last executing test programs: 15.471781425s ago: executing program 5 (id=2048): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={"9515bec3", 0x0, 0x5, 0x2, 0x0, 0x0, "d039e63bc15156c6b7f961d138c32f", "f9ffff00", "c65f7f71", '\x00', ["ebb6cc7e0c266af0bb55ee6a", "a499ee873b08c30521555dcc", "be029b8a4c4648acf9b1b77e", "f53f0535c27fa10b0f88f177"]}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_open_dev$media(&(0x7f0000000580), 0xb5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) setsockopt(0xffffffffffffffff, 0xff, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_x_nat_t_type={0x1}]}, 0x80}, 0x1, 0x7}, 0x0) 15.043477453s ago: executing program 5 (id=2052): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x0, &(0x7f00000002c0)="1a", 0x1) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x5}, 0x8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="71756f74612c696f636861727365743d63703433372c6e6f71756f74612c6572726f72733d636f6e74696e75652c646973636172643d307830303030303030303030303030000001006572726f72733d636f6e74696e75652c71756f74612c646973636172642c67727071756f74612c00"], 0x1, 0x60ed, &(0x7f00000048c0)="$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") chdir(&(0x7f000000aac0)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x0) link(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='./bus\x00') 13.655777834s ago: executing program 2 (id=2067): syz_mount_image$fuse(0x0, &(0x7f0000003880)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() capset(&(0x7f0000000180)={0x19980330, r0}, &(0x7f00000002c0)={0x5, 0xf3, 0x0, 0x0, 0x10001, 0x17c}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x2d, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000000), 0x10) modify_ldt$write(0x1, &(0x7f0000001700), 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}, 0x0, 0x0, 0x29, 0x0, "5788e13500000000000000009fd112f01458bb12b1fbbd3278a9363a55f4bfeb336ad3755aa5ff544cd30fc26697330e687ae3f6d207741a63389fe79f0300000000000000575b0283e4e1018b8e5960"}, 0xd8) listen(r2, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$vga_arbiter(r3, &(0x7f00000010c0)=ANY=[@ANYBLOB="7e0e3196bf000000a00afbe1819bc636527d25b487b14aaf82a618ae874d811353b9f502042aafedec24512462df0b2e504315c803cf6a29422fbfab12eac0d1e98fa02b6e6dd49e25857078b781eb9d0cd7491aab7797ab3f35ab16434a286c1183c03ffe5e6cddd052545b17ee02c207999980eaf78bcd19784ed73f09f7503cfcca89c9161ac2830ba3d7ccd2d360cf9cff28d234f81f29583c980c847d0615509cf036169f9daca57a61ae54f08f4ad6b133b82182678d8b17eba706ec14adec5134d6cb102458804a74a5f6a330e8ce932f6a07996c17f35e1095ad3cd12fe6"], 0x8) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @multicast1}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) 13.0051439s ago: executing program 4 (id=2069): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@target={'target ', {'PCI:', '0', ':', '1e', ':', '3', '.', '1b'}}, 0x15) 12.239063356s ago: executing program 2 (id=2070): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3200014, &(0x7f00000010c0)=ANY=[], 0x1, 0x60b, &(0x7f0000002080)="$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") ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480), 0x400, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r4, r3, 0x5}, 0x10) r5 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000240), &(0x7f0000000180)=@tcp=r5}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1812314, &(0x7f0000000080)={[{@user_xattr}, {@data_err_ignore}, {@norecovery}, {@resuid}, {@prjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@usrjquota}, {@resgid={'resgid', 0x3d, 0xee01}}, {@nodiscard}]}, 0xff, 0x468, &(0x7f0000000780)="$eJzs289vFFUcAPDvzG4BQdmKiIIgVTRp/NHSgsrBxGg08aCJiR7wWNtCkIUaWhMhjVZj8GhIvBuPJv4FnjwZ9WTiFY8mhoQoMQG9uGZ2Z0q77JbWbtlN9/NJBt6befve+3bmzb6dtxtA3xrK/kki7o6IyxFRaWSXFxhq/Hfj2vzk39fmJ5Oo1d78I6mXu35tfrKWK163I69zOI1IP03yRmJgabWz5y+cnqhWp8/l+dG5M++Nzp6/8PSpMxMnp09Onx0/duzokbHnnh1/pkWvf7u01jiz+K7v+3Bm/95X3770+uTxS+/8+E3W3z0HGsezONZa5+0MZYH/2fjbNB97vNONddm/tZtxJuVu94bVKkVEOR+cl6MSpbh58irxyidd7RywobJ79tb2hxdqwCaWRLd7AHRH8Uafff4ttjs09egJV19sfADK4r6Rb40j5UjzMgMb2P5QRBxf+OfLbIum5xC1Fs8NAADW67ts/vNUq/lfGnuWlNuZrw0NRsS9EbErIu6LiN0RcX9EvewDEfHgGtsfasrfOv9Mr/yvwFYpm/89n69tLZ//FbO/GCzluXvq8Q8kJ05Vpw/nf5PhGNia5cdaVV5U8fIvn7drf+n8L9uy9ou5YF7JlXLjAd22Ys/UxNxEpyalVz+O2FduFX+yuBKQRMTeiNi3tqp3FolTT3y9v12h28e/gg6sM9W+KiqZX4im+AvJyuuTo9uiOn14tLgqbvXTzxffaNf+uuLvgOz8b19+/TeVqPyVLF2vnV088MJq27j462dtP1OWV3/9L8qu/y3JW/U13S35vg8m5ubOjUVsSV6r55ftH7/52iJflM/iHz7Uevzvyl+Txf9QRGQX8YGIeDgiDubn7pGIeDQiDq0Q/w8vPfZuu2O9cP6nWt7/Fq//weXnf+2J0unvv23X/uruf0frqeF8T/3+dxvtu1PcRpuuZgAAANjE0vp345N0ZDGdpiMjje/w747taXVmdu7JEzPvn51qfId+MAbS4klXZcnz0LFkIa+xkR/PnxUXx4/kz42/KN1Vz49MzlSnuhw79LsdbcZ/5vdSt3sHbDi/14L+1Tz+0y71A7jzvP9D/zL+oX8Z/9C/Wo3/j5ry1gJgM6pVut0DoHvM/6F/Gf/Qv4x/6Evr+V3/RiXKK/x6X6JXEpH2RDd6JnGwh0ZTuQOju8s3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA75LwAA///foPki") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 