last executing test programs: 4m19.476495066s ago: executing program 0 (id=76): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) geteuid() write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@aname={'aname', 0x3d, 'kfree\x00'}}]}}) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 4m19.260659589s ago: executing program 0 (id=79): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @void, @value}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8923, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/132, 0x84}], 0x1) readv(r1, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) 4m16.816704608s ago: executing program 0 (id=85): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./bus\x00', 0x804, &(0x7f00000001c0), 0x1, 0x27b, &(0x7f0000000640)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) read(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x84, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x54, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_NAT={0xa}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x84}}, 0x0) 4m12.624969409s ago: executing program 0 (id=94): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0xee01, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f00000005c0)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_lower}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@discard}, {@fat=@check_strict}, {@shortname_mixed}, {@shortname_winnt}, {@rodir}, {@shortname_win95}, {@fat=@sys_immutable}, {@utf8}]}, 0x0, 0x274, &(0x7f0000000780)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x300, 0x0, 0x103ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e93470686f20ad"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 4m11.421001924s ago: executing program 0 (id=97): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) mount(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000004240)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000004280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@uname={'uname', 0x3d, '}\x81{-/}(*'}}, {@afid}, {@aname={'aname', 0x3d, '@#@'}}, {@nodevmap}, {@dfltuid}], [], 0x6b}}) syz_fuse_handle_req(r0, &(0x7f0000002240)="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", 0x2000, &(0x7f0000007080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000007100)={0x2020}, 0x941f) 4m11.014994019s ago: executing program 0 (id=99): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) sendmsg$kcm(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f78790000"], 0xcc}}, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_emit_ethernet(0xa6, 0x0, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x8000) 4m10.771639271s ago: executing program 32 (id=99): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) sendmsg$kcm(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f78790000"], 0xcc}}, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_emit_ethernet(0xa6, 0x0, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x8000) 15.495723103s ago: executing program 2 (id=734): truncate(&(0x7f0000000040)='./file2\x00', 0x81c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fanotify_init(0x1, 0x101000) writev(r3, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x1}], 0x1) 13.336268609s ago: executing program 2 (id=738): syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = getpid() syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x3, 0x1000000000000000, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfff, 0x0, 0x8, 0x0, 0x0, 0x2, 0x100000000004}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 13.148966211s ago: executing program 3 (id=740): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0xfe, 0x461, &(0x7f0000002180)="$eJzs289vFFUcAPDvTHcBAWlF/AGCVtHY+KOlBZWDF40mHjQx0QMea1sIslBDayKE6GoMHg2Jd+LRxL/Akyejnky86t2QECUmIBfXzO5M6W53C223bGE/n2ThvZk38943b97s23mdAPrWcPZPErE9In6PiMFGtrnAcOO/a1fOTf175dxUErXaO38l9XJXr5ybKooWx23LMyNpRPpFklfSbO7M2ROTlcrM6Tw/Nn/yw7G5M2efP35y8tjMsZlTE4cPHzo4/tKLEy90Jc6sTVf3fDK7d/cb7114a+rIhfd//i5r74P7GvsXx9Etw1ngf9fqWvc91e3Keuy/2o04k1KvW8OtGoiIrLvK9fE/GANxo/MG4/XPe9o4YF1l9+zNrRvLC6lqDbiLJbGqw2J1hwEbR/FFn/3+LT63cfrRc5dfafwAyuK+ln8ae0qR5mXK61j/cEQcqV6/mH2i5TlErc1zAwCAtfohm/88t3T+V18bWVQuydeGhiLivojYGRH3R8SuiHggL/tQRDy8wvpbl4aWzj/TS6sM7ZZk87+X87Wt5vlfMfuLoYE8d289/nJy9Hhl5kBE7IiIkShvzvLj7U5enOK1377qVP/i+d+RaqMdxVwwP8mlUssDuunJ+cluTUovfxaxp9Qu/mRhJSDr+90RsWdlp95RJI4/8+3eToWa479+cWn8y+jCOlPtm4inG/1fjZb4C8ny65NjW6Iyc2CsuCqW+uXX8293qn9N8XdB1v9bm6//lhKD/ySL12vnVl7H+T++7PibsnTT+Ntf/5uSd+tr1pvybR9Pzs+fHo/YlLxZzzdtn7hxbJEvymfxj+xvP/535sdk8T8SEdlFvC8iHo2Ix/K+ezwinoiI/cvE/9OrT37Qad9G6P/ptve/het/qLn/V54YOPHj953qv3n8Wf8fqqdG8i31+99NdG7OlrzEaq9mAAAAuPOkEbE9knR0IZ2mo6ONv5ffFVvTyuzc/LNHZz86Nd14R2AoymnxpGtw0fPQ8aSan7GRn8ifFRf7D+bPjb8euKeeH52arUz3OHbod9s6jP/MnwO9bh2w7ryvBf2rdfynPWoHcPv5/of+ZfxD/zL+oX+1G/+ftuStBcDdyfc/9C/jH/qX8Q/9y/iHvrSW9/rXK1Fa5u19iY2SiHTdqqhuiADv4ESpC6O7xzcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALvk/AAD//+Pz7ng=") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000000)='./file0\x00', 0x6a) 11.944741746s ago: executing program 2 (id=741): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/82, 0x28000, 0x800}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x1, @bearer=@l2={'ib', 0x3a, 'macvlan1\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x10004) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x28, 0x5, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000000)={'veth1_macvtap\x00', 0x44}) 11.158570875s ago: executing program 5 (id=743): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x6, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xfdac}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {r1, 0x6}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x4e24, 0x2, 'sed\x00', 0x0, 0xfffffffc}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x1402, 0x1, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x800) 11.080968946s ago: executing program 1 (id=744): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x9, 0x0, 0x0, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'team_slave_0\x00', &(0x7f0000000040)=@ethtool_stats}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x2, [], [0x2b8]}) r3 = syz_io_uring_setup(0xd1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x350}, &(0x7f00000002c0), 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000000100)}, 0x20) io_uring_register$IORING_REGISTER_PBUF_STATUS(r3, 0x1a, &(0x7f0000000140)={0x1}, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 10.200679687s ago: executing program 3 (id=745): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000000)='./file0\x00', 0x644a00, 0x22) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) lseek(r2, 0x8, 0x4) 9.839061881s ago: executing program 2 (id=746): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000340), 0x276, 0x200) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x200000000003, 0x87) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0xfffffffffffffffe, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x9, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.834323911s ago: executing program 5 (id=756): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0xff}, {@in6=@mcast2, 0x4d6, 0x6c}, @in=@private=0xa010101, {0x0, 0x192, 0x9ba3, 0xffff, 0x251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3502, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) 9.834045991s ago: executing program 1 (id=747): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)={0x4800, 0x8}, 0x10) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x4f0e, &(0x7f0000000480)={0x0, 0x0, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x1815, 0x0, 0x0, 0x0, 0x0) 8.453361998s ago: executing program 1 (id=748): socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 8.427806448s ago: executing program 5 (id=749): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_uring_setup(0x30df, &(0x7f0000000000)={0x0, 0x1332, 0x10000, 0x0, 0x1d}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x0, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 8.316891079s ago: executing program 2 (id=750): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x810, &(0x7f00000002c0), 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = fanotify_init(0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x455, 0x48001012, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 7.024974945s ago: executing program 1 (id=751): chdir(0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x1c7102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000540)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x446, &(0x7f0000004380)="$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") r2 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) chdir(&(0x7f0000000400)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60840, 0x8) 6.776572658s ago: executing program 4 (id=752): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 5.482954213s ago: executing program 3 (id=753): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) write$binfmt_misc(r0, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff7a}) close_range(r5, 0xffffffffffffffff, 0x0) 5.346066785s ago: executing program 4 (id=754): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000180), 0x2, 0xbd2, &(0x7f0000000540)="$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") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000140)='./file3\x00', 0x40c000, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES8, @ANYRES16, @ANYRESOCT=0x0, @ANYRESHEX], 0x0, 0x1d2, &(0x7f0000000900)="$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") r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x161000, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.078867088s ago: executing program 3 (id=755): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001", @ANYRESOCT=0x0, @ANYRES32=r0, @ANYRES16=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0}, 0x0) r1 = getpid() ioprio_set$pid(0x2, r1, 0x6000) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000001080)={0x0, 0x5, 0x1, {0x2, @pix={0x401, 0x0, 0xbc403470, 0x7, 0xba, 0x7fff, 0x6, 0x1, 0x0, 0x7, 0x0, 0x3}}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000005c0)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="200406"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, &(0x7f0000000140)={0xc, &(0x7f00000003c0)={0x0, 0xe, 0xbb, {0xbb, 0x9, "077e808c41f39234406eb075c21630a44d688364ea3072a2e23f15237266700578986606a329bc56c239b05bee9535b5599651e806dc5adc27eaa1bd7687affca7e246b43e6c0596b65bd68e2540011b1086809b744e6ffe032b5b98541a0f6557c9722d2bc2d4734fc83d8e434a2542c5c77a7733047c9ef38b19d83dc9f1bc67a32ae41fc782098f6cf441611b24b3bb9382586cb1f188ca564b4e22f7e8ae24f7b43897887bea063ebd377fb4030e05afcd26ffd18924bf"}}, &(0x7f00000000c0)={0x0, 0x3, 0x71, @string={0x71, 0x3, "dbbb5ba2efef602017c7cf2af64d47807bcfc714789b8d3c80a34addb491c91da2d9bac49503113983437ea9899a1895fdadbec5f1c0f4f9f82e7715569ccd81c40629e94652b7f6cd38e8d7075ace767a21e3a0672bbdfbfb0e9bdba09bc2f9505bff3ef1f8fcb3406a08d292cc23"}}}, &(0x7f0000000540)={0x1c, &(0x7f0000000200)={0x20, 0xf, 0x22, "cd0ab1e5807badff8ab46c52f46761ad78f16c0819b17ce4a5c5b890e751c9404e79"}, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0xfc}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x4}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x18, &(0x7f0000000380)={0x0, 0x15, 0x4, "9c42c885"}, 0x0, 0x0, 0x0, 0x0}) 4.695605503s ago: executing program 2 (id=757): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 4.433274187s ago: executing program 1 (id=758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f00000000c0), 0x2c8, 0x0) 4.294821308s ago: executing program 4 (id=759): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000073113b00000000008510000002000000850000007600000095000810000000009500a50500000000e2044545cfbd17576630aefe992b9b4b024760c6ca8428c2d720800b30744162c6c1d68c0859292af9d33dda349f59fe5229ba70f85aa1e78cbd0b64df7aae833db746747ad713088544922241e6faecd35737bacf2916b29ba4c624ccbd7f6eb43098cdccdb01aec0f5687be55f9c47"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 4.294287388s ago: executing program 5 (id=760): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r1, &(0x7f0000ffa000/0x3000)=nil, 0x6000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) close(r0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000080)=0xff) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)=0x100000) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0) 4.17075038s ago: executing program 5 (id=761): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb30}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000002c0)={[{@pquota}, {@discard}, {@nolargeio}, {@grpid}, {@nogrpid}, {@noalign}, {@inode64}, {@attr2}]}, 0x1, 0x97ee, &(0x7f0000012f40)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001040)=ANY=[], 0x841, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x361, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 2.753662776s ago: executing program 1 (id=762): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) 2.44991072s ago: executing program 33 (id=762): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) 2.43827207s ago: executing program 4 (id=764): r0 = epoll_create1(0x80000) r1 = eventfd(0x5) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000011c0)={0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000001200)={0x20000007}) epoll_pwait(r0, &(0x7f0000001240)=[{}], 0x1, 0x8, 0x0, 0x0) 1.360580503s ago: executing program 4 (id=765): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r4, &(0x7f0000000680), 0x4924924924925c6, 0x8dff) 1.332955624s ago: executing program 3 (id=766): r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x12, r1, 0x0) writev(r1, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r2 = socket$inet(0x2, 0x3, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 364.165756ms ago: executing program 4 (id=767): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0xfe, 0x461, &(0x7f0000002180)="$eJzs289vFFUcAPDvTHcBAWlF/AGCVtHY+KOlBZWDF40mHjQx0QMea1sIslBDayKE6GoMHg2Jd+LRxL/Akyejnky86t2QECUmIBfXzO5M6W53C223bGE/n2ThvZk38943b97s23mdAPrWcPZPErE9In6PiMFGtrnAcOO/a1fOTf175dxUErXaO38l9XJXr5ybKooWx23LMyNpRPpFklfSbO7M2ROTlcrM6Tw/Nn/yw7G5M2efP35y8tjMsZlTE4cPHzo4/tKLEy90Jc6sTVf3fDK7d/cb7114a+rIhfd//i5r74P7GvsXx9Etw1ngf9fqWvc91e3Keuy/2o04k1KvW8OtGoiIrLvK9fE/GANxo/MG4/XPe9o4YF1l9+zNrRvLC6lqDbiLJbGqw2J1hwEbR/FFn/3+LT63cfrRc5dfafwAyuK+ln8ae0qR5mXK61j/cEQcqV6/mH2i5TlErc1zAwCAtfohm/88t3T+V18bWVQuydeGhiLivojYGRH3R8SuiHggL/tQRDy8wvpbl4aWzj/TS6sM7ZZk87+X87Wt5vlfMfuLoYE8d289/nJy9Hhl5kBE7IiIkShvzvLj7U5enOK1377qVP/i+d+RaqMdxVwwP8mlUssDuunJ+cluTUovfxaxp9Qu/mRhJSDr+90RsWdlp95RJI4/8+3eToWa479+cWn8y+jCOlPtm4inG/1fjZb4C8ny65NjW6Iyc2CsuCqW+uXX8293qn9N8XdB1v9bm6//lhKD/ySL12vnVl7H+T++7PibsnTT+Ntf/5uSd+tr1pvybR9Pzs+fHo/YlLxZzzdtn7hxbJEvymfxj+xvP/535sdk8T8SEdlFvC8iHo2Ix/K+ezwinoiI/cvE/9OrT37Qad9G6P/ptve/het/qLn/V54YOPHj953qv3n8Wf8fqqdG8i31+99NdG7OlrzEaq9mAAAAuPOkEbE9knR0IZ2mo6ONv5ffFVvTyuzc/LNHZz86Nd14R2AoymnxpGtw0fPQ8aSan7GRn8ifFRf7D+bPjb8euKeeH52arUz3OHbod9s6jP/MnwO9bh2w7ryvBf2rdfynPWoHcPv5/of+ZfxD/zL+oX+1G/+ftuStBcDdyfc/9C/jH/qX8Q/9y/iHvrSW9/rXK1Fa5u19iY2SiHTdqqhuiADv4ESpC6O7xzcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALvk/AAD//+Pz7ng=") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000000)='./file0\x00', 0x6a) 342.719056ms ago: executing program 3 (id=776): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x810) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) 0s ago: executing program 5 (id=768): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2338014, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) kernel console output (not intermixed with test programs): [ 70.556004][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.567644][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.577069][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.585913][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.595723][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.604577][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.622695][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.631858][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.641426][ T3068] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.648565][ T3068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.659258][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.668242][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.681496][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.690705][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.712172][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.728290][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.744689][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.755446][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.768004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.777976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.807090][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.816720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.825823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.836656][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.844204][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.853713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.862880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.872309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.881686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.890788][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.898527][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.910527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.919965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.928837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.940167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.949037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.963774][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.997212][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.006060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.020984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.032102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.042902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.052972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.062199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.074764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.084034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.093697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.111145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.120658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.135741][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.148776][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.168649][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.180785][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.192389][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.206023][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.217837][ T1285] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.225265][ T1285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.240186][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.265053][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.290472][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.303354][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.306449][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 71.312922][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 71.325733][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.336911][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.340311][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 71.345634][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.354240][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 71.358611][ T1285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.365588][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.374244][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 71.400502][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.407775][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.418503][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.430130][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.445132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.454819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.463622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.471554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.501079][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.514920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.525705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.537327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.547973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.557769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.567879][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.575209][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.583311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.592456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.601561][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.608720][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.621161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.630175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.665926][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.676987][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.688747][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.697673][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.705240][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.714100][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.724074][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.780352][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.792277][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.803081][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.819300][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.833178][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.843761][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.852724][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.862537][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.873162][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.882293][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.891271][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.900612][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.911579][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.921180][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.932391][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.941813][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.977615][ T4168] device veth0_vlan entered promiscuous mode [ 71.991993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.001199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.010851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.021319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.030808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.040087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.048646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.057071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.073045][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.084400][ T4168] device veth1_vlan entered promiscuous mode [ 72.122569][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.132106][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.143080][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.152129][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.163237][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.172105][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.180631][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.195840][ T4177] device veth0_vlan entered promiscuous mode [ 72.248694][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.271623][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.289894][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.299887][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.318486][ T4168] device veth0_macvtap entered promiscuous mode [ 72.342315][ T4177] device veth1_vlan entered promiscuous mode [ 72.358204][ T4168] device veth1_macvtap entered promiscuous mode [ 72.384444][ T4169] device veth0_vlan entered promiscuous mode [ 72.418006][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.428594][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.437625][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.446352][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.454737][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.463723][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.473799][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.484111][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.494185][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.502098][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.512287][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.521484][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.538487][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.558393][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.566417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.575456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.584656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.595212][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.607179][ T4169] device veth1_vlan entered promiscuous mode [ 72.620485][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.640565][ T4177] device veth0_macvtap entered promiscuous mode [ 72.650480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.659820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.671156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.680110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.691904][ T4168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.701216][ T4168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.710839][ T4168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.720273][ T4168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.735215][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.759097][ T4177] device veth1_macvtap entered promiscuous mode [ 72.775338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.784644][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.820472][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.831306][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.874101][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.884240][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.926477][ T4169] device veth0_macvtap entered promiscuous mode [ 72.939910][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.955133][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.968078][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.980381][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.992015][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.003713][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.029945][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.044816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.055050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.073366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.082792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.098339][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.107877][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.117428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.125713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.135074][ T4171] device veth0_vlan entered promiscuous mode [ 73.145409][ T4177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.156614][ T4177] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.165819][ T4177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.176017][ T4177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.200232][ T4169] device veth1_macvtap entered promiscuous mode [ 73.223494][ T4171] device veth1_vlan entered promiscuous mode [ 73.280331][ T3068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.294242][ T3068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.311695][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.323399][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.333989][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.344870][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.356974][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.373431][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.386751][ T4218] Bluetooth: hci2: command 0x040f tx timeout [ 73.393479][ T4218] Bluetooth: hci3: command 0x040f tx timeout [ 73.395160][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.400592][ T4218] Bluetooth: hci0: command 0x040f tx timeout [ 73.414324][ T4218] Bluetooth: hci1: command 0x040f tx timeout [ 73.414703][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.430104][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.438684][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.448666][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.457967][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.467135][ T4218] Bluetooth: hci4: command 0x040f tx timeout [ 73.474172][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.490036][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.501305][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.511766][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.523269][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.537164][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.550735][ T4169] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.562497][ T4169] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.572909][ T4169] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.582664][ T4169] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.611122][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.620377][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.661406][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.670920][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.681422][ T4171] device veth0_macvtap entered promiscuous mode [ 73.702464][ T4171] device veth1_macvtap entered promiscuous mode [ 73.710190][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.720509][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.732595][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.742637][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.752426][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.762176][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.771243][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.780466][ T4170] device veth0_vlan entered promiscuous mode [ 73.802751][ T4170] device veth1_vlan entered promiscuous mode [ 73.822218][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.830818][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.844845][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.882912][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.894530][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.911863][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.914458][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.930107][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.941366][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.953008][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.966641][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.978926][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.011195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.024202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.046826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.058583][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.085213][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.103432][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.123131][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.133719][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.150737][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.164667][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.189657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.212519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.229150][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.231292][ T4171] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.247499][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.255038][ T4171] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.263959][ T4171] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.281787][ T4171] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.336558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.359358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.384008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.495305][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.514509][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.580881][ T4170] device veth0_macvtap entered promiscuous mode [ 74.593995][ T4170] device veth1_macvtap entered promiscuous mode [ 74.620817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.630407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.640205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.726279][ T4255] loop1: detected capacity change from 0 to 64 [ 74.771208][ T3068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.822133][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.893775][ T3068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.958817][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.170825][ T3068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.205209][ T3068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.292608][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.314040][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.325431][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.379693][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.383935][ T4254] attempt to access beyond end of device [ 75.383935][ T4254] loop1: rw=0, want=268435470, limit=64 [ 75.391093][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.402020][ T4254] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 75.412748][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.431647][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.443081][ T4254] Trying to free block not in datazone [ 75.447285][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.466680][ T1325] Bluetooth: hci1: command 0x0419 tx timeout [ 75.473235][ T1325] Bluetooth: hci0: command 0x0419 tx timeout [ 75.485080][ T1325] Bluetooth: hci3: command 0x0419 tx timeout [ 75.491390][ T1325] Bluetooth: hci2: command 0x0419 tx timeout [ 75.494233][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.507507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.541868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.550134][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 75.570136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.583678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.594566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.710037][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.723175][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.733623][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.750882][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.763855][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.783715][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.810939][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.836260][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.899772][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.959312][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.994319][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.060737][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.181178][ T4170] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.560626][ T4170] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.984682][ T4170] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.023468][ T4170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.195473][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 77.317375][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.331117][ T4272] netlink: 'syz.2.8': attribute type 10 has an invalid length. [ 77.349678][ T7] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 77.366590][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.427007][ T7] usb 4-1: config 0 descriptor?? [ 77.520548][ T4272] team0: Cannot enslave team device to itself [ 77.725640][ T4280] device vlan2 entered promiscuous mode [ 77.742273][ T4280] device vlan0 entered promiscuous mode [ 77.777959][ T4280] team0: Port device vlan2 added [ 77.794585][ T4284] loop0: detected capacity change from 0 to 1024 [ 77.826941][ T4272] syz.2.8 (4272) used greatest stack depth: 20480 bytes left [ 77.931397][ T4284] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 77.931397][ T4284] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 77.931397][ T4284] [ 77.976860][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.993991][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.035229][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.061030][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.081653][ T4284] EXT4-fs (loop0): mounted filesystem without journal. Opts: noacl,,errors=continue. Quota mode: writeback. [ 78.104005][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.118223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.256476][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 78.729776][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 78.740069][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 78.749692][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 78.759308][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 78.768860][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 78.778218][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 78.787620][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 78.796928][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 78.806341][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 79.512002][ T7] usbhid 4-1:0.0: can't add hid device: -71 [ 79.856233][ T7] usbhid: probe of 4-1:0.0 failed with error -71 [ 79.914718][ T4304] loop3: detected capacity change from 0 to 2048 [ 81.065198][ T7] usb 4-1: USB disconnect, device number 2 [ 81.167343][ T4304] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.206779][ T1325] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 81.407517][ T4318] loop1: detected capacity change from 0 to 64 [ 81.429795][ T4319] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.516376][ T1325] usb 5-1: device descriptor read/all, error -71 [ 81.727784][ T4318] ======================================================= [ 81.727784][ T4318] WARNING: The mand mount option has been deprecated and [ 81.727784][ T4318] and is ignored by this kernel. Remove the mand [ 81.727784][ T4318] option from the mount to silence this warning. [ 81.727784][ T4318] ======================================================= [ 83.706577][ T4340] device geneve2 entered promiscuous mode [ 85.001911][ T4354] loop0: detected capacity change from 0 to 2048 [ 85.233590][ T4354] loop0: p1 < > p4 [ 85.259250][ T4358] overlayfs: failed to resolve './file0': -2 [ 86.258159][ T4354] loop0: p4 size 8388608 extends beyond EOD, truncated [ 86.424177][ T3548] loop0: p1 < > p4 [ 86.434478][ T3548] loop0: p4 size 8388608 extends beyond EOD, truncated [ 87.690885][ T1108] cfg80211: failed to load regulatory.db [ 88.272927][ T4395] loop3: detected capacity change from 0 to 256 [ 88.325474][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 88.333574][ T4399] loop1: detected capacity change from 0 to 512 [ 88.421530][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 88.491374][ T4395] netlink: 'syz.3.42': attribute type 11 has an invalid length. [ 88.541576][ T4395] netlink: 60 bytes leftover after parsing attributes in process `syz.3.42'. [ 90.502646][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 90.526033][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 91.049910][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 92.347383][ C0] sched: RT throttling activated [ 92.987643][ T13] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 93.517861][ T13] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 93.537222][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.589337][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.624733][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.685981][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.704363][ T4443] loop2: detected capacity change from 0 to 256 [ 93.772270][ T13] usb 4-1: config 0 descriptor?? [ 93.825483][ T4441] device bridge_slave_0 left promiscuous mode [ 94.253536][ T4441] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.362929][ T4443] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 94.639625][ T4441] device bridge_slave_1 left promiscuous mode [ 94.646038][ T4441] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.790809][ T4441] bond0: (slave bond_slave_0): Releasing backup interface [ 94.871023][ T4441] bond0: (slave bond_slave_1): Releasing backup interface [ 94.952709][ T4429] loop3: detected capacity change from 0 to 8 [ 95.048780][ T4429] squashfs: Unknown parameter '' [ 95.146073][ T4441] team0: Port device team_slave_0 removed [ 95.681348][ T4441] team0: Port device team_slave_1 removed [ 95.725923][ T4441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.755277][ T4441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.784406][ T4441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.802641][ T4441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.899855][ T4444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.56'. [ 96.215002][ T13] pegasus: probe of 4-1:0.0 failed with error -71 [ 96.238123][ T13] usb 4-1: USB disconnect, device number 3 [ 96.472561][ T4466] loop2: detected capacity change from 0 to 1024 [ 96.579886][ T4466] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,barrier,barrier=0x0000000000000000,sysvgroups,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 96.796327][ T4471] netlink: 'syz.4.63': attribute type 11 has an invalid length. [ 96.861381][ T4473] Zero length message leads to an empty skb [ 98.101404][ T4481] loop2: detected capacity change from 0 to 256 [ 98.401092][ T4481] netlink: 'syz.2.67': attribute type 11 has an invalid length. [ 98.425983][ T4481] netlink: 60 bytes leftover after parsing attributes in process `syz.2.67'. [ 99.620407][ T4506] device geneve2 entered promiscuous mode [ 100.537964][ T4510] loop4: detected capacity change from 0 to 1024 [ 100.618198][ T4512] overlayfs: statfs failed on './file0' [ 100.912202][ T4510] EXT4-fs (loop4): mounted filesystem without journal. Opts: acl,barrier,barrier=0x0000000000000000,sysvgroups,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 102.993273][ T4539] netlink: 'syz.4.83': attribute type 1 has an invalid length. [ 104.458639][ T4550] loop0: detected capacity change from 0 to 256 [ 104.635421][ T4557] loop4: detected capacity change from 0 to 64 [ 104.904579][ T4557] attempt to access beyond end of device [ 104.904579][ T4557] loop4: rw=0, want=268435470, limit=64 [ 104.916316][ T4557] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 105.048498][ T4557] Trying to free block not in datazone [ 106.156571][ T4563] device geneve2 entered promiscuous mode [ 107.001971][ T4550] netlink: 'syz.0.85': attribute type 11 has an invalid length. [ 107.039900][ T4550] netlink: 60 bytes leftover after parsing attributes in process `syz.0.85'. [ 108.288291][ T4575] netlink: 156 bytes leftover after parsing attributes in process `syz.4.95'. [ 108.386127][ T4580] loop0: detected capacity change from 0 to 128 [ 108.508040][ T4582] netlink: 'syz.1.96': attribute type 1 has an invalid length. [ 108.538800][ T4182] Bluetooth: Wrong link type (-22) [ 109.040822][ T1285] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.240526][ T1285] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.755683][ T1285] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.982096][ T1285] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.768115][ T4621] tipc: Started in network mode [ 112.807237][ T4621] tipc: Node identity 7ad06116b322, cluster identity 4711 [ 112.845365][ T4621] tipc: Enabled bearer , priority 0 [ 112.972242][ T4626] device syzkaller0 entered promiscuous mode [ 113.116904][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 113.299415][ T4603] chnl_net:caif_netlink_parms(): no params data found [ 113.356624][ T4642] loop2: detected capacity change from 0 to 16 [ 113.459685][ T4642] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 145700) [ 113.510324][ T4636] tipc: Resetting bearer [ 113.582201][ T4636] tipc: Disabling bearer [ 113.941194][ T4661] ptrace attach of "./syz-executor exec"[4169] was attempted by "./syz-executor exec"[4661] [ 114.296193][ T4603] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.313439][ T4603] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.390688][ T4603] device bridge_slave_0 entered promiscuous mode [ 114.436564][ T4603] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.484521][ T4603] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.516829][ T4603] device bridge_slave_1 entered promiscuous mode [ 114.788555][ T4603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.894383][ T4603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.998381][ T4603] team0: Port device team_slave_0 added [ 115.006857][ T4603] team0: Port device team_slave_1 added [ 116.154244][ T4603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.174016][ T4603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.591756][ T1325] Bluetooth: hci2: command 0x041b tx timeout [ 116.605291][ T4603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.614191][ T4688] loop1: detected capacity change from 0 to 256 [ 116.618364][ T4603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.629672][ T4603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.656811][ T4603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.968076][ T4603] device hsr_slave_0 entered promiscuous mode [ 116.982191][ T4603] device hsr_slave_1 entered promiscuous mode [ 117.002330][ T4603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.163696][ T4603] Cannot create hsr debugfs directory [ 118.107176][ T4702] orangefs_mount: mount request failed with -4 [ 118.301151][ T4707] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 118.670684][ T1325] Bluetooth: hci2: command 0x040f tx timeout [ 118.689135][ T4716] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 118.856158][ T4603] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 118.878339][ T4603] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 119.001406][ T4603] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 119.020485][ T4603] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 119.163203][ T1285] device hsr_slave_0 left promiscuous mode [ 119.199380][ T1285] device hsr_slave_1 left promiscuous mode [ 119.213728][ T1285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.243897][ T1285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.282141][ T1285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.300073][ T1285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.320437][ T1285] device bridge_slave_1 left promiscuous mode [ 119.336921][ T1285] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.359888][ T4705] loop4: detected capacity change from 0 to 40427 [ 119.387492][ T1285] device bridge_slave_0 left promiscuous mode [ 119.462983][ T4742] loop3: detected capacity change from 0 to 16 [ 119.500089][ T1285] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.594736][ T4742] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 119.884541][ T4705] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 120.038631][ T4705] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 120.126256][ T4705] F2FS-fs (loop4): invalid crc value [ 120.137283][ T1285] device veth1_macvtap left promiscuous mode [ 120.156874][ T1285] device veth0_macvtap left promiscuous mode [ 120.166162][ T1285] device veth1_vlan left promiscuous mode [ 120.242873][ T1285] device veth0_vlan left promiscuous mode [ 120.306477][ T4705] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 120.558837][ T4705] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 120.601435][ T4705] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 120.757424][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 121.536168][ T4170] attempt to access beyond end of device [ 121.536168][ T4170] loop4: rw=2049, want=45112, limit=40427 [ 121.654213][ T1285] team0 (unregistering): Port device team_slave_1 removed [ 121.688257][ T1285] team0 (unregistering): Port device team_slave_0 removed [ 121.702314][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 121.723833][ T1285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.748930][ T26] audit: type=1326 audit(1746651487.836:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4767 comm="syz.1.133" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3feabce969 code=0x0 [ 121.779238][ T1285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.977153][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 122.010777][ T1285] bond0 (unregistering): Released all slaves [ 122.143743][ T4753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.130'. [ 122.182653][ T4756] netlink: 20 bytes leftover after parsing attributes in process `syz.3.130'. [ 122.261519][ T7] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 122.297825][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.318133][ T7] usb 3-1: Product: syz [ 122.336757][ T7] usb 3-1: Manufacturer: syz [ 122.350153][ T4603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.359251][ T7] usb 3-1: SerialNumber: syz [ 122.430423][ T7] usb 3-1: config 0 descriptor?? [ 123.043948][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.450134][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.476904][ T4603] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.516274][ T4603] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 123.526757][ T4603] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.784684][ T4769] xt_connbytes: Forcing CT accounting to be enabled [ 123.791838][ T4769] Cannot find del_set index 1 as target [ 124.121621][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.131030][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.143958][ T4684] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.151599][ T4684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.197188][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.226038][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.258163][ T4684] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.265397][ T4684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.346725][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.390767][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.422243][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.438279][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.472648][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.493850][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.529584][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.533057][ T7] airspy 3-1:0.0: usb_control_msg() failed -110 request 0a [ 124.559414][ T7] airspy 3-1:0.0: Could not detect board [ 124.563251][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.571416][ T7] airspy: probe of 3-1:0.0 failed with error -110 [ 124.608162][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.652986][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.698688][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.745032][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.785149][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.808462][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.839365][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.924920][ T4603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.171748][ T4275] usb 3-1: USB disconnect, device number 2 [ 126.547447][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 126.614994][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.673060][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.739800][ T4824] device bridge_slave_0 left promiscuous mode [ 126.778729][ T4824] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.858840][ T4824] device bridge_slave_1 left promiscuous mode [ 126.881868][ T4824] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.896307][ T4824] bond0: (slave bond_slave_0): Releasing backup interface [ 127.249722][ T4824] bond0: (slave bond_slave_1): Releasing backup interface [ 127.894403][ T4824] team0: Port device team_slave_0 removed [ 127.949198][ T4824] team0: Port device team_slave_1 removed [ 127.958794][ T4824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.967277][ T4824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.984874][ T4824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.994097][ T4824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.055402][ T4830] team0: Mode changed to "activebackup" [ 128.363173][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.435820][ T4859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 128.519442][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.048939][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.088451][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.159551][ T4603] device veth0_vlan entered promiscuous mode [ 129.364902][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.492927][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.632475][ T4603] device veth1_vlan entered promiscuous mode [ 131.672689][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 131.913684][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.060402][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.066883][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.257158][ T4603] device veth0_macvtap entered promiscuous mode [ 133.349250][ T4603] device veth1_macvtap entered promiscuous mode [ 133.383990][ T4896] loop2: detected capacity change from 0 to 4096 [ 133.502851][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.534627][ T4892] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 133.564290][ T4896] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 133.577117][ T4896] ntfs3: loop2: Failed to load $Extend. [ 133.592674][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.610223][ T4904] loop4: detected capacity change from 0 to 256 [ 133.667063][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.730590][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.804017][ T4603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.132265][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.256862][ T4895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.309751][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.361417][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.423313][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.499851][ T4603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.563578][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.609381][ T4904] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.622890][ T4904] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 134.634040][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.662813][ T4904] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 134.748567][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.950948][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.111083][ T4603] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.132206][ T4603] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.274231][ T4603] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.369925][ T4603] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.920536][ T4924] netlink: 'syz.3.167': attribute type 12 has an invalid length. [ 136.928617][ T4931] loop4: detected capacity change from 0 to 512 [ 136.987661][ T4931] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 137.074817][ T4181] Bluetooth: Wrong link type (-22) [ 137.143062][ T4931] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002] [ 137.167040][ T3068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.177807][ T3068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.193739][ T4931] System zones: 1-12 [ 137.198975][ T4931] EXT4-fs (loop4): orphan cleanup on readonly fs [ 137.218094][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 137.275383][ T4939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'. [ 137.318759][ T4931] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.168: invalid indirect mapped block 12 (level 1) [ 137.534530][ T4931] EXT4-fs (loop4): Remounting filesystem read-only [ 137.543532][ T3068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.555566][ T4931] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.168: invalid indirect mapped block 2 (level 2) [ 137.573735][ T3068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.804493][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 138.313185][ T4931] EXT4-fs (loop4): Remounting filesystem read-only [ 138.328823][ T4931] EXT4-fs (loop4): 1 truncate cleaned up [ 138.384672][ T4931] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,jqfmt=vfsv1,noload,errors=remount-ro,abort. Quota mode: none. [ 138.524289][ T4955] netlink: 'syz.2.174': attribute type 21 has an invalid length. [ 138.532253][ T4955] netlink: 'syz.2.174': attribute type 1 has an invalid length. [ 138.619544][ T4955] netlink: 512 bytes leftover after parsing attributes in process `syz.2.174'. [ 138.703362][ T4959] loop1: detected capacity change from 0 to 256 [ 138.710041][ T4961] loop5: detected capacity change from 0 to 64 [ 138.826454][ T4959] exfat: Deprecated parameter 'utf8' [ 139.079431][ T4959] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 139.105791][ T4967] overlayfs: failed to resolve './file1/file0': -2 [ 140.344051][ T4975] attempt to access beyond end of device [ 140.344051][ T4975] loop5: rw=0, want=268435470, limit=64 [ 140.427803][ T4975] Buffer I/O error on dev loop5, logical block 134217734, async page read [ 140.493724][ T4982] 8021q: VLANs not supported on vcan0 [ 140.506353][ T4982] netlink: 788 bytes leftover after parsing attributes in process `syz.3.180'. [ 140.732585][ T4985] fuse: root generation should be zero [ 141.259041][ T5004] loop5: detected capacity change from 0 to 256 [ 141.477530][ T5004] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 141.527026][ T5004] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 142.433383][ T5004] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 143.150294][ T5045] loop1: detected capacity change from 0 to 64 [ 143.269177][ T5047] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 144.640482][ T5053] kvm: pic: non byte read [ 144.654826][ T5053] kvm: pic: non byte read [ 144.666821][ T5053] kvm: pic: non byte read [ 144.699706][ T5053] kvm: pic: non byte read [ 146.293139][ T5080] process 'syz.5.202' launched './file0' with NULL argv: empty string added [ 147.198660][ T5084] loop5: detected capacity change from 0 to 128 [ 147.226218][ T5089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.203'. [ 147.276669][ T5089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.203'. [ 147.964726][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 148.146548][ T5105] netlink: 'syz.4.209': attribute type 1 has an invalid length. [ 148.330089][ T5105] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.392231][ T5110] device ip6erspan0 entered promiscuous mode [ 148.407271][ T5110] bond1: (slave ip6erspan0): making interface the new active one [ 148.448906][ T5110] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 148.533524][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 148.628136][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.639090][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 148.652484][ T23] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.661720][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.705467][ T23] usb 4-1: config 0 descriptor?? [ 150.156691][ T23] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 151.606224][ T23] usb 4-1: USB disconnect, device number 4 [ 151.807203][ T5171] device vlan2 entered promiscuous mode [ 151.957731][ T5171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.219'. [ 153.120246][ T5199] loop5: detected capacity change from 0 to 8192 [ 153.304789][ T4275] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 153.725101][ T4275] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.742766][ T4275] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 153.763487][ T4275] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.773784][ T4275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.814013][ T4275] usb 2-1: config 0 descriptor?? [ 153.872068][ T4275] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 155.465788][ T5226] [U] [ 155.469097][ T5226] [U] [ 155.471841][ T5226] [U] [ 155.474659][ T5226] [U] [ 155.512811][ T5226] [U] [ 155.515670][ T5226] [U] [ 155.518398][ T5226] [U] [ 155.521308][ T5226] [U] [ 155.524861][ T5226] [U] [ 155.527781][ T5226] [U] [ 155.530597][ T5226] [U] [ 155.540860][ T5231] netlink: 24 bytes leftover after parsing attributes in process `syz.4.235'. [ 155.650355][ T5235] [U] [ 155.702803][ T4247] usb 2-1: USB disconnect, device number 2 [ 158.742222][ T5266] ODEBUG: Out of memory. ODEBUG disabled [ 159.006135][ T2287] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 159.051606][ T5274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.246'. [ 159.656848][ T2287] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 159.687172][ T2287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.728646][ T2287] usb 5-1: Product: syz [ 159.755571][ T2287] usb 5-1: Manufacturer: syz [ 159.792312][ T2287] usb 5-1: SerialNumber: syz [ 159.869845][ T2287] usb 5-1: config 0 descriptor?? [ 159.928002][ T2287] usb 5-1: can't set config #0, error -71 [ 159.956883][ T2287] usb 5-1: USB disconnect, device number 4 [ 160.051431][ T5289] loop2: detected capacity change from 0 to 512 [ 160.170613][ T5289] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 160.189459][ T5289] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 160.960787][ T5298] binder: BINDER_SET_CONTEXT_MGR already set [ 161.023585][ T5298] binder: 5296:5298 ioctl 4018620d 200000000040 returned -16 [ 161.095581][ T5289] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 162.136116][ T5289] EXT4-fs (loop2): 1 truncate cleaned up [ 162.339610][ T5289] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 162.480676][ T5315] netlink: 'syz.5.257': attribute type 1 has an invalid length. [ 162.582787][ T5315] device ip6erspan0 entered promiscuous mode [ 163.497960][ T5332] loop4: detected capacity change from 0 to 1024 [ 163.621284][ T5341] loop5: detected capacity change from 0 to 4096 [ 163.628817][ T5332] EXT4-fs (loop4): Ignoring removed orlov option [ 163.649289][ T5332] EXT4-fs (loop4): Ignoring removed orlov option [ 163.701651][ T5332] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,orlov,orlov,. Quota mode: none. [ 163.727411][ T5348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 163.760049][ T5341] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 163.770704][ T5341] ntfs3: loop5: Failed to load $Extend. [ 163.797379][ T5332] syz.4.261 sent an empty control message without MSG_MORE. [ 164.834517][ T5340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.257590][ T5376] loop2: detected capacity change from 0 to 1024 [ 166.302613][ T5380] netlink: 'syz.1.274': attribute type 1 has an invalid length. [ 166.344932][ T5376] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 166.368714][ T5380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.399920][ T5388] device ip6erspan0 entered promiscuous mode [ 166.430566][ T26] audit: type=1800 audit(1746651532.520:3): pid=5376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.271" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 166.477768][ T5388] bond1: (slave ip6erspan0): making interface the new active one [ 166.499032][ T5388] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 166.512121][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 166.529008][ T5376] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.607686][ T5380] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 166.788245][ T5400] netlink: 'syz.3.277': attribute type 10 has an invalid length. [ 166.801410][ T5400] netlink: 40 bytes leftover after parsing attributes in process `syz.3.277'. [ 166.839269][ T5400] team0: Port device geneve0 added [ 167.916514][ T5407] loop1: detected capacity change from 0 to 4096 [ 168.247142][ T4214] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 168.716966][ T4214] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 168.774069][ T5421] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.780708][ T4214] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 168.815679][ T4214] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 168.856931][ T4214] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.968141][ T5412] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 170.272813][ T5412] af_packet: tpacket_rcv: packet too big, clamped from 18 to 4294967272. macoff=96 [ 170.544673][ T23] usb 6-1: USB disconnect, device number 2 [ 171.609553][ T5477] batman_adv: batadv0: Adding interface: dummy0 [ 171.616305][ T5477] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.709802][ T5477] batman_adv: batadv0: Interface activated: dummy0 [ 171.774545][ T5472] netlink: 