T13120] hsr_slave_0: left promiscuous mode [ 1458.122193][T13120] hsr_slave_1: left promiscuous mode [ 1458.338564][T13120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1458.348989][T13120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1458.404299][T13120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1458.413656][T13120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1459.398273][T17503] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1459.411152][T13120] bridge_slave_1: left allmulticast mode [ 1459.474369][T13120] bridge_slave_1: left promiscuous mode [ 1459.480313][T13120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1459.583582][T13120] bridge_slave_0: left allmulticast mode [ 1459.589309][T13120] bridge_slave_0: left promiscuous mode [ 1459.631704][T13120] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.706521][T13120] veth1_macvtap: left promiscuous mode [ 1460.712767][T13120] veth0_macvtap: left promiscuous mode [ 1460.733456][T13120] veth1_vlan: left promiscuous mode [ 1460.758424][T13120] veth0_vlan: left promiscuous mode [ 1461.050280][T17513] RDS: rds_bind could not find a transport for ::ffff:172.30.0.8, load rds_tcp or rds_rdma? [ 1464.277252][T13120] team0 (unregistering): Port device team_slave_1 removed [ 1464.539083][T13120] team0 (unregistering): Port device team_slave_0 removed [ 1465.191487][T13120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1465.462004][T13120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1465.733382][ T5870] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 1466.144128][ T5870] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1466.171075][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.181346][ T5870] usb 5-1: Product: syz [ 1466.200567][ T5870] usb 5-1: Manufacturer: syz [ 1466.206331][ T5870] usb 5-1: SerialNumber: syz [ 1466.233542][ T5870] usb 5-1: config 0 descriptor?? [ 1466.246078][T17546] RDS: rds_bind could not find a transport for ::ffff:172.30.0.8, load rds_tcp or rds_rdma? [ 1466.452644][ T5870] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1467.249749][T13120] bond0 (unregistering): Released all slaves [ 1467.789462][T17343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1467.857986][T17343] 8021q: adding VLAN 0 to HW filter on device team0 [ 1467.911343][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.918629][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1467.976485][ T5870] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 1468.024194][ T6476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1468.031445][ T6476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1468.512753][T17343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1469.472426][ T5870] usb 5-1: USB disconnect, device number 22 [ 1470.402303][T17585] RDS: rds_bind could not find a transport for ::ffff:172.30.0.8, load rds_tcp or rds_rdma? [ 1471.191774][T17343] veth0_vlan: entered promiscuous mode [ 1471.260314][T17343] veth1_vlan: entered promiscuous mode [ 1471.402424][T17343] veth0_macvtap: entered promiscuous mode [ 1471.438325][T17343] veth1_macvtap: entered promiscuous mode [ 1471.524593][T17343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1471.567930][T17343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.605689][T17343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1471.649462][T17343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.683632][T17343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1471.725957][T17343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.762806][T17343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1471.807652][T17343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1471.849854][T17343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.869351][T17343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1471.904445][T17343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.927758][T17343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1471.951913][T17343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.984664][T17343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1472.028994][T17343] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.063211][T17343] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.071994][T17343] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.123351][T17343] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.346778][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.380814][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1472.477678][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.496069][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1474.254227][T17630] RDS: rds_bind could not find a transport for ::ffff:172.30.0.8, load rds_tcp or rds_rdma? [ 1477.513232][T17668] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2157'. [ 1477.626671][T17672] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2157'. [ 1480.572703][T17693] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 1483.541631][T17722] RDS: rds_bind could not find a transport for ::ffff:172.30.0.9, load rds_tcp or rds_rdma? [ 1484.934170][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.940677][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.412902][T17740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2172'. [ 1485.661727][T17747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2172'. [ 1487.377557][T17756] fuse: Bad value for 'fd' [ 1491.234693][T17796] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1495.638548][T17831] RDS: rds_bind could not find a transport for ::ffff:172.30.0.8, load rds_tcp or rds_rdma? [ 1501.807735][T17884] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1503.053680][T17895] loop8: detected capacity change from 0 to 40427 [ 1503.133257][T17895] F2FS-fs (loop8): invalid crc value [ 1503.285883][T17895] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1503.338367][T17895] F2FS-fs (loop8): Start checkpoint disabled! [ 1503.363636][T17895] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 1503.511943][ T28] audit: type=1800 audit(1769897209.875:30): pid=17906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2200" name="bus" dev="loop8" ino=10 res=0 errno=0 [ 1503.565333][T17906] bio_check_eod: 182 callbacks suppressed [ 1503.565387][T17906] syz.8.2200: attempt to access beyond end of device [ 1503.565387][T17906] loop8: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1503.588877][T17906] syz.8.2200: attempt to access beyond end of device [ 1503.588877][T17906] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1503.609169][T17906] syz.8.2200: attempt to access beyond end of device [ 1503.609169][T17906] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1503.624980][T17906] syz.8.2200: attempt to access beyond end of device [ 1503.624980][T17906] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1503.640731][T17906] syz.8.2200: attempt to access beyond end of device [ 1503.640731][T17906] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1503.657138][T17906] syz.8.2200: attempt to access beyond end of device [ 1503.657138][T17906] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1503.671441][T17906] syz.8.2200: attempt to access beyond end of device [ 1503.671441][T17906] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1503.688258][T17906] syz.8.2200: attempt to access beyond end of device [ 1503.688258][T17906] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1503.703712][T17906] syz.8.2200: attempt to access beyond end of device [ 1503.703712][T17906] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1504.627514][ T6474] kworker/u4:10: attempt to access beyond end of device [ 1504.627514][ T6474] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1504.641846][ T6474] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1504.669743][ T6474] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1504.702239][T17917] RDS: rds_bind could not find a transport for ::ffff:172.30.0.8, load rds_tcp or rds_rdma? [ 1511.238011][T17974] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 1511.295941][T17967] loop8: detected capacity change from 0 to 32768 [ 1511.349686][T17967] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1511.560545][T17967] XFS (loop8): Ending clean mount [ 1511.573122][T17967] XFS (loop8): Quotacheck needed: Please wait. [ 1511.676945][T17967] XFS (loop8): Quotacheck: Done. [ 1512.576582][T17343] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1515.577326][T18020] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 1516.115712][T18023] loop8: detected capacity change from 0 to 40427 [ 1516.145607][T18023] F2FS-fs (loop8): invalid crc value [ 1516.177306][T18023] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1516.258222][T18023] F2FS-fs (loop8): Start checkpoint disabled! [ 1516.313560][T18023] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 1516.514086][ T28] audit: type=1800 audit(1769897222.885:31): pid=18036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2217" name="bus" dev="loop8" ino=10 res=0 errno=0 [ 1516.633142][T18036] syz.8.2217: attempt to access beyond end of device [ 1516.633142][T18036] loop8: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1516.649007][T18036] syz.8.2217: attempt to access beyond end of device [ 1516.649007][T18036] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1516.665827][T18036] syz.8.2217: attempt to access beyond end of device [ 1516.665827][T18036] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1516.682550][T18036] syz.8.2217: attempt to access beyond end of device [ 1516.682550][T18036] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1516.699849][T18036] syz.8.2217: attempt to access beyond end of device [ 1516.699849][T18036] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1520.795633][ T6474] kworker/u4:10: attempt to access beyond end of device [ 1520.795633][ T6474] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1520.871371][ T6474] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1520.935382][ T6474] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1521.009885][T18062] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 1524.789169][T18090] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 1535.228366][T18181] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 1535.435894][T14275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1535.448372][T14275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1535.459448][T14275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1535.469703][T14275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1535.479792][T14275] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1535.504613][T14275] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1535.650089][ T6474] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.487783][ T6474] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.086752][ T6474] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.211085][T18203] overlayfs: failed to clone lowerpath [ 1537.551580][T18197] fuse: Unknown parameter 'f-' [ 1537.561942][T14275] Bluetooth: hci1: command tx timeout [ 1537.811421][ T6474] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.310628][T18183] chnl_net:caif_netlink_parms(): no params data found [ 1540.227993][ T6474] tipc: Disabling bearer [ 1540.233522][ T6474] tipc: Left network mode [ 1540.240431][T14275] Bluetooth: hci1: command tx timeout [ 1542.273760][T14275] Bluetooth: hci1: command tx timeout [ 1542.778242][T18183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.824412][T18183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.831908][T18183] bridge_slave_0: entered allmulticast mode [ 1542.914233][T18183] bridge_slave_0: entered promiscuous mode [ 1544.123842][T18183] bridge0: port 2(bridge_slave_1) entered blocking state [ 1544.131680][T18183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1544.203358][T18183] bridge_slave_1: entered allmulticast mode [ 1544.222560][T18183] bridge_slave_1: entered promiscuous mode [ 1544.989012][T14275] Bluetooth: hci1: command tx timeout [ 1545.450786][T18183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1545.504393][T18183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1547.009832][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1547.016368][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.112142][T18183] team0: Port device team_slave_0 added [ 1547.172486][T18183] team0: Port device team_slave_1 added [ 1549.163435][T18183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1549.170455][T18183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1549.319493][T18183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1549.356126][T18183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1549.378115][T18183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1549.466432][T18183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1550.784621][T18183] hsr_slave_0: entered promiscuous mode [ 1550.815931][T18183] hsr_slave_1: entered promiscuous mode [ 1550.828683][T18183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1550.843109][T18183] Cannot create hsr debugfs directory [ 1554.039449][ T6474] hsr_slave_0: left promiscuous mode [ 1555.307910][ T6474] hsr_slave_1: left promiscuous mode [ 1555.334063][ T6474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1555.358751][ T6474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1555.385356][ T6474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1555.402020][ T6474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1555.509912][ T6474] bridge_slave_1: left allmulticast mode [ 1555.523099][ T6474] bridge_slave_1: left promiscuous mode [ 1555.528977][ T6474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.154121][ T6474] bridge_slave_0: left allmulticast mode [ 1557.159849][ T6474] bridge_slave_0: left promiscuous mode [ 1557.213465][ T6474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1557.313786][ T6474] veth1_macvtap: left promiscuous mode [ 1557.319403][ T6474] veth0_macvtap: left promiscuous mode [ 1557.338311][ T6474] veth1_vlan: left promiscuous mode [ 1557.473306][ T6474] veth0_vlan: left promiscuous mode [ 1571.752960][T18414] fuse: Bad value for 'fd' [ 1571.956976][ T6474] team0 (unregistering): Port device team_slave_1 removed [ 1572.890554][ T6474] team0 (unregistering): Port