12.02364813s ago: executing program 3 (id=2071): bpf$MAP_CREATE(0x0, &(0x7f0000000840), 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcffff124e000000000000003700feff0400000095"], &(0x7f00000005c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 11.83435773s ago: executing program 4 (id=2072): connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, 0x10) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x76, &(0x7f00000077c0)={r1}, 0x8) 11.76760829s ago: executing program 4 (id=2073): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff2b}, 0x90) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) unshare(0xc040400) socket$packet(0x11, 0x0, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(r1, &(0x7f0000000100), 0x14) syz_emit_ethernet(0x56, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@dev}, {@private}]}]}}}}}}}, 0x0) migrate_pages(0x0, 0x0, &(0x7f0000000000)=0xffffffff7fffffff, &(0x7f00000000c0)=0x3) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[], 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) semop(0x0, &(0x7f0000000000)=[{0x3, 0x8, 0x1800}, {0x0, 0x1, 0x800}], 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1701009e08cf71000500feff"], &(0x7f0000000000)='GPL\x00', 0x8, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9}, 0x80) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'nr0\x00', 0x4}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000840}, 0x48004) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x3f}, 0xe) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/32, 0x5}}], 0x196, 0x0, 0x0) 10.906711914s ago: executing program 5 (id=2075): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d80000001400810d4e81f782db44b9040a11080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000640032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 10.835133049s ago: executing program 3 (id=2076): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000200)="d9", 0x1}, {&(0x7f0000000080)="975bb8d2ab59263f8a1f02ee2fbe1459a57695206a054134b272467b0ab6721430e7", 0x22}, {&(0x7f0000000400)="478fca950283a978e246c0dc14", 0xd}], 0x3}}], 0x1, 0x0) 10.662875547s ago: executing program 3 (id=2077): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xf0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) 10.623518996s ago: executing program 4 (id=2078): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bind$alg(0xffffffffffffffff, 0x0, 0x0) clock_getres(0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0020007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_remove_blocks\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000001200), 0x12) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 10.271134291s ago: executing program 0 (id=2080): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x21c4080, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x11, 0x22f, &(0x7f0000000880)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x1f0, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x158, 0x2a8, 0x2a8, 0x158, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x250) r6 = semget$private(0x0, 0x1, 0x0) semtimedop(r6, &(0x7f0000000040)=[{0x0, 0x1}, {}], 0x2, 0x0) semtimedop(r6, &(0x7f0000000080)=[{0x0, 0x7f}], 0x1, 0x0) semtimedop(r6, &(0x7f0000000040)=[{}, {}], 0x2, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$IPC_RMID(r6, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000006a006bb20000000000000000000000fbffffff0008"], 0x20}}, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000940), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x800) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x0, "d30f388c52647612d91de4353d68b0fa00"}, 0x3c) 10.12177693s ago: executing program 2 (id=2081): r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x18, 0x84, 0x5, "10"}], 0x18}}], 0x2, 0x0) 10.072294617s ago: executing program 1 (id=2082): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r5, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x83, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x0, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000240)={0x28, 0x0, r1, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000522000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r6, 0x1000000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r1}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x54, 0x1, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 10.00242219s ago: executing program 4 (id=2083): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r0) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) getgroups(0x1, &(0x7f0000000040)=[r3]) setgroups(0x1, &(0x7f0000000100)=[r0]) setresuid(0x0, r2, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000001980)='./file0\x00', 0x1010800, &(0x7f00000019c0)=ANY=[], 0x3, 0x1507, &(0x7f0000000440)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.stat\x00', 0x275a, 