'syz.5.291': attribute type 10 has an invalid length. [ 171.876619][ T5472] netlink: 40 bytes leftover after parsing attributes in process `syz.5.291'. [ 172.585665][ T5472] team0: Port device geneve0 added [ 172.620927][ T5465] batadv0: mtu less than device minimum [ 172.640643][ T5465] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 172.653899][ T5465] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 172.666791][ T5465] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 172.679282][ T5465] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 172.692365][ T5465] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 172.705008][ T5465] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 172.717494][ T5465] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 172.730428][ T5465] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 172.743218][ T5465] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 173.947343][ T26] audit: type=1326 audit(1746651540.020:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5485 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02444a969 code=0x7fc00000 [ 175.181070][ T26] audit: type=1326 audit(1746651541.269:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3feabce969 code=0x7ffc0000 [ 175.291614][ T26] audit: type=1326 audit(1746651541.309:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3feabce969 code=0x7ffc0000 [ 175.404456][ T26] audit: type=1326 audit(1746651541.309:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3feabce969 code=0x7ffc0000 [ 175.428530][ T26] audit: type=1326 audit(1746651541.309:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3feabce969 code=0x7ffc0000 [ 175.451196][ T26] audit: type=1326 audit(1746651541.309:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3feabce969 code=0x7ffc0000 [ 175.476173][ T26] audit: type=1326 audit(1746651541.309:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3feabce969 code=0x7ffc0000 [ 175.500159][ T26] audit: type=1326 audit(1746651541.309:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3feabce969 code=0x7ffc0000 [ 175.536876][ T26] audit: type=1326 audit(1746651541.309:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3feabce969 code=0x7ffc0000 [ 176.329000][ T26] audit: type=1326 audit(1746651541.309:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3feabce969 code=0x7ffc0000 [ 176.625703][ T5540] lo speed is unknown, defaulting to 1000 [ 176.632298][ T5540] lo speed is unknown, defaulting to 1000 [ 176.643910][ T5540] lo speed is unknown, defaulting to 1000 [ 176.662731][ T5540] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 176.847413][ T5545] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 177.285924][ T5540] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 178.048840][ T5540] lo speed is unknown, defaulting to 1000 [ 178.172063][ T5540] lo speed is unknown, defaulting to 1000 [ 178.210721][ T5540] lo speed is unknown, defaulting to 1000 [ 178.243268][ T5540] lo speed is unknown, defaulting to 1000 [ 178.275843][ T5540] lo speed is unknown, defaulting to 1000 [ 179.919231][ T5580] lo speed is unknown, defaulting to 1000 [ 181.233438][ T5600] loop3: detected capacity change from 0 to 64 [ 181.390156][ T5604] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.317'. [ 184.358650][ T5623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 185.408421][ T5627] nfs: Unknown parameter 'ntext' [ 187.088550][ T5647] tipc: Started in network mode [ 187.095461][ T5647] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 187.126175][ T5647] tipc: Enabled bearer , priority 10 [ 187.208419][ T5650] loop4: detected capacity change from 0 to 2048 [ 187.292377][ T5650] loop4: p1 < > p3 [ 187.420359][ T5650] loop4: p3 size 134217728 extends beyond EOD, truncated [ 187.644956][ T4162] udevd[4162]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 187.674966][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 187.694649][ T5650] loop4: detected capacity change from 0 to 256 [ 187.893502][ T5655] kvm: emulating exchange as write [ 187.996946][ T5673] loop4: detected capacity change from 0 to 1024 [ 188.080779][ T4181] Bluetooth: hci2: Received unexpected HCI Event 00000000 [ 188.244118][ T4214] tipc: Node number set to 9480874 [ 188.418446][ T5682] tipc: Started in network mode [ 188.439874][ T5682] tipc: Node identity 7f000001, cluster identity 4711 [ 188.493374][ T5682] tipc: Enabled bearer , priority 10 [ 188.518055][ T5684] xt_policy: neither incoming nor outgoing policy selected [ 190.049440][ T2287] tipc: Node number set to 2130706433 [ 190.184372][ T5694] tipc: Enabling of bearer rejected, failed to enable media [ 190.188872][ T5700] ipt_ECN: cannot use operation on non-tcp rule [ 190.402432][ T5700] loop2: detected capacity change from 0 to 512 [ 190.748723][ T5700] EXT4-fs (loop2): Unrecognized mount option "dont_hash" or missing value [ 191.520822][ T4247] Bluetooth: hci3: command 0x0406 tx timeout [ 191.527147][ T4247] Bluetooth: hci1: command 0x0406 tx timeout [ 191.542318][ T5733] netlink: 16 bytes leftover after parsing attributes in process `syz.3.343'. [ 191.785253][ T5743] loop3: detected capacity change from 0 to 512 [ 191.937040][ T5743] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 191.991341][ T5743] EXT4-fs (loop3): 1 truncate cleaned up [ 192.009525][ T5743] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 192.209581][ T4247] Bluetooth: hci0: command 0x0406 tx timeout [ 192.220507][ T4247] Bluetooth: hci4: command 0x0406 tx timeout [ 192.597194][ T5740] loop1: detected capacity change from 0 to 40427 [ 192.650679][ T5740] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 192.683112][ T5740] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 192.790585][ T5740] F2FS-fs (loop1): invalid crc value [ 192.858318][ T5740] F2FS-fs (loop1): Found nat_bits in checkpoint [ 192.977268][ T5740] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 193.002196][ T5740] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 193.100508][ T5764] smc: net device bond0 applied user defined pnetid SYZ2 [ 193.108958][ T5764] smc: net device bond0 erased user defined pnetid SYZ2 [ 194.702713][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.709079][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.052746][ T5778] ubi31: attaching mtd0 [ 195.063572][ T5778] ubi31: scanning is finished [ 195.068449][ T5778] ubi31: empty MTD device detected [ 195.341259][ T5778] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 195.508529][ T5778] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3753 bytes [ 195.568076][ T5778] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 195.755626][ T5778] ubi31: VID header offset: 279 (aligned 279), data offset: 343 [ 196.058037][ T5778] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 196.064944][ T5778] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 21 [ 196.116663][ T5778] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2040054792 [ 196.133831][ T5778] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 196.145997][ T5792] ubi31: background thread "ubi_bgt31d" started, PID 5792 [ 196.361024][ T2287] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 196.395104][ T5795] netlink: 41326 bytes leftover after parsing attributes in process `syz.5.358'. [ 196.622210][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 196.622228][ T26] audit: type=1804 audit(1746651562.607:51): pid=5809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.360" name="/newroot/71/file1" dev="fuse" ino=1 res=1 errno=0 [ 196.760795][ T26] audit: type=1800 audit(1746651562.653:52): pid=5809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.360" name="/" dev="fuse" ino=1 res=0 errno=0 [ 199.093768][ T4214] Bluetooth: hci2: command 0x0411 tx timeout [ 203.146460][ T5864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'. [ 203.735705][ T5860] ipt_ECN: cannot use operation on non-tcp rule [ 204.018639][ T5866] device syzkaller0 entered promiscuous mode [ 204.193211][ T5860] loop3: detected capacity change from 0 to 512 [ 204.380357][ T5860] EXT4-fs (loop3): Unrecognized mount option "dont_hash" or missing value [ 204.389633][ T4214] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 204.706566][ T4214] usb 2-1: Using ep0 maxpacket: 16 [ 204.858967][ T4214] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.914011][ T4214] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.931715][ T4214] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.468991][ T4214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.514172][ T4214] usb 2-1: Product: syz [ 206.547549][ T4214] usb 2-1: Manufacturer: syz [ 206.574910][ T4214] usb 2-1: SerialNumber: syz [ 206.850726][ T5899] loop5: detected capacity change from 0 to 128 [ 206.943242][ T4214] usb 2-1: 0:2 : does not exist [ 207.078551][ T5899] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 207.477735][ T5899] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 207.588236][ T4214] usb 2-1: USB disconnect, device number 3 [ 207.766821][ T5909] netlink: 24 bytes leftover after parsing attributes in process `syz.5.388'. [ 209.638992][ T4160] udevd[4160]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.319303][ T5928] device syzkaller0 entered promiscuous mode [ 211.463147][ T1285] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 211.655634][ T5933] loop3: detected capacity change from 0 to 512 [ 211.761103][ T5933] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 211.831035][ T5933] EXT4-fs (loop3): 1 truncate cleaned up [ 211.836851][ T5933] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 211.910806][ T5938] loop1: detected capacity change from 0 to 4096 [ 214.720680][ T5952] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 214.962163][ T5938] syz.1.397 (5938) used greatest stack depth: 19552 bytes left [ 215.023854][ T5958] netlink: 64 bytes leftover after parsing attributes in process `syz.3.404'. [ 215.041742][ T5958] netlink: 'syz.3.404': attribute type 11 has an invalid length. [ 215.059245][ T5958] netlink: 428 bytes leftover after parsing attributes in process `syz.3.404'. [ 216.716308][ T5972] loop1: detected capacity change from 0 to 1024 [ 217.125575][ T5981] device syzkaller0 entered promiscuous mode [ 218.135714][ T5972] hfsplus: unable to parse mount options [ 219.621697][ T5998] loop5: detected capacity change from 0 to 512 [ 219.859756][ T26] audit: type=1326 audit(1746651584.060:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.2.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02444a969 code=0x7ffc0000 [ 220.430702][ T5998] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 220.965794][ T26] audit: type=1326 audit(1746651584.060:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.2.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff02444a969 code=0x7ffc0000 [ 221.046886][ T26] audit: type=1326 audit(1746651584.060:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.2.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02444a969 code=0x7ffc0000 [ 221.075745][ T26] audit: type=1326 audit(1746651584.484:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.2.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff02444a969 code=0x7ffc0000 [ 221.121996][ T5998] EXT4-fs (loop5): 1 truncate cleaned up [ 221.136756][ T5998] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 221.166658][ T26] audit: type=1326 audit(1746651585.084:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.2.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02444a969 code=0x7ffc0000 [ 221.201496][ T6019] loop3: detected capacity change from 0 to 1024 [ 221.252546][ T26] audit: type=1326 audit(1746651585.084:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.2.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02444a969 code=0x7ffc0000 [ 226.403271][ T6059] loop4: detected capacity change from 0 to 1024 [ 226.475613][ T6059] hfsplus: unable to parse mount options [ 227.323475][ T6066] netlink: 24 bytes leftover after parsing attributes in process `syz.2.434'. [ 227.353781][ T6063] pit: kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 227.388760][ T6063] kvm: pic: non byte read [ 227.394440][ T6063] kvm: pic: level sensitive irq not supported [ 227.395444][ T6063] kvm: pic: non byte read [ 227.418163][ T6063] kvm: pic: level sensitive irq not supported [ 227.418358][ T6063] kvm: pic: non byte read [ 227.430826][ T6063] kvm: pic: level sensitive irq not supported [ 227.431626][ T6063] kvm: pic: non byte read [ 227.666559][ T6077] loop4: detected capacity change from 0 to 512 [ 229.208614][ T6077] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 229.276612][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.441'. [ 229.299929][ T6077] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.435: invalid indirect mapped block 83886080 (level 1) [ 229.318611][ T6092] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.441589][ T6077] EXT4-fs (loop4): Remounting filesystem read-only [ 229.451998][ T6077] EXT4-fs (loop4): 1 orphan inode deleted [ 229.458130][ T6077] EXT4-fs (loop4): 1 truncate cleaned up [ 229.466790][ T6077] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000000040,block_validity,quota,. Quota mode: writeback. [ 229.511756][ T26] audit: type=1326 audit(1746651592.964:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb258f4b969 code=0x7ffc0000 [ 229.548457][ T26] audit: type=1326 audit(1746651592.982:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb258f4b969 code=0x7ffc0000 [ 229.602371][ T26] audit: type=1326 audit(1746651592.982:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb258f4b969 code=0x7ffc0000 [ 229.674498][ T26] audit: type=1326 audit(1746651592.991:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb258f4b969 code=0x7ffc0000 [ 229.715882][ T26] audit: type=1326 audit(1746651592.991:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb258f4b969 code=0x7ffc0000 [ 229.743762][ T26] audit: type=1326 audit(1746651592.991:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fb258f4b969 code=0x7ffc0000 [ 229.803916][ T26] audit: type=1326 audit(1746651592.991:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb258f4b969 code=0x7ffc0000 [ 229.827182][ T26] audit: type=1326 audit(1746651592.991:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb258f4b969 code=0x7ffc0000 [ 229.845209][ T6092] device bridge_slave_1 left promiscuous mode [ 229.852275][ T26] audit: type=1326 audit(1746651592.991:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb258f4b969 code=0x7ffc0000 [ 229.878697][ T26] audit: type=1326 audit(1746651592.991:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb258f4b969 code=0x7ffc0000 [ 229.926701][ T6092] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.965525][ T6101] tipc: Started in network mode [ 229.976511][ T6101] tipc: Node identity 7f000001, cluster identity 4711 [ 230.021013][ T6101] tipc: Enabled bearer , priority 10 [ 230.042215][ T6103] tipc: Enabled bearer , priority 0 [ 230.170837][ T6109] loop1: detected capacity change from 0 to 128 [ 230.366752][ T6109] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 230.395841][ T6115] loop2: detected capacity change from 0 to 1024 [ 230.462287][ T6115] hfsplus: unable to parse mount options [ 230.638759][ T6109] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 231.226642][ T4219] tipc: Node number set to 2130706433 [ 231.449981][ T6109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.446'. [ 231.464236][ T4274] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 232.706481][ T6133] Cannot find add_set index 0 as target [ 233.533798][ T6151] capability: warning: `syz.3.459' uses deprecated v2 capabilities in a way that may be insecure [ 235.433761][ T6164] loop4: detected capacity change from 0 to 256 [ 235.658805][ T6166] loop3: detected capacity change from 0 to 1024 [ 237.008038][ T6166] hfsplus: unable to parse mount options [ 237.921907][ T6174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.465'. [ 238.663884][ T6179] loop3: detected capacity change from 0 to 128 [ 238.874487][ T6188] loop5: detected capacity change from 0 to 256 [ 238.900801][ T6179] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 238.976509][ T6179] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 238.999866][ T6188] exFAT-fs (loop5): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001) [ 240.351336][ T6188] exFAT-fs (loop5): failed to load upcase table [ 240.368878][ T6188] exFAT-fs (loop5): failed to recognize exfat type [ 240.415387][ T6179] netlink: 24 bytes leftover after parsing attributes in