device team_slave_0 removed [ 1573.420692][ T6474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1573.830482][ T6474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1579.581293][T17146] Bluetooth: hci2: command 0x0406 tx timeout [ 1580.485011][ T6474] bond0 (unregistering): Released all slaves [ 1582.490453][T18454] loop8: detected capacity change from 0 to 32768 [ 1582.797800][T18454] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by syz.8.2295 (18454) [ 1582.917173][ T6474] IPVS: stop unused estimator thread 0... [ 1583.278997][T18454] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1583.314288][T18454] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 1583.343201][T18454] BTRFS info (device loop8): using free space tree [ 1583.523377][T18454] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1583.543783][T18454] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1583.596998][T18454] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1583.669894][T18454] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1583.730070][T18454] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1583.805550][T18454] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1583.874628][T18454] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1583.910118][T18454] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1583.926634][T18183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1584.005418][T18454] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1584.022560][T18454] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1584.049362][T18183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1584.071650][T18183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1584.103594][T18183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1584.111114][T18454] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1584.184406][ T5870] IPVS: starting estimator thread 0... [ 1584.244241][T18454] BTRFS error (device loop8): open_ctree failed: -12 [ 1584.353227][T18498] IPVS: using max 16 ests per chain, 38400 per kthread [ 1584.734573][T18451] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by udevd (18451) [ 1588.470817][T18183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1588.631552][T18183] 8021q: adding VLAN 0 to HW filter on device team0 [ 1588.729899][ T6474] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.737188][ T6474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1588.800129][ T6474] bridge0: port 2(bridge_slave_1) entered blocking state [ 1588.807381][ T6474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1589.500145][T18183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1590.447827][T18546] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 1591.369941][T18183] veth0_vlan: entered promiscuous mode [ 1591.464552][T18183] veth1_vlan: entered promiscuous mode [ 1592.288971][T18183] veth0_macvtap: entered promiscuous mode [ 1592.524857][T18183] veth1_macvtap: entered promiscuous mode [ 1592.621596][T18560] loop8: detected capacity change from 0 to 32768 [ 1592.729839][T18560] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 scanned by syz.8.2308 (18560) [ 1592.804034][T18560] BTRFS info (device loop8): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1592.814336][T18560] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 1592.823242][T18560] BTRFS info (device loop8): enabling disk space caching [ 1592.830308][T18560] BTRFS info (device loop8): force clearing of disk cache [ 1592.837775][T18560] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1592.847253][T18560] BTRFS info (device loop8): use zstd compression, level 3 [ 1592.854737][T18560] BTRFS info (device loop8): disk space caching is enabled [ 1593.081193][T18183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1593.143996][T18183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.211962][T18183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1593.225071][T18560] BTRFS info (device loop8): enabling ssd optimizations [ 1593.232063][T18560] BTRFS info (device loop8): auto enabling async discard [ 1593.451787][T18560] BTRFS info (device loop8): rebuilding free space tree [ 1593.531792][T18560] BTRFS info (device loop8): disabling free space tree [ 1593.539682][T18560] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1593.549455][T18560] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1593.625200][T18183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.810933][T18183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1594.063456][T18183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.142959][T18183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1594.214710][T18183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1594.292032][T18183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.344310][T18183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1594.420268][T18183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.475076][T18183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1594.486443][T18183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.498064][T18183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1594.988150][ T5772] IPVS: starting estimator thread 0... [ 1595.039409][T17343] BTRFS info (device loop8): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1595.174533][T18599] IPVS: using max 20 ests per chain, 48000 per kthread [ 1598.097779][T17146] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1598.118205][T17146] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1598.131350][T17146] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1598.152797][T17146] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1598.165769][T17146] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1598.177960][T17146] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1599.711834][T18612] chnl_net:caif_netlink_parms(): no params data found [ 1599.730696][T18638] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 1600.365396][T17146] Bluetooth: hci3: command tx timeout [ 1600.484235][T18612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1600.491615][T18612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1600.499414][T18612] bridge_slave_0: entered allmulticast mode [ 1600.515158][T18612] bridge_slave_0: entered promiscuous mode [ 1600.693411][T18612] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.757061][T18612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1600.813513][T18612] bridge_slave_1: entered allmulticast mode [ 1600.876788][T18612] bridge_slave_1: entered promiscuous mode [ 1601.584034][T18612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1601.668047][T18612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1601.795519][T18612] team0: Port device team_slave_0 added [ 1601.826239][T18612] team0: Port device team_slave_1 added [ 1601.996966][T18674] loop8: detected capacity change from 0 to 32768 [ 1602.818230][T17146] Bluetooth: hci3: command tx timeout [ 1602.853885][T18674] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1602.940293][ T7997] IPVS: starting estimator thread 0... [ 1602.949477][T18674] XFS (loop8): Ending clean mount [ 1602.970467][T18674] XFS (loop8): Quotacheck