process `syz.3.464'. [ 240.461812][ T479] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 241.548234][ T6198] loop4: detected capacity change from 0 to 4096 [ 242.814944][ T6198] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 246.050389][ T6198] ntfs3: loop4: Inode r=19 is not in use! [ 246.081610][ T6198] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 247.592969][ T6241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.482'. [ 248.971514][ T6246] device syzkaller0 entered promiscuous mode [ 249.550599][ T6234] device syzkaller0 left promiscuous mode [ 249.951831][ T6257] netlink: 116 bytes leftover after parsing attributes in process `syz.5.488'. [ 251.390697][ T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 253.432287][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.443701][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.505125][ T21] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 253.519274][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.602587][ T21] usb 2-1: config 0 descriptor?? [ 254.523494][ T6292] loop3: detected capacity change from 0 to 512 [ 254.982266][ T21] usb 2-1: string descriptor 0 read error: -22 [ 255.018808][ T6292] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 255.117009][ T21] uclogic 0003:256C:006D.0002: interface is invalid, ignoring [ 255.193088][ T6292] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.498: iget: bad i_size value: -67835469387268086 [ 255.293120][ T6292] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.498: couldn't read orphan inode 15 (err -117) [ 255.364215][ T6292] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 255.371827][ T21] usb 2-1: USB disconnect, device number 4 [ 255.402211][ T6292] ext2 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.444831][ T6314] loop2: detected capacity change from 0 to 512 [ 256.475658][ T6314] EXT4-fs (loop2): Ignoring removed nobh option [ 256.540590][ T6314] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000004,bsddf,nobh,init_itable=0x0000000000000003,data_err=ignore,,errors=continue. Quota mode: none. [ 257.866221][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 257.866238][ T26] audit: type=1800 audit(1746651619.058:81): pid=6325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.505" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 258.230833][ T6333] loop4: detected capacity change from 0 to 256 [ 258.440254][ T4214] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 258.599048][ T6333] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 258.798475][ T4214] usb 4-1: Using ep0 maxpacket: 32 [ 258.983048][ T4214] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 259.009417][ T4214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.068201][ T4214] usb 4-1: config 0 descriptor?? [ 259.220643][ T6346] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 259.468529][ T6350] loop4: detected capacity change from 0 to 512 [ 259.504416][ T6350] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 259.523226][ T6350] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.518: iget: bad i_size value: -67835469387268086 [ 259.543320][ T6350] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.518: couldn't read orphan inode 15 (err -117) [ 259.706115][ T6350] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 259.892093][ T6350] ext2 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.434357][ T4214] usbhid 4-1:0.0: can't add hid device: -71 [ 260.440974][ T4214] usbhid: probe of 4-1:0.0 failed with error -71 [ 260.481878][ T4214] usb 4-1: USB disconnect, device number 5 [ 260.967199][ T6360] loop1: detected capacity change from 0 to 128 [ 261.072206][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.217331][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.476891][ T6360] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 262.488786][ T6360] ext4 filesystem being mounted at /113/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 262.577895][ T6371] netlink: 16 bytes leftover after parsing attributes in process `syz.3.523'. [ 263.081084][ T6360] fscrypt: Error allocating hmac(sha512): -2 [ 265.701126][ T6405] loop2: detected capacity change from 0 to 512 [ 265.787680][ T6407] loop4: detected capacity change from 0 to 256 [ 265.788669][ T6405] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 265.804510][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.533'. [ 265.855027][ T6409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.533'. [ 265.928496][ T6405] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.531: iget: bad i_size value: -67835469387268086 [ 265.973437][ T26] audit: type=1804 audit(1746651626.596:82): pid=6407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.534" name="/newroot/102/file1/file0" dev="loop4" ino=1048621 res=1 errno=0 [ 265.997339][ T6405] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.531: couldn't read orphan inode 15 (err -117) [ 266.019092][ T6411] usb usb1: usbfs: process 6411 (syz.3.535) did not claim interface 6 before use [ 266.034407][ T6405] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 266.060273][ T6405] ext2 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.068317][ T6416] loop3: detected capacity change from 0 to 256 [ 266.480031][ T6420] xt_CT: You must specify a L4 protocol and not use inversions on it [ 268.272962][ T6437] loop1: detected capacity change from 0 to 1024 [ 268.516584][ T6437] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.542: bad orphan inode 8388352 [ 268.574436][ T6437] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 270.223845][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.547'. [ 270.630199][ T6458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.547'. [ 274.477387][ T26] audit: type=1804 audit(1746651634.448:83): pid=6486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.553" name="file1" dev="ramfs" ino=40406 res=1 errno=0 [ 274.672501][ T26] audit: type=1326 audit(1746651634.633:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979677d969 code=0x7ffc0000 [ 274.925744][ T6495] loop2: detected capacity change from 0 to 128 [ 276.289480][ T26] audit: type=1326 audit(1746651634.660:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f979677d969 code=0x7ffc0000 [ 276.292871][ T6504] loop1: detected capacity change from 0 to 256 [ 276.318169][ T6495] EXT4-fs (loop2): Ignoring removed nobh option [ 276.396380][ T6495] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none. [ 276.419419][ T26] audit: type=1326 audit(1746651634.660:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979677d969 code=0x7ffc0000 [ 276.478094][ T6495] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 276.532066][ T6512] loop3: detected capacity change from 0 to 128 [ 276.739926][ T6512] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 276.751574][ T6512] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 276.841966][ T6504] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 276.999004][ T26] audit: type=1326 audit(1746651634.660:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f979677d969 code=0x7ffc0000 [ 277.637119][ T6512] fscrypt: Error allocating hmac(sha512): -2 [ 278.785218][ T26] audit: type=1326 audit(1746651634.660:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979677d969 code=0x7ffc0000 [ 278.942187][ T26] audit: type=1326 audit(1746651634.670:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f979677d969 code=0x7ffc0000 [ 278.987842][ T26] audit: type=1326 audit(1746651634.670:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979677d969 code=0x7ffc0000 [ 281.643910][ T26] audit: type=1326 audit(1746651634.670:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f979677d969 code=0x7ffc0000 [ 281.833650][ T26] audit: type=1326 audit(1746651634.670:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979677d969 code=0x7ffc0000 [ 281.932886][ T6543] loop3: detected capacity change from 0 to 512 [ 282.047433][ T6542] netlink: 76 bytes leftover after parsing attributes in process `syz.4.570'. [ 282.105614][ T26] audit: type=1326 audit(1746651634.670:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f979677d969 code=0x7ffc0000 [ 282.313101][ T6543] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 282.970729][ T26] audit: type=1326 audit(1746651634.670:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979677d969 code=0x7ffc0000 [ 283.027011][ T6543] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 283.192561][ T6543] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.297660][ T26] audit: type=1326 audit(1746651634.670:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f979677d969 code=0x7ffc0000 [ 283.324004][ T6561] loop5: detected capacity change from 0 to 256 [ 283.376463][ T6543] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #2: comm syz.3.569: corrupted inode contents [ 283.531991][ T26] audit: type=1326 audit(1746651634.882:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979677d969 code=0x7ffc0000 [ 283.575947][ T26] audit: type=1326 audit(1746651634.882:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979677d969 code=0x7ffc0000 [ 283.597303][ T6543] EXT4-fs error (device loop3): ext4_dirty_inode:6039: inode #2: comm syz.3.569: mark_inode_dirty error [ 283.748829][ T6543] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #2: comm syz.3.569: corrupted inode contents [ 283.816249][ T6564] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #2: comm syz.3.569: corrupted inode contents [ 283.861109][ T6564] EXT4-fs error (device loop3): ext4_dirty_inode:6039: inode #2: comm syz.3.569: mark_inode_dirty error [ 283.873429][ T6564] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #2: comm syz.3.569: corrupted inode contents [ 283.885698][ T26] audit: type=1326 audit(1746651636.958:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6515 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb258f4b969 code=0x7ffc0000 [ 283.909134][ T26] audit: type=1326 audit(1746651636.967:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6515 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb258f4b969 code=0x7ffc0000 [ 283.931671][ T6564] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.569: mark_inode_dirty error [ 283.946298][ T26] audit: type=1326 audit(1746651637.023:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6515 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb258f4b969 code=0x7ffc0000 [ 283.969936][ T6564] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #2: comm syz.3.569: corrupted inode contents [ 283.993965][ T6564] EXT4-fs error (device loop3): ext4_dirty_inode:6039: inode #2: comm syz.3.569: mark_inode_dirty error [ 284.016971][ T6566] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #2: comm syz.3.569: corrupted inode contents [ 286.413345][ T6586] loop2: detected capacity change from 0 to 128 [ 288.023795][ T6590] loop1: detected capacity change from 0 to 16 [ 288.601790][ T6586] EXT4-fs: failed to create workqueue [ 288.607242][ T6586] EXT4-fs (loop2): mount failed [ 289.361690][ T6590] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 289.497319][ T6590] cramfs: wrong endianness [ 291.196721][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 291.817702][ T6626] netlink: 'syz.2.593': attribute type 3 has an invalid length. [ 291.843629][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.983864][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.183659][ T23] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 292.238726][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.276463][ T23] usb 4-1: config 0 descriptor?? [ 292.310284][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'. [ 293.023035][ T6639] loop5: detected capacity change from 0 to 512 [ 294.098645][ T6642] loop2: detected capacity change from 0 to 128 [ 294.142934][ T6639] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc,init_itable,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 294.254524][ T6639] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.301432][ T23] usb 4-1: string descriptor 0 read error: -22 [ 294.389327][ T6649] netlink: 56 bytes leftover after parsing attributes in process `syz.2.598'. [ 294.398458][ T6649] netlink: 56 bytes leftover after parsing attributes in process `syz.2.598'. [ 294.410703][ T23] uclogic 0003:256C:006D.0003: interface is invalid, ignoring [ 294.436203][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 294.436219][ T26] audit: type=1326 audit(1746651652.875:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz.5.596" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6336264969 code=0x0 [ 294.584495][ T6651] netlink: 'syz.5.596': attribute type 13 has an invalid length. [ 294.653375][ T13] usb 4-1: USB disconnect, device number 6 [ 295.677935][ T26] audit: type=1326 audit(1746651654.010:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6665 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02444a969 code=0x7ffc0000 [ 295.768589][ T26] audit: type=1326 audit(1746651654.046:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6665 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7ff02444a969 code=0x7ffc0000 [ 295.864441][ T26] audit: type=1326 audit(1746651654.046:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6665 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02444a969 code=0x7ffc0000 [ 295.870640][ T6667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'. [ 295.905221][ T26] audit: type=1326 audit(1746651654.046:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6665 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7ff02444a969 code=0x7ffc0000 [ 295.952059][ T26] audit: type=1326 audit(1746651654.046:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6665 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02444a969 code=0x7ffc0000 [ 295.986275][ T6672] loop3: detected capacity change from 0 to 2048 [ 296.038807][ T26] audit: type=1326 audit(1746651654.046:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6665 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff02444a969 code=0x7ffc0000 [ 296.100642][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.608'. [ 296.244420][ T26] audit: type=1326 audit(1746651654.046:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6665 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02444a969 code=0x7ffc0000 [ 296.267929][ T26] audit: type=1326 audit(1746651654.046:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6665 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff02444a969 code=0x7ffc0000 [ 296.302087][ T26] audit: type=1326 audit(1746651654.056:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6665 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02444a969 code=0x7ffc0000 [ 297.165487][ T6672] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue. Quota mode: none. [ 297.286985][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 297.564375][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 298.310153][ T6674] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm vhost-6672: bg 0: block 234: padding at end of block bitmap is not set [ 299.626804][ T23] usb 5-1: device descriptor read/all, error -71 [ 299.791092][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.614'. [ 300.523915][ T13] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 301.031030][ T6718] sctp: [Deprecated]: syz.1.618 (pid 6718) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.031030][ T6718] Use struct sctp_sack_info instead [ 301.433530][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.038699][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.053437][ T13] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 302.062960][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.075123][ T13] usb 6-1: config 0 descriptor?? [ 303.538889][ T6729] netlink: 'syz.1.622': attribute type 10 has an invalid length. [ 303.558871][ T6729] netlink: 40 bytes leftover after parsing attributes in process `syz.1.622'. [ 303.613304][ T6729] netlink: 'syz.1.622': attribute type 10 has an invalid length. [ 303.621430][ T6729] netlink: 40 bytes leftover after parsing attributes in process `syz.1.622'. [ 303.661430][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.5.624'. [ 303.723626][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.624'. [ 303.728779][ T23] hid-generic 0005:10CF:0009.0004: unknown main item tag 0x0 [ 303.740771][ T13] usbhid 6-1:0.0: can't add hid device: -71 [ 303.754872][ T23] hid-generic 0005:10CF:0009.0004: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 303.811314][ T13] usbhid: probe of 6-1:0.0 failed with error -71 [ 303.813143][ T13] usb 6-1: USB disconnect, device number 3 [ 304.014180][ T6743] loop3: detected capacity change from 0 to 32768 [ 304.065561][ T6743] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.626 (6743) [ 304.120833][ T6743] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 304.131279][ T6743] BTRFS info (device loop3): using free space tree [ 304.138480][ T6743] BTRFS info (device loop3): has skinny extents [ 304.779933][ T6743] BTRFS info (device loop3): enabling ssd optimizations [ 304.927887][ T6753] netlink: 'syz.5.638': attribute type 10 has an invalid length. [ 305.017517][ T6753] netlink: 40 bytes leftover after parsing attributes in process `syz.5.638'. [ 305.133833][ T6753] netlink: 'syz.5.638': attribute type 10 has an invalid length. [ 305.325688][ T6753] netlink: 40 bytes leftover after parsing attributes in process `syz.5.638'. [ 307.591107][ T23] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 309.228888][ T23] usb 2-1: not running at top speed; connect to a high speed hub [ 309.261462][ T6815] tipc: Enabling of bearer rejected, already enabled [ 309.281224][ T6815] tipc: Enabling of bearer rejected, already enabled [ 309.359311][ T6818] tipc: Enabled bearer , priority 0 [ 309.468662][ T23] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 309.481844][ T23] usb 2-1: config 1 has no interface number 1 [ 310.554436][ T23] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 310.563990][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.573554][ T23] usb 2-1: Product: syz [ 310.602791][ T23] usb 2-1: can't set config #1, error -71 [ 310.616214][ T23] usb 2-1: USB disconnect, device number 5 [ 312.098737][ T5055] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.589840][ T6873] netlink: 'syz.4.657': attribute type 4 has an invalid length. [ 314.597785][ T6873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.657'. [ 314.608167][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 314.608183][ T26] audit: type=1326 audit(1746651671.458:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz.4.