needed: Please wait. [ 1603.073274][T18690] IPVS: using max 19 ests per chain, 45600 per kthread [ 1603.155098][T18674] XFS (loop8): Quotacheck: Done. [ 1603.428666][T18612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1603.435808][T18612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1603.533372][T18698] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1603.542524][T18698] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1603.772300][T18612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1603.797898][T18612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1603.811084][T18612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1603.847115][T18612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1605.093145][T17146] Bluetooth: hci3: command tx timeout [ 1605.283422][T17343] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1606.347642][T18612] hsr_slave_0: entered promiscuous mode [ 1606.416250][T18612] hsr_slave_1: entered promiscuous mode [ 1606.473371][T18612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1606.481016][T18612] Cannot create hsr debugfs directory [ 1607.533174][T14275] Bluetooth: hci3: command tx timeout [ 1607.723531][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.729915][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1610.837635][ T6474] hsr_slave_0: left promiscuous mode [ 1611.003130][ T6474] hsr_slave_1: left promiscuous mode [ 1611.063923][ T6474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1611.104623][ T6474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1611.143992][ T6474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1611.151472][ T6474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1611.194366][ T6474] bridge_slave_1: left allmulticast mode [ 1611.242039][ T6474] bridge_slave_1: left promiscuous mode [ 1611.251262][ T6474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.285913][ T6474] bridge_slave_0: left allmulticast mode [ 1611.291618][ T6474] bridge_slave_0: left promiscuous mode [ 1611.304636][ T6474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.370989][ T6474] veth1_macvtap: left promiscuous mode [ 1611.379778][ T6474] veth0_macvtap: left promiscuous mode [ 1611.393349][ T6474] veth1_vlan: left promiscuous mode [ 1611.398803][ T6474] veth0_vlan: left promiscuous mode [ 1611.850430][T18762] overlayfs: failed to clone lowerpath [ 1617.068120][T18806] binder_alloc: 18805: binder_alloc_buf, no vma [ 1618.009874][ T6474] team0 (unregistering): Port device team_slave_1 removed [ 1618.219840][ T6474] team0 (unregistering): Port device team_slave_0 removed [ 1619.614987][ T6474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1620.140063][T18828] overlayfs: failed to clone lowerpath [ 1620.251202][ T6474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1622.336140][ T6474] bond0 (unregistering): Released all slaves [ 1624.507584][T18612] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1624.635429][T18612] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1624.703894][T18612] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1624.781305][T18612] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1625.717395][T18612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1625.795568][T18612] 8021q: adding VLAN 0 to HW filter on device team0 [ 1625.823052][T18668] bridge0: port 1(bridge_slave_0) entered blocking state [ 1625.830303][T18668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1625.840052][T18874] binder_alloc: 18873: binder_alloc_buf, no vma [ 1625.898704][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1625.905982][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1626.065094][T18612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1628.064092][T18904] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 1628.149702][T18612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1629.878343][T18612] veth0_vlan: entered promiscuous mode [ 1629.926363][T18612] veth1_vlan: entered promiscuous mode [ 1630.011718][T18612] veth0_macvtap: entered promiscuous mode [ 1630.060679][T18612] veth1_macvtap: entered promiscuous mode [ 1630.164532][T18612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1630.222848][T18612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.263377][T18612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1630.324303][T18612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.343105][T18612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1630.375356][T18612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.414816][T18612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1630.441592][T18612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1630.488258][T18612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.511191][T18612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1630.544976][T18612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.578293][T18612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1630.611519][T18612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.650033][T18612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1630.699882][T18612] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.733303][T18612] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.742119][T18612] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.801260][T18612] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1631.226953][ T6474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1631.282273][ T6474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1631.396014][T18957] overlayfs: failed to clone lowerpath [ 1631.923197][T18668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1631.931154][T18668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1632.788807][T18969] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 1637.129233][T19024] RDS: rds_bind could not find a transport for ::ffff:172.30.0.9, load rds_tcp or rds_rdma? [ 1638.800673][T19056] loop8: detected capacity change from 0 to 40427 [ 1638.826673][T19056] F2FS-fs (loop8): invalid crc value [ 1638.855615][T19056] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1638.915991][T19056] F2FS-fs (loop8): Start checkpoint disabled! [ 1639.063263][T19056] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 1639.126372][ T28] audit: type=1800 audit(1769897345.495:32): pid=19056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2401" name="bus" dev="loop8" ino=10 res=0 errno=0 [ 1639.163690][T19056] syz.8.2401: attempt to access beyond end of device [ 1639.163690][T19056] loop8: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1639.177835][T19056] syz.8.2401: attempt to access beyond end of device [ 1639.177835][T19056] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1639.191918][T19056] syz.8.2401: attempt to access beyond end of device [ 1639.191918][T19056] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1639.206019][T19056] syz.8.2401: attempt to access beyond end of device [ 1639.206019][T19056] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1639.220267][T19056] syz.8.2401: attempt to access beyond end of device [ 1639.220267][T19056] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1639.234564][T19056] syz.8.2401: attempt to access beyond end of device [ 1639.234564][T19056] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1639.248454][T19056] syz.8.2401: attempt to access beyond end of device [ 1639.248454][T19056] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1639.263384][T19056] syz.8.2401: attempt to access beyond end of device [ 1639.263384][T19056] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1639.277566][T19056] syz.8.2401: attempt to access beyond end of device [ 1639.277566][T19056] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1639.291782][T19056] syz.8.2401: attempt to access beyond end of device [ 1639.291782][T19056] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1639.636772][T19064] overlayfs: failed to clone lowerpath [ 1640.763917][ T1108] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1640.770885][ T1108] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1640.807833][T19072] RDS: rds_bind could not find a transport for ::ffff:172.30.0.8, load rds_tcp or rds_rdma? [ 1643.123381][T19092] loop8: detected capacity change from 0 to 32768 [ 1643.216452][T19092] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 scanned by syz.8.2411 (19092) [ 1643.618840][T19092] BTRFS info (device loop8): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1643.634806][T19092] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 1643.643638][T19092] BTRFS info (device loop8): enabling disk space caching [ 1643.650723][T19092] BTRFS info (device loop8): force clearing of disk cache [ 1643.657988][T19092] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1643.668423][T19092] BTRFS info (device loop8): use zstd compression, level 3 [ 1643.675867][T19092] BTRFS info (device loop8): disk space caching is enabled [ 1643.833392][T19092] BTRFS info (device loop8): enabling ssd optimizations [ 1643.840557][T19092] BTRFS info (device loop8): auto enabling async discard [ 1643.872477][T19092] BTRFS info (device loop8): rebuilding free space tree [ 1643.904776][T19092] BTRFS info (device loop8): disabling free space tree [ 1643.911813][T19092] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1643.922835][T19092] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1645.281268][T17343] BTRFS info (device loop8): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1645.589963][T19127] overlayfs: failed to clone lowerpath [ 1645.863422][T19132] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1647.743322][T19153] loop8: detected capacity change from 0 to 40427 [ 1648.093091][T19153] F2FS-fs (loop8): invalid crc value [ 1648.114990][T19153] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1648.150595][T19153] F2FS-fs (loop8): Start checkpoint disabled! [ 1648.165803][T19153] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 1648.317171][ T28] audit: type=1800 audit(1769897354.665:33): pid=19161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2421" name="bus" dev="loop8" ino=10 res=0 errno=0 [ 1648.388444][T19161] bio_check_eod: 69 callbacks suppressed [ 1648.388493][T19161] syz.8.2421: attempt to access beyond end of device [ 1648.388493][T19161] loop8: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1648.409802][T19161] syz.8.2421: attempt to access beyond end of device [ 1648.409802][T19161] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1648.426081][T19161] syz.8.2421: attempt to access beyond end of device [ 1648.426081][T19161] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1648.441926][T19161] syz.8.2421: attempt to access beyond end of device [ 1648.441926][T19161] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1648.463881][T19161] syz.8.2421: attempt to access beyond end of device [ 1648.463881][T19161] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1650.017369][T19177] RDS: rds_bind could not find a transport for ::ffff:172.30.0.8, load rds_tcp or rds_rdma? [ 1650.318423][ T1108] kworker/u4:7: attempt to access beyond end of device [ 1650.318423][ T1108] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1650.386790][ T1108] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1650.484362][ T1108] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1654.228544][T19220] loop8: detected capacity change from 0 to 32768 [ 1654.237972][T19226] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1654.299638][T19220] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 scanned by syz.8.2434 (19220) [ 1655.359924][T19220] BTRFS info (device loop8): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1655.396072][T19220] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 1655.404938][T19220] BTRFS info (device loop8): enabling disk space caching [ 1655.412026][T19220] BTRFS info (device loop8): force clearing of disk cache [ 1655.419303][T19220] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1655.428768][T19220] BTRFS info (device loop8): use zstd compression, level 3 [ 1655.436080][T19220] BTRFS info (device loop8): disk space caching is enabled [ 1655.917476][T19220] BTRFS info (device loop8): enabling ssd optimizations [ 1655.924530][T19220] BTRFS info (device loop8): auto enabling async discard [ 1655.937356][T19220] BTRFS info (device loop8): rebuilding free space tree [ 1656.010940][T19220] BTRFS info (device loop8): disabling free space tree [ 1656.018125][T19220] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1656.028016][T19220] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1657.104031][T17343] BTRFS info (device loop8): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1658.974946][T19286] overlayfs: failed to clone lowerpath [ 1664.640526][T19339] overlayfs: failed to clone lowerpath [ 1664.757525][T19338] loop4: detected capacity change from 0 to 40427 [ 1664.876430][T19338] F2FS-fs (loop4): invalid crc value [ 1664.887010][T19338] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1664.939144][T19338] F2FS-fs (loop4): Start checkpoint disabled! [ 1664.953266][T19338] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1665.092520][ T28] audit: type=1800 audit(1769897371.435:34): pid=19345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2454" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 1665.142009][T19345] syz.4.2454: attempt to access beyond end of device [ 1665.142009][T19345] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1665.158114][T19345] syz.4.2454: attempt to access beyond end of device [ 1665.158114][T19345] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1665.175143][T19345] syz.4.2454: attempt to access beyond end of device [ 1665.175143][T19345] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1665.192293][T19345] syz.4.2454: attempt to access beyond end of device [ 1665.192293][T19345] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1665.208171][T19345] syz.4.2454: attempt to access beyond end of device [ 1665.208171][T19345] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1665.224453][T19345] syz.4.2454: attempt to access beyond end of device [ 1665.224453][T19345] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1665.239977][T19345] syz.4.2454: attempt to access beyond end of device [ 