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb258f4b969 code=0x7ffc0000 [ 314.674951][ T26] audit: type=1326 audit(1746651671.458:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz.4.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fb258f4b969 code=0x7ffc0000 [ 315.669609][ T26] audit: type=1326 audit(1746651671.458:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz.4.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb258f4b969 code=0x7ffc0000 [ 316.061491][ T4275] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 316.073095][ T26] audit: type=1326 audit(1746651671.458:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz.4.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fb258f4b969 code=0x7ffc0000 [ 316.101046][ T26] audit: type=1326 audit(1746651671.458:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz.4.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb258f4b969 code=0x7ffc0000 [ 316.126145][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.659'. [ 316.146305][ T6884] input: syz0 as /devices/virtual/input/input6 [ 316.170841][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 316.178180][ T26] audit: type=1326 audit(1746651671.458:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz.4.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb258f4b969 code=0x7ffc0000 [ 316.320209][ T26] audit: type=1326 audit(1746651671.458:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz.4.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb258f4b969 code=0x7ffc0000 [ 316.531036][ T4275] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 316.603812][ T4275] usb 6-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 316.662074][ T26] audit: type=1326 audit(1746651671.458:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz.4.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb258f4b969 code=0x7ffc0000 [ 316.955648][ T4275] usb 6-1: New USB device found, idVendor=0482, idProduct=0101, bcdDevice= 1.00 [ 317.020556][ T4275] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.043061][ T26] audit: type=1326 audit(1746651671.458:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz.4.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb258f4b969 code=0x7ffc0000 [ 317.173987][ T4275] usb 6-1: Product: syz [ 317.236134][ T4275] usb 6-1: Manufacturer: syz [ 317.288264][ T4275] usb 6-1: SerialNumber: syz [ 317.299977][ T26] audit: type=1326 audit(1746651671.458:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz.4.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb258f4b969 code=0x7ffc0000 [ 317.966547][ T6839] usb 6-1: USB disconnect, device number 4 [ 322.425003][ T6930] syz.2.671[6930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.425113][ T6930] syz.2.671[6930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.021815][ T6924] lo speed is unknown, defaulting to 1000 [ 323.225423][ T6943] trusted_key: encrypted_key: insufficient parameters specified [ 323.296650][ T6948] input: syz1 as /devices/virtual/input/input7 [ 323.435899][ T6948] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 324.070804][ T6954] loop4: detected capacity change from 0 to 512 [ 324.347596][ T6954] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 324.502383][ T6954] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 324.592455][ T6954] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.862013][ T6954] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.679: corrupted inode contents [ 325.001835][ T6968] loop1: detected capacity change from 0 to 1024 [ 325.134297][ T6954] EXT4-fs error (device loop4): ext4_dirty_inode:6039: inode #2: comm syz.4.679: mark_inode_dirty error [ 325.200724][ T6954] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.679: corrupted inode contents [ 325.355570][ T6967] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.679: corrupted inode contents [ 325.452706][ T6967] EXT4-fs error (device loop4): ext4_dirty_inode:6039: inode #2: comm syz.4.679: mark_inode_dirty error [ 325.545182][ T6967] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.679: corrupted inode contents [ 325.590771][ T6967] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.679: mark_inode_dirty error [ 325.664003][ T6967] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.679: corrupted inode contents [ 325.668588][ T6968] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 325.765318][ T6967] EXT4-fs error (device loop4): ext4_dirty_inode:6039: inode #2: comm syz.4.679: mark_inode_dirty error [ 325.815882][ T6969] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.679: corrupted inode contents [ 326.080962][ T6975] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 327.476562][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.482916][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.689938][ T7022] netlink: 'syz.5.699': attribute type 12 has an invalid length. [ 330.955449][ T4275] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 332.386116][ T4275] usb 4-1: config 0 has no interfaces? [ 333.163316][ T4275] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 333.174288][ T4275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.183314][ T4275] usb 4-1: Product: syz [ 333.187508][ T4275] usb 4-1: Manufacturer: syz [ 333.198073][ T4275] usb 4-1: SerialNumber: syz [ 333.212798][ T4275] usb 4-1: config 0 descriptor?? [ 336.489059][ T7065] netlink: 116 bytes leftover after parsing attributes in process `syz.2.711'. [ 336.663947][ T7069] loop2: detected capacity change from 0 to 512 [ 336.959342][ T7069] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 337.754601][ T7069] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 337.807496][ T7069] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.975576][ T7069] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #2: comm syz.2.712: corrupted inode contents [ 337.996635][ T4275] usb 4-1: USB disconnect, device number 7 [ 338.012385][ T7069] EXT4-fs error (device loop2): ext4_dirty_inode:6039: inode #2: comm syz.2.712: mark_inode_dirty error [ 338.049157][ T7069] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #2: comm syz.2.712: corrupted inode contents [ 338.095376][ T7085] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #2: comm syz.2.712: corrupted inode contents [ 338.136873][ T7085] EXT4-fs error (device loop2): ext4_dirty_inode:6039: inode #2: comm syz.2.712: mark_inode_dirty error [ 338.167312][ T7085] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #2: comm syz.2.712: corrupted inode contents [ 338.204506][ T7085] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.712: mark_inode_dirty error [ 338.234827][ T7085] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #2: comm syz.2.712: corrupted inode contents [ 338.270958][ T7085] EXT4-fs error (device loop2): ext4_dirty_inode:6039: inode #2: comm syz.2.712: mark_inode_dirty error [ 338.468836][ T7069] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #2: comm syz.2.712: corrupted inode contents [ 339.380480][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.718'. [ 339.498184][ T7097] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 339.547703][ T7097] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 339.581270][ T7102] loop1: detected capacity change from 0 to 2048 [ 339.721904][ T7102] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,bsddf,,errors=continue. Quota mode: none. [ 339.837602][ T7102] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.080159][ T7102] tipc: New replicast peer: 10.1.1.2 [ 340.097198][ T7102] tipc: Enabled bearer , priority 10 [ 340.103867][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 340.503629][ T7] usb 3-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 340.512777][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.617768][ T7116] loop1: detected capacity change from 0 to 32768 [ 340.682768][ T7116] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.723 (7116) [ 340.700754][ T7] usb 3-1: config 0 descriptor?? [ 340.792569][ T7116] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 340.803687][ T7116] BTRFS info (device loop1): using free space tree [ 340.810498][ T7116] BTRFS info (device loop1): has skinny extents [ 340.824405][ T7114] netlink: 116 bytes leftover after parsing attributes in process `syz.3.724'. [ 341.915899][ T7] hid-led 0003:04D8:F372.0005: unknown main item tag 0x0 [ 341.923614][ T7] hid-led 0003:04D8:F372.0005: unknown main item tag 0x0 [ 341.943201][ T13] tipc: Node number set to 3388104982 [ 341.956481][ T7] hid-led 0003:04D8:F372.0005: hidraw0: USB HID v1.01 Device [HID 04d8:f372] on usb-dummy_hcd.2-1/input0 [ 342.347170][ T7116] BTRFS info (device loop1): enabling ssd optimizations [ 342.648228][ T7] hid-led 0003:04D8:F372.0005: Greynut Luxafor initialized [ 342.657895][ T7152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.731'. [ 342.756267][ T7] usb 3-1: USB disconnect, device number 3 [ 342.835497][ T4214] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 342.877539][ T4214] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 342.946473][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.731'. [ 342.974607][ T4214] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 343.053319][ T4214] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 343.116531][ T4214] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 344.285232][ T4214] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 344.307638][ T4214] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 344.324661][ T4214] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 344.334187][ T4214] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 344.343734][ T4214] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 344.353072][ T4214] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 344.362472][ T4214] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 344.371635][ T4214] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 344.394428][ T4214] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 344.510275][ T4214] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 346.488603][ T4275] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 346.504688][ T4275] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 346.520874][ T4275] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 346.692875][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.736'. [ 346.868248][ T7186] loop3: detected capacity change from 0 to 512 [ 348.839420][ T7186] EXT4-fs (loop3): Test dummy encryption mode enabled [ 348.878984][ T7186] EXT4-fs error (device loop3): __ext4_iget:4893: inode #11: block 1: comm syz.3.740: invalid block [ 348.899239][ T7186] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.740: couldn't read orphan inode 11 (err -117) [ 348.963160][ T7212] siw: device registration error -23 [ 348.969983][ T7186] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 349.538062][ T7219] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 351.846197][ T7239] loop2: detected capacity change from 0 to 32768 [ 352.107999][ T7239] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.750 (7239) [ 352.170704][ T7239] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 352.179590][ T7239] BTRFS info (device loop2): using free space tree [ 352.186410][ T7239] BTRFS info (device loop2): has skinny extents [ 353.038435][ T7259] loop1: detected capacity change from 0 to 512 [ 353.379014][ T7239] BTRFS info (device loop2): enabling ssd optimizations [ 354.103764][ T7259] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #16: comm syz.1.751: corrupted inode contents [ 354.277169][ T7259] EXT4-fs error (device loop1): ext4_dirty_inode:6039: inode #16: comm syz.1.751: mark_inode_dirty error [ 354.467581][ T7259] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #16: comm syz.1.751: corrupted inode contents [ 354.518864][ T7259] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.751: mark_inode_dirty error [ 354.619672][ T7259] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #16: comm syz.1.751: corrupted inode contents [ 354.722704][ T7259] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 354.742923][ T7259] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #16: comm syz.1.751: corrupted inode contents [ 354.813966][ T7259] EXT4-fs error (device loop1): ext4_truncate:4273: inode #16: comm syz.1.751: mark_inode_dirty error [ 354.895324][ T7259] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 354.949078][ T7259] EXT4-fs (loop1): 1 truncate cleaned up [ 354.966273][ T7259] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 354.993713][ T7259] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.010635][ T7283] loop4: detected capacity change from 0 to 4096 [ 355.160812][ T7283] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 355.295896][ T6837] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 355.336094][ T7283] fs-verity: sha256 using implementation "sha256-avx2" [ 355.419664][ T7259] EXT4-fs error (device loop1): ext4_get_group_desc:277: comm syz.1.751: block_group >= groups_count - block_group = 1048576, groups_count = 1 [ 355.445814][ T7259] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4439: inode #33554445: comm syz.1.751: unable to read itable block [ 355.560394][ T6837] usb 4-1: Using ep0 maxpacket: 32 [ 355.594620][ C0] vcan0: j1939_tp_rxtimer: 0xffff888062402000: rx timeout, send abort [ 355.692339][ T6837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.714387][ T6837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.730050][ T6837] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 355.762194][ T6837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.784195][ T6837] usb 4-1: config 0 descriptor?? [ 355.840658][ T6837] hub 4-1:0.0: USB hub found [ 356.081226][ T6837] hub 4-1:0.0: 1 port detected [ 356.088387][ T7293] loop5: detected capacity change from 0 to 32768 [ 356.121475][ T7293] XFS: attr2 mount option is deprecated. [ 356.147171][ C0] vcan0: j1939_tp_rxtimer: 0xffff888062402000: abort rx timeout. Force session deactivation [ 356.236024][ T4274] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.398400][ T4274] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.406679][ T7293] XFS (loop5): Mounting V5 Filesystem [ 357.128813][ T6839] hub 4-1:0.0: activate --> -90 [ 357.309290][ T4274] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.339556][ T7293] XFS (loop5): Ending clean mount [ 357.363342][ T7293] XFS (loop5): Quotacheck needed: Please wait. [ 357.400930][ T7286] udc-core: couldn't find an available UDC or it's busy [ 357.408047][ T7286] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 357.438881][ T4274] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.514331][ T7293] XFS (loop5): Quotacheck: Done. [ 357.996285][ T7] usb 4-1: USB disconnect, device number 8 [ 359.004901][ T6837] usb 4-1-port1: config error [ 359.471501][ T4274] tipc: Disabling bearer [ 359.489491][ T4274] tipc: Left network mode [ 359.649717][ T7323] loop4: detected capacity change from 0 to 512 [ 359.708871][ T7323] EXT4-fs (loop4): Test dummy encryption mode enabled [ 359.739164][ T7323] EXT4-fs error (device loop4): __ext4_iget:4893: inode #11: block 1: comm syz.4.767: invalid block [ 359.819173][ T4274] bond1: (slave ip6erspan0): Releasing active interface [ 359.843415][ T7323] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.767: couldn't read orphan inode 11 (err -117) [ 359.886933][ T7323] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 359.939211][ T7318] lo speed is unknown, defaulting to 1000 [ 360.088398][ T4603] XFS (loop5): Unmounting Filesystem [ 360.624020][ T7337] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 360.664816][ C0] ================================================================== [ 360.673557][ C0] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 360.681173][ C0] Read of size 2 at addr ffff8880606e7c2a by task syz.4.767/7335 [ 360.688984][ C0] [ 360.691319][ C0] CPU: 0 PID: 7335 Comm: syz.4.767 Not tainted 5.15.181-syzkaller #0 [ 360.699404][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 360.709649][ C0] Call Trace: [ 360.712933][ C0] [ 360.715774][ C0] dump_stack_lvl+0x168/0x230 [ 360.720502][ C0] ? show_regs_print_info+0x20/0x20 [ 360.725789][ C0] ? _printk+0xcc/0x110 [ 360.729951][ C0] ? rose_timer_expiry+0x470/0x490 [ 360.735186][ C0] ? load_image+0x3b0/0x3b0 [ 360.739805][ C0] print_address_description+0x60/0x2d0 [ 360.745561][ C0] ? rose_timer_expiry+0x470/0x490 [ 360.750674][ C0] kasan_report+0xdf/0x130 [ 360.755094][ C0] ? rose_timer_expiry+0x470/0x490 [ 360.760670][ C0] rose_timer_expiry+0x470/0x490 [ 360.765716][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 360.770860][ C0] call_timer_fn+0x16c/0x530 [ 360.775458][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 360.780580][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 360.786563][ C0] ? __run_timers+0x7c0/0x7c0 [ 360.791263][ C0] ? rcu_is_watching+0x11/0xa0 [ 360.796044][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 360.801418][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 360.806615][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 360.811647][ C0] __run_timers+0x525/0x7c0 [ 360.816193][ C0] ? detach_timer+0x2b0/0x2b0 [ 360.821234][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 360.827320][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 360.832166][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 360.837480][ C0] run_timer_softirq+0x63/0xf0 [ 360.842429][ C0] handle_softirqs+0x328/0x820 [ 360.847383][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 360.852238][ C0] ? do_softirq+0x200/0x200 [ 360.856746][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 360.861964][ C0] __irq_exit_rcu+0x12f/0x220 [ 360.866642][ C0] ? irq_exit_rcu+0x20/0x20 [ 360.871295][ C0] irq_exit_rcu+0x5/0x20 [ 360.875709][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 360.881349][ C0] [ 360.884296][ C0] [ 360.887353][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 360.893354][ C0] RIP: 0010:preempt_count_add+0x77/0x190 [ 360.899180][ C0] Code: 38 84 c0 0f 85 e6 00 00 00 83 3d 73 a4 b8 14 00 75 11 65 8b 05 d2 14 b1 7e 0f b6 c0 3d f5 00 00 00 73 58 65 8b 05 c1 14 b1 7e <25> ff ff ff 7f 39 f8 75 42 48 8b 5c 24 18 48 89 df e8 93 b4 0b 00 [ 360.919187][ C0] RSP: 0018:ffffc90002e4f580 EFLAGS: 00000297 [ 360.925370][ C0] RAX: 0000000080000001 RBX: ffffffff88808241 RCX: ffffffff9609ff03 [ 360.933461][ C0] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000001 [ 360.941545][ C0] RBP: ffffc90002e4f740 R08: dffffc0000000000 R09: ffffc90002e4f680 [ 360.949519][ C0] R10: fffff520005c9ed5 R11: 1ffff920005c9ed0 R12: 0000000000000000 [ 360.957526][ C0] R13: 0000000000000000 R14: ffff888078b4b530 R15: dffffc0000000000 [ 360.966322][ C0] ? __unix_dgram_recvmsg+0x1e1/0xd50 [ 360.971832][ C0] ? __unix_dgram_recvmsg+0x1e1/0xd50 [ 360.977237][ C0] __mutex_lock_common+0x1cc/0x2390 [ 360.982443][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 360.988354][ C0] ? _raw_spin_unlock+0x40/0x40 [ 360.993304][ C0] ? mark_lock+0x94/0x320 [ 360.997809][ C0] ? mutex_lock_io_nested+0x60/0x60 [ 361.003094][ C0] ? __lock_acquire+0x13ad/0x7c60 [ 361.008242][ C0] ? skb_copy_datagram_iter+0x1f0/0x1f0 [ 361.014064][ C0] mutex_lock_nested+0x17/0x20 [ 361.018828][ C0] __unix_dgram_recvmsg+0x1e1/0xd50 [ 361.024133][ C0] ? unix_unhash+0x10/0x10 [ 361.028551][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 361.033924][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 361.040273][ C0] ? mark_lock+0x94/0x320 [ 361.044892][ C0] ? unix_dgram_recvmsg+0xb2/0xd0 [ 361.049936][ C0] ? unix_dgram_sendmsg+0x1890/0x1890 [ 361.055494][ C0] ____sys_recvmsg+0x291/0x580 [ 361.060550][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 361.066050][ C0] ? import_iovec+0x6f/0xa0 [ 361.070583][ C0] ___sys_recvmsg+0x1af/0x4f0 [ 361.075455][ C0] ? __sys_recvmsg+0x250/0x250 [ 361.080335][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 361.085397][ C0] ? __might_fault+0xb3/0x110 [ 361.090187][ C0] do_recvmmsg+0x344/0x7a0 [ 361.094731][ C0] ? __sys_recvmmsg+0x280/0x280 [ 361.099680][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 361.104818][ C0] __x64_sys_recvmmsg+0x18d/0x240 [ 361.109848][ C0] ? do_recvmmsg+0x7a0/0x7a0 [ 361.115521][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 361.120752][ C0] do_syscall_64+0x4c/0xa0 [ 361.125297][ C0] ? clear_bhb_loop+0x15/0x70 [ 361.129981][ C0] ? clear_bhb_loop+0x15/0x70 [ 361.134744][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 361.140661][ C0] RIP: 0033:0x7fb258f4b969 [ 361.145100][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.164723][ C0] RSP: 002b:00007fb256d92038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 361.173239][ C0] RAX: ffffffffffffffda RBX: 00007fb259173080 RCX: 00007fb258f4b969 [ 361.181300][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 361.189357][ C0] RBP: 00007fb258fcdab1 R08: 0000000000000000 R09: 0000000000000000 [ 361.197423][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 361.205622][ C0] R13: 0000000000000000 R14: 00007fb259173080 R15: 00007ffcc6409d88 [ 361.213782][ C0] [ 361.216826][ C0] [ 361.219241][ C0] Allocated by task 7141: [ 361.223655][ C0] __kasan_kmalloc+0xb5/0xf0 [ 361.228360][ C0] pskb_expand_head+0x127/0x10f0 [ 361.233411][ C0] bpf_clone_redirect+0x10f/0x390 [ 361.238460][ C0] 0xffffffffa00489c2 [ 361.242637][ C0] bpf_test_run+0x317/0x870 [ 361.247241][ C0] bpf_prog_test_run_skb+0x9cc/0x1180 [ 361.252608][ C0] bpf_prog_test_run+0x31e/0x390 [ 361.257568][ C0] __sys_bpf+0x535/0x670 [ 361.261898][ C0] __x64_sys_bpf+0x78/0x90 [ 361.266400][ C0] do_syscall_64+0x4c/0xa0 [ 361.271102][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 361.277000][ C0] [ 361.279346][ C0] Last potentially related work creation: [ 361.285226][ C0] kasan_save_stack+0x35/0x60 [ 361.289906][ C0] kasan_record_aux_stack+0xb8/0x100 [ 361.295186][ C0] insert_work+0x54/0x3d0 [ 361.299541][ C0] __queue_work+0x9c5/0xd50 [ 361.304125][ C0] call_timer_fn+0x16c/0x530 [ 361.308713][ C0] __run_timers+0x550/0x7c0 [ 361.313305][ C0] run_timer_softirq+0x63/0xf0 [ 361.318241][ C0] handle_softirqs+0x328/0x820 [ 361.323175][ C0] __irq_exit_rcu+0x12f/0x220 [ 361.327847][ C0] irq_exit_rcu+0x5/0x20 [ 361.332178][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 361.338261][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 361.344433][ C0] [ 361.346982][ C0] The buggy address belongs to the object at ffff8880606e7c00 [ 361.346982][ C0] which belongs to the cache kmalloc-512 of size 512 [ 361.361183][ C0] The buggy address is located 42 bytes inside of [ 361.361183][ C0] 512-byte region [ffff8880606e7c00, ffff8880606e7e00) [ 361.374384][ C0] The buggy address belongs to the page: [ 361.380052][ C0] page:ffffea000181b900 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880606e6800 pfn:0x606e4 [ 361.391636][ C0] head:ffffea000181b900 order:2 compound_mapcount:0 compound_pincount:0 [ 361.400087][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 361.408436][ C0] raw: 00fff00000010200 ffffea00017ec808 ffffea00018bf408 ffff888016841c80 [ 361.417198][ C0] raw: ffff8880606e6800 0000000000100006 00000001ffffffff 0000000000000000 [ 361.426197][ C0] page dumped because: kasan: bad access detected [ 361.432806][ C0] page_owner tracks the page as allocated [ 361.438687][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4169, ts 70127890683, free_ts 21545220729 [ 361.457899][ C0] get_page_from_freelist+0x1b77/0x1c60 [ 361.463480][ C0] __alloc_pages+0x1e1/0x470 [ 361.468378][ C0] new_slab+0xc0/0x4b0 [ 361.472459][ C0] ___slab_alloc+0x81e/0xdf0 [ 361.477047][ C0] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 361.482953][ C0] __alloc_skb+0x22c/0x750 [ 361.487577][ C0] netlink_ack+0x3a6/0xb60 [ 361.492001][ C0] netlink_rcv_skb+0x265/0x430 [ 361.496871][ C0] netlink_unicast+0x77c/0x920 [ 361.501715][ C0] netlink_sendmsg+0x8ab/0xbc0 [ 361.506490][ C0] __sys_sendto+0x423/0x580 [ 361.510991][ C0] __x64_sys_sendto+0xda/0xf0 [ 361.515736][ C0] do_syscall_64+0x4c/0xa0 [ 361.520150][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 361.526045][ C0] page last free stack trace: [ 361.530717][ C0] free_unref_page_prepare+0x637/0x6c0 [ 361.536173][ C0] free_unref_page+0x94/0x280 [ 361.540954][ C0] free_contig_range+0x96/0xf0 [ 361.545741][ C0] destroy_args+0xef/0x8b0 [ 361.550168][ C0] debug_vm_pgtable+0x318/0x370 [ 361.555020][ C0] do_one_initcall+0x1ee/0x680 [ 361.559829][ C0] do_initcall_level+0x137/0x1f0 [ 361.564779][ C0] do_initcalls+0x4b/0x90 [ 361.569205][ C0] kernel_init_freeable+0x3ce/0x560 [ 361.574405][ C0] kernel_init+0x19/0x1b0 [ 361.578734][ C0] ret_from_fork+0x1f/0x30 [ 361.583348][ C0] [ 361.585670][ C0] Memory state around the buggy address: [ 361.591316][ C0] ffff8880606e7b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 361.599395][ C0] ffff8880606e7b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 361.607585][ C0] >ffff8880606e7c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 361.615822][ C0] ^ [ 361.621210][ C0] ffff8880606e7c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 361.629294][ C0] ffff8880606e7d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 361.637358][ C0] ================================================================== [ 361.645574][ C0] Disabling lock debugging due to kernel taint [ 361.651894][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 361.659319][ C0] CPU: 0 PID: 7335 Comm: syz.4.767 Tainted: G B 5.15.181-syzkaller #0 [ 361.669320][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 361.679495][ C0] Call Trace: [ 361.682788][ C0] [ 361.685636][ C0] dump_stack_lvl+0x168/0x230 [ 361.690323][ C0] ? show_regs_print_info+0x20/0x20 [ 361.695544][ C0] ? load_image+0x3b0/0x3b0 [ 361.700050][ C0] panic+0x2c9/0x7f0 [ 361.703945][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 361.708463][ C0] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 361.714354][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 361.720331][ C0] ? _raw_spin_unlock+0x40/0x40 [ 361.725193][ C0] ? print_memory_metadata+0x314/0x400 [ 361.730789][ C0] ? rose_timer_expiry+0x470/0x490 [ 361.735934][ C0] check_panic_on_warn+0x80/0xa0 [ 361.741028][ C0] ? rose_timer_expiry+0x470/0x490 [ 361.746695][ C0] end_report+0x6d/0xf0 [ 361.750858][ C0] kasan_report+0x102/0x130 [ 361.755461][ C0] ? rose_timer_expiry+0x470/0x490 [ 361.760573][ C0] rose_timer_expiry+0x470/0x490 [ 361.765513][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 361.770629][ C0] call_timer_fn+0x16c/0x530 [ 361.775480][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 361.780508][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 361.786571][ C0] ? __run_timers+0x7c0/0x7c0 [ 361.791250][ C0] ? rcu_is_watching+0x11/0xa0 [ 361.796032][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 361.801244][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 361.806461][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 361.811525][ C0] __run_timers+0x525/0x7c0 [ 361.816040][ C0] ? detach_timer+0x2b0/0x2b0 [ 361.820799][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 361.826956][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 361.831801][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 361.837142][ C0] run_timer_softirq+0x63/0xf0 [ 361.841917][ C0] handle_softirqs+0x328/0x820 [ 361.846888][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 361.851982][ C0] ? do_softirq+0x200/0x200 [ 361.856873][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 361.862182][ C0] __irq_exit_rcu+0x12f/0x220 [ 361.866869][ C0] ? irq_exit_rcu+0x20/0x20 [ 361.871387][ C0] irq_exit_rcu+0x5/0x20 [ 361.875717][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 361.881524][ C0] [ 361.884595][ C0] [ 361.887615][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 361.893776][ C0] RIP: 0010:preempt_count_add+0x77/0x190 [ 361.899416][ C0] Code: 38 84 c0 0f 85 e6 00 00 00 83 3d 73 a4 b8 14 00 75 11 65 8b 05 d2 14 b1 7e 0f b6 c0 3d f5 00 00 00 73 58 65 8b 05 c1 14 b1 7e <25> ff ff ff 7f 39 f8 75 42 48 8b 5c 24 18 48 89 df e8 93 b4 0b 00 [ 361.919406][ C0] RSP: 0018:ffffc90002e4f580 EFLAGS: 00000297 [ 361.925599][ C0] RAX: 0000000080000001 RBX: ffffffff88808241 RCX: ffffffff9609ff03 [ 361.936909][ C0] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000001 [ 361.944987][ C0] RBP: ffffc90002e4f740 R08: dffffc0000000000 R09: ffffc90002e4f680 [ 361.953455][ C0] R10: fffff520005c9ed5 R11: 1ffff920005c9ed0 R12: 0000000000000000 [ 361.961480][ C0] R13: 0000000000000000 R14: ffff888078b4b530 R15: dffffc0000000000 [ 361.969731][ C0] ? __unix_dgram_recvmsg+0x1e1/0xd50 [ 361.975643][ C0] ? __unix_dgram_recvmsg+0x1e1/0xd50 [ 361.981440][ C0] __mutex_lock_common+0x1cc/0x2390 [ 361.987406][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 361.993938][ C0] ? _raw_spin_unlock+0x40/0x40 [ 361.998853][ C0] ? mark_lock+0x94/0x320 [ 362.003685][ C0] ? mutex_lock_io_nested+0x60/0x60 [ 362.009241][ C0] ? __lock_acquire+0x13ad/0x7c60 [ 362.014385][ C0] ? skb_copy_datagram_iter+0x1f0/0x1f0 [ 362.020054][ C0] mutex_lock_nested+0x17/0x20 [ 362.024925][ C0] __unix_dgram_recvmsg+0x1e1/0xd50 [ 362.030271][ C0] ? unix_unhash+0x10/0x10 [ 362.034837][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 362.040418][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 362.047002][ C0] ? mark_lock+0x94/0x320 [ 362.051353][ C0] ? unix_dgram_recvmsg+0xb2/0xd0 [ 362.056611][ C0] ? unix_dgram_sendmsg+0x1890/0x1890 [ 362.062132][ C0] ____sys_recvmsg+0x291/0x580 [ 362.067100][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 362.072131][ C0] ? import_iovec+0x6f/0xa0 [ 362.076870][ C0] ___sys_recvmsg+0x1af/0x4f0 [ 362.081600][ C0] ? __sys_recvmsg+0x250/0x250 [ 362.086399][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 362.091428][ C0] ? __might_fault+0xb3/0x110 [ 362.096105][ C0] do_recvmmsg+0x344/0x7a0 [ 362.100525][ C0] ? __sys_recvmmsg+0x280/0x280 [ 362.105573][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 362.110710][ C0] __x64_sys_recvmmsg+0x18d/0x240 [ 362.115744][ C0] ? do_recvmmsg+0x7a0/0x7a0 [ 362.120358][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 362.125560][ C0] do_syscall_64+0x4c/0xa0 [ 362.130003][ C0] ? clear_bhb_loop+0x15/0x70 [ 362.134776][ C0] ? clear_bhb_loop+0x15/0x70 [ 362.139680][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 362.145701][ C0] RIP: 0033:0x7fb258f4b969 [ 362.150144][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.170178][ C0] RSP: 002b:00007fb256d92038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 362.178978][ C0] RAX: ffffffffffffffda RBX: 00007fb259173080 RCX: 00007fb258f4b969 [ 362.186982][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 362.195130][ C0] RBP: 00007fb258fcdab1 R08: 0000000000000000 R09: 0000000000000000 [ 362.203322][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 362.211678][ C0] R13: 0000000000000000 R14: 00007fb259173080 R15: 00007ffcc6409d88 [ 362.219701][ C0] [ 362.223058][ C0] Kernel Offset: disabled [ 362.227391][ C0] Rebooting in 86400 seconds..