1665.239977][T19345] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1665.256098][T19345] syz.4.2454: attempt to access beyond end of device [ 1665.256098][T19345] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1665.274570][T19345] syz.4.2454: attempt to access beyond end of device [ 1665.274570][T19345] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1665.290156][T19345] syz.4.2454: attempt to access beyond end of device [ 1665.290156][T19345] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1665.781897][ T11] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1665.789174][ T11] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1667.467779][T19362] binder: BINDER_SET_CONTEXT_MGR already set [ 1667.474695][T19362] binder: 19361:19362 ioctl 4018620d 200000000040 returned -16 [ 1668.579399][T14275] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1668.579889][T14275] CPU: 1 PID: 14275 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1668.579914][T14275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1668.579929][T14275] Workqueue: hci2 hci_rx_work [ 1668.579966][T14275] Call Trace: [ 1668.579976][T14275] [ 1668.579985][T14275] dump_stack_lvl+0x18c/0x250 [ 1668.580022][T14275] ? show_regs_print_info+0x20/0x20 [ 1668.580070][T14275] ? load_image+0x400/0x400 [ 1668.580112][T14275] sysfs_create_dir_ns+0x26e/0x2a0 [ 1668.580140][T14275] ? sysfs_warn_dup+0xa0/0xa0 [ 1668.580163][T14275] ? do_raw_spin_unlock+0x121/0x230 [ 1668.580200][T14275] kobject_add_internal+0x61c/0xcc0 [ 1668.580245][T14275] kobject_add+0x164/0x240 [ 1668.580269][T14275] ? __rwlock_init+0x150/0x150 [ 1668.580300][T14275] ? kobject_init+0x1e0/0x1e0 [ 1668.580325][T14275] ? _raw_spin_unlock+0x28/0x40 [ 1668.580351][T14275] ? get_device_parent+0x366/0x390 [ 1668.580383][T14275] device_add+0x408/0xc20 [ 1668.580415][T14275] hci_conn_add_sysfs+0xd5/0x1e0 [ 1668.580460][T14275] le_conn_complete_evt+0xf5d/0x1540 [ 1668.580494][T14275] ? hci_event_packet+0x4cb/0x1270 [ 1668.580530][T14275] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1668.580578][T14275] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1668.580615][T14275] ? skb_pull_data+0xfb/0x200 [ 1668.580645][T14275] hci_le_conn_complete_evt+0x187/0x440 [ 1668.580684][T14275] ? hci_remote_host_features_evt+0x150/0x150 [ 1668.580711][T14275] hci_event_packet+0x7ba/0x1270 [ 1668.580746][T14275] ? bis_list+0x290/0x290 [ 1668.580774][T14275] ? lockdep_hardirqs_on+0x98/0x150 [ 1668.580801][T14275] ? hci_send_to_monitor+0xd7/0x4f0 [ 1668.580843][T14275] hci_rx_work+0x43a/0xd60 [ 1668.580887][T14275] ? process_scheduled_works+0x96f/0x15d0 [ 1668.580916][T14275] process_scheduled_works+0xa5d/0x15d0 [ 1668.580977][T14275] ? assign_work+0x430/0x430 [ 1668.581011][T14275] ? assign_work+0x3d0/0x430 [ 1668.581046][T14275] worker_thread+0xa55/0xfc0 [ 1668.581075][T14275] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1668.581100][T14275] ? _raw_spin_unlock+0x40/0x40 [ 1668.581120][T14275] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1668.581168][T14275] kthread+0x2fa/0x390 [ 1668.581188][T14275] ? pr_cont_work+0x560/0x560 [ 1668.581216][T14275] ? kthread_blkcg+0xd0/0xd0 [ 1668.581239][T14275] ret_from_fork+0x48/0x80 [ 1668.581265][T14275] ? kthread_blkcg+0xd0/0xd0 [ 1668.581288][T14275] ret_from_fork_asm+0x11/0x20 [ 1668.581335][T14275] [ 1668.581445][T14275] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1668.581485][T14275] Bluetooth: hci2: failed to register connection device [ 1669.018645][T19375] loop4: detected capacity change from 0 to 40427 [ 1669.044105][T19375] F2FS-fs (loop4): invalid crc value [ 1669.159684][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.159747][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.193729][T19375] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1669.248669][T19375] F2FS-fs (loop4): Start checkpoint disabled! [ 1669.268938][T19375] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1669.491843][T19384] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 1669.612646][ T28] audit: type=1800 audit(1769897375.935:35): pid=19391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2458" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 1670.484446][ T984] bio_check_eod: 102 callbacks suppressed [ 1670.484464][ T984] kworker/u4:6: attempt to access beyond end of device [ 1670.484464][ T984] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1670.484573][ T984] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1670.484606][ T984] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1671.815330][T19412] binder: BINDER_SET_CONTEXT_MGR already set [ 1671.822363][T19412] binder: 19411:19412 ioctl 4018620d 200000000040 returned -16 [ 1675.835847][T19458] binder: BINDER_SET_CONTEXT_MGR already set [ 1675.841942][T19458] binder: 19457:19458 ioctl 4018620d 200000000040 returned -16 [ 1679.974873][T19508] overlayfs: failed to clone lowerpath [ 1682.291024][T19530] loop8: detected capacity change from 0 to 40427 [ 1682.339624][T19530] F2FS-fs (loop8): invalid crc value [ 1682.355743][T19530] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1682.432143][T19530] F2FS-fs (loop8): Start checkpoint disabled! [ 1682.459820][T19530] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 1682.695140][ T28] audit: type=1800 audit(1769897389.065:36): pid=19530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2497" name="bus" dev="loop8" ino=10 res=0 errno=0 [ 1682.721131][T19530] syz.8.2497: attempt to access beyond end of device [ 1682.721131][T19530] loop8: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1682.735514][T19530] syz.8.2497: attempt to access beyond end of device [ 1682.735514][T19530] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1682.749851][T19530] syz.8.2497: attempt to access beyond end of device [ 1682.749851][T19530] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1682.764770][T19530] syz.8.2497: attempt to access beyond end of device [ 1682.764770][T19530] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1682.779793][T19530] syz.8.2497: attempt to access beyond end of device [ 1682.779793][T19530] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1682.794352][T19530] syz.8.2497: attempt to access beyond end of device [ 1682.794352][T19530] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1682.808221][T19530] syz.8.2497: attempt to access beyond end of device [ 1682.808221][T19530] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1682.822367][T19530] syz.8.2497: attempt to access beyond end of device [ 1682.822367][T19530] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1682.836519][T19530] syz.8.2497: attempt to access beyond end of device [ 1682.836519][T19530] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1682.850677][T19530] syz.8.2497: attempt to access beyond end of device [ 1682.850677][T19530] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1683.186648][ T6476] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1683.206060][ T6476] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1684.099066][T19556] loop8: detected capacity change from 0 to 4096 [ 1684.175222][T19557] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1687.402598][T19589] loop4: detected capacity change from 0 to 40427 [ 1687.426345][T19589] F2FS-fs (loop4): invalid crc value [ 1687.442073][T19589] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1687.490389][T19589] F2FS-fs (loop4): Start checkpoint disabled! [ 1687.498840][T19589] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1687.527225][ T28] audit: type=1800 audit(1769897393.895:37): pid=19589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2510" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 1688.034300][ T1108] bio_check_eod: 344 callbacks suppressed [ 1688.034320][ T1108] kworker/u4:7: attempt to access beyond end of device [ 1688.034320][ T1108] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1688.265684][ T1108] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1688.301843][ T1108] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1689.188041][T19610] overlayfs: failed to clone lowerpath [ 1698.386472][T19675] loop4: detected capacity change from 0 to 32768 [ 1698.475623][T19675] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.2526 (19675) [ 1698.628945][T19675] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1698.639433][T19675] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1698.648328][T19675] BTRFS info (device loop4): enabling disk space caching [ 1698.656311][T19675] BTRFS info (device loop4): force clearing of disk cache [ 1698.663511][T19675] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1698.672926][T19675] BTRFS info (device loop4): use zstd compression, level 3 [ 1698.680237][T19675] BTRFS info (device loop4): disk space caching is enabled [ 1698.877926][T19675] BTRFS info (device loop4): enabling ssd optimizations [ 1698.885094][T19675] BTRFS info (device loop4): auto enabling async discard [ 1698.902442][T19675] BTRFS info (device loop4): rebuilding free space tree [ 1698.939660][T19675] BTRFS info (device loop4): disabling free space tree [ 1698.946916][T19675] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1698.957694][T19675] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1699.380213][ T5840] IPVS: starting estimator thread 0... [ 1699.805285][T18612] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1699.873823][T19704] IPVS: using max 17 ests per chain, 40800 per kthread [ 1703.267643][T19730] overlayfs: failed to clone lowerpath [ 1710.474872][T19794] loop4: detected capacity change from 0 to 32768 [ 1710.483331][T19794] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.2537 (19794) [ 1710.524468][T19794] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1710.535695][T19794] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1710.544979][T19794] BTRFS info (device loop4): enabling disk space caching [ 1710.552061][T19794] BTRFS info (device loop4): force clearing of disk cache [ 1710.559897][T19794] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1710.571432][T19794] BTRFS info (device loop4): use zstd compression, level 3 [ 1710.578864][T19794] BTRFS info (device loop4): disk space caching is enabled [ 1710.848583][T19804] overlayfs: failed to clone lowerpath [ 1712.025445][T19794] BTRFS info (device loop4): enabling ssd optimizations [ 1712.032563][T19794] BTRFS info (device loop4): auto enabling async discard [ 1712.048219][T19794] BTRFS info (device loop4): rebuilding free space tree [ 1712.206572][T19794] BTRFS info (device loop4): disabling free space tree [ 1712.213614][T19794] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1712.223374][T19794] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1712.991647][T18612] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1719.685340][T19908] loop4: detected capacity change from 0 to 32768 [ 1719.747195][T19908] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.2557 (19908) [ 1719.771836][T19908] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1719.782166][T19908] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1719.790972][T19908] BTRFS info (device loop4): enabling disk space caching [ 1719.798142][T19908] BTRFS info (device loop4): force clearing of disk cache [ 1719.805343][T19908] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1719.814969][T19908] BTRFS info (device loop4): use zstd compression, level 3 [ 1719.822219][T19908] BTRFS info (device loop4): disk space caching is enabled [ 1719.879679][T19908] BTRFS info (device loop4): enabling ssd optimizations [ 1719.886913][T19908] BTRFS info (device loop4): auto enabling async discard [ 1719.896581][T19908] BTRFS info (device loop4): rebuilding free space tree [ 1719.919280][T19908] BTRFS info (device loop4): disabling free space tree [ 1719.926494][T19908] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1719.936802][T19908] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1720.573532][T18612] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1722.637596][T19958] overlayfs: failed to clone lowerpath [ 1722.643852][T19937] Bluetooth: hci3: command 0x0406 tx timeout [ 1722.650182][ T28] audit: type=1800 audit(1769897428.985:38): pid=19956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2558" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1727.436223][T20009] overlayfs: failed to clone lowerpath [ 1730.610313][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.616774][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.326089][T20084] overlayfs: failed to clone lowerpath [ 1745.203896][T20169] overlayfs: failed to clone lowerpath [ 1755.407887][T20267] overlayfs: failed to clone lowerpath [ 1781.510596][T20515] loop8: detected capacity change from 0 to 2048 [ 1781.536209][T20515] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1781.581655][T20515] NILFS (loop8): mounting unchecked fs [ 1781.641575][T20515] NILFS (loop8): recovery complete [ 1781.662879][T20517] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1781.944785][T20525] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1787.238344][T20582] overlayfs: failed to clone lowerpath [ 1787.817521][T20593] RDS: rds_bind could not find a transport for ::ffff:172.30.0.9, load rds_tcp or rds_rdma? [ 1788.698406][T20597] binder: BINDER_SET_CONTEXT_MGR already set [ 1788.911170][T20597] binder: 20596:20597 ioctl 4018620d 200000000040 returned -16 [ 1792.054500][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.065295][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1795.720673][T20655] binder: BINDER_SET_CONTEXT_MGR already set [ 1795.733175][T20655] binder: 20654:20655 ioctl 4018620d 200000000040 returned -16 [ 1800.843210][T20711] binder: BINDER_SET_CONTEXT_MGR already set [ 1800.856104][T20711] binder: 20710:20711 ioctl 4018620d 200000000040 returned -16 [ 1807.277236][T20753] binder: 20752:20753 ioctl c0306201 0 returned -14 [ 1809.457010][ T5840] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1809.635686][T20777] IPVS: length: 218 != 24 [ 1809.663189][ T5840] usb 5-1: Using ep0 maxpacket: 8 [ 1809.668449][T20777] syz_tun: entered allmulticast mode [ 1809.691554][ T5840] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1809.713187][ T5840] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1809.743090][ T5840] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1809.772459][T20776] syz_tun: left allmulticast mode [ 1809.774116][ T5840] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1809.808497][ T5840] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1809.852514][ T5840] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1809.882989][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.139860][ T5840] usb 5-1: GET_CAPABILITIES returned 0 [ 1810.150566][ T5840] usbtmc 5-1:16.0: can't read capabilities [ 1810.437747][ T8044] usb 5-1: USB disconnect, device number 23 [ 1820.895423][T20869] loop8: detected capacity change from 0 to 40427 [ 1820.952193][T20869] F2FS-fs (loop8): invalid crc value [ 1820.975039][T20869] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1822.148180][T20893] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1822.368323][T20869] F2FS-fs (loop8): Start checkpoint disabled! [ 1822.436024][T20897] netlink: 'syz.4.2716': attribute type 1 has an invalid length. [ 1822.500373][T20897] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1823.652873][T20897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2716'. [ 1823.790744][T20901] bond1: (slave gretap1): making interface the new active one [ 1825.462734][T20901] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1826.550663][T20929] overlayfs: failed to clone lowerpath [ 1834.697106][T20994] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1835.685617][T21012] overlayfs: failed to clone lowerpath [ 1844.534498][T21095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1844.564838][T21095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1844.594245][T21095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1844.615201][T21095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1848.767602][T21135] IPVS: length: 218 != 24 [ 1848.783958][T21135] syz_tun: entered allmulticast mode [ 1848.809753][T21133] syz_tun: left allmulticast mode [ 1852.372678][T21163] loop8: detected capacity change from 0 to 8 [ 1852.405516][T21163] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 1852.440461][T21004] udevd[21004]: incorrect cramfs checksum on /dev/loop8 [ 1852.555359][T21004] udevd[21004]: incorrect cramfs checksum on /dev/loop8 [ 1853.481852][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.488329][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.878032][T21170] loop8: detected capacity change from 0 to 40427 [ 1853.933415][T21170] F2FS-fs (loop8): invalid crc value [ 1853.988477][T21170] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1854.364664][T21170] F2FS-fs (loop8): Start checkpoint disabled! [ 1854.845178][T21170] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 1855.234416][ T28] audit: type=1800 audit(1769897561.605:39): pid=21202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2759" name="bus" dev="loop8" ino=10 res=0 errno=0 [ 1857.065596][ T6474] kworker/u4:10: attempt to access beyond end of device [ 1857.065596][ T6474] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1857.080119][ T6474] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1858.283190][ T6474] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1864.227991][T21274] loop4: detected capacity change from 0 to 32768 [ 1864.262820][T21274] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.2775 (21274) [ 1864.986752][T21274] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1864.998516][T21274] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1865.007576][T21274] BTRFS info (device loop4): enabling disk space caching [ 1865.014755][T21274] BTRFS info (device loop4): force clearing of disk cache [ 1865.021913][T21274] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1865.031487][T21274] BTRFS info (device loop4): use zstd compression, level 3 [ 1865.038821][T21274] BTRFS info (device loop4): disk space caching is enabled [ 1865.193832][T21274] BTRFS info (device loop4): enabling ssd optimizations [ 1865.200887][T21274] BTRFS info (device loop4): auto enabling async discard [ 1865.218158][T21274] BTRFS info (device loop4): rebuilding free space tree [ 1865.248869][T21274] BTRFS info (device loop4): disabling free space tree [ 1865.256840][T21274] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1865.266878][T21274] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1866.265286][T18612] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1879.053700][T21431] binder: 21411:21431 ioctl c0306201 0 returned -14 [ 1883.013261][T21461] loop4: detected capacity change from 0 to 40427 [ 1883.204327][T21461] F2FS-fs (loop4): invalid crc value [ 1883.214145][T21461] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1883.262987][T21461] F2FS-fs (loop4): Start checkpoint disabled! [ 1884.507766][T21461] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1884.750359][ T28] audit: type=1800 audit(1769897591.115:40): pid=21461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2810" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 1884.777660][T21461] syz.4.2810: attempt to access beyond end of device [ 1884.777660][T21461] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1884.791817][T21461] syz.4.2810: attempt to access beyond end of device [ 1884.791817][T21461] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1884.806018][T21461] syz.4.2810: attempt to access beyond end of device [ 1884.806018][T21461] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1884.820733][T21461] syz.4.2810: attempt to access beyond end of device [ 1884.820733][T21461] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1884.835078][T21461] syz.4.2810: attempt to access beyond end of device [ 1884.835078][T21461] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1884.849614][T21461] syz.4.2810: attempt to access beyond end of device [ 1884.849614][T21461] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1884.863758][T21461] syz.4.2810: attempt to access beyond end of device [ 1884.863758][T21461] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1884.878040][T21461] syz.4.2810: attempt to access beyond end of device [ 1884.878040][T21461] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1884.892323][T21461] syz.4.2810: attempt to access beyond end of device [ 1884.892323][T21461] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1884.906529][T21461] syz.4.2810: attempt to access beyond end of device [ 1884.906529][T21461] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1886.101192][T13119] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1886.141697][T13119] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1914.920158][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.932781][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.359304][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.365920][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.802000][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.808481][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.237448][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.246015][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.687101][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.693785][ T1283] ieee802154 phy1 wpan1: encryption failed: -22