0x0) utimensat(r4, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 9.783863101s ago: executing program 5 (id=2084): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x1000001000102) ioctl$NBD_DO_IT(r0, 0xab03) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) close_range(r4, 0xffffffffffffffff, 0x0) 6.684538435s ago: executing program 0 (id=2085): connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, 0x10) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x76, &(0x7f00000077c0)={r1}, 0x8) 6.234753487s ago: executing program 2 (id=2086): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xa, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="180800000000000000000000000000008500000027000000850000007d00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0, @ANYRESOCT, @ANYBLOB=',gro', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r0}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mkdir(0x0, 0x64) timer_create(0x7, &(0x7f0000000180)={0x0, 0x1e, 0x1, @thr={&(0x7f0000000300)="c4d58c192aa333a2cadcf019aea760ed52dc068c4c43b0c90510e40a882e20c4360a0c9e05f990459dbaeb6ed8b32ec24daea4c9a69cc9f590357a7c13567203edfb34268ea36932236f8283ac70ea8f31873ae1", &(0x7f00000000c0)="3b6dfeddc1b8b673b9a1816b6cf1b4d8b88a99a9ed7d67c91b3c0ae9888a455799cc1dafd2874dc13279c0cc4779e7982c47670aed92f1f1772ee0bafdb979ba2a7f97fc6edf54139f3df6c912b64bacc6004eb21f2398cebc3573a0475d070cac473062bab927e56c5fd01a05832e"}}, &(0x7f00000003c0)) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r4 = openat(r0, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, &(0x7f0000000440)=ANY=[@ANYBLOB="3d50a40c10bf2a457afe88940d3b3a9411f4b5", @ANYRESHEX=0x0, @ANYBLOB="2c047aa79fb7b7301a00"]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) write$input_event(r5, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) 6.158351038s ago: executing program 1 (id=2087): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r3, &(0x7f0000000000)='./file0\x00') ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[]) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x8004551a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open(0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x6, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r5, 0x6, 0x6, 0x0, &(0x7f0000000040)) dup(r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x3d, 0x0, 0x1}, {0x2}, {0x6}]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) 6.115261342s ago: executing program 0 (id=2088): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x30, r1, 0xa29, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x7}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000080)={0x0, 0x26, &(0x7f0000000240)={&(0x7f0000000100)={0x24, r3, 0x9, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x0) 4.061772726s ago: executing program 2 (id=2089): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x5, &(0x7f0000000000)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x0, 0xe, 0x0, 0x4, 0xfffffffffffffffe}], {0x95, 0x0, 0x0, 0x1a03d3}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1000070}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file1\x00', 0x2b4c6, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)={0x0, 0x0}) setpgid(0x0, r4) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x4) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x60002, 0x0) chroot(&(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r5, 0x80080400) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_int(r6, 0x10d, 0xbc, &(0x7f0000000000), &(0x7f0000000080)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 3.804371481s ago: executing program 4 (id=2090): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfe1b) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000500)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90k\x96\x05\r\x84\x87\x1c\b\x8c`\xea)A\x90m\xb6&\xd0\x9d\xb8\x7f\xc6W\x81\xb7\xf9\xbd\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff\xd6\xf2\xfe\xf3]\x15&\x97]mC\v\f\n\x1f\xe2\t\x14\x84\xe0\xa4\xda\xe7\xe8\xd5ue\xf4\xf8\xde\xf3\x00q?[\xba=\x1a\xb2\xdf]\xc0\xeb\x16\xe4\x7f\x17o\x1b\xa4M\xafa\xc7tR?3hH\x18\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd\xe3\xb5\xd6\xed1\x10\x8d\x87N\x9c8\xfd\xd0t\xe6?\x9c\x95`\xfc_\'N\x90\xb7\xb5\x0f\xeb\x17{\x1fu\'\xb4=\xbcO@AP1\x9d\x1b\xba%\xca!\x0eRsGT\xdf\xd8;\x9ea\xd0\x01\x0eq~\x00\xfbh\xf7\xc8\x97\\\xc0\\\x17', 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x335}) tkill(0x0, 0x7) ftruncate(r1, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x6, 0x2012, r1, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000040)={{&(0x7f000030e000/0x2000)=nil, 0x2000}}) 3.543901328s ago: executing program 3 (id=2091): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000040)={0x0, r5}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x1000806, &(0x7f0000000440)=ANY=[@ANYBLOB="696f636861727365743d63703835372c696f636861727365743d69736f383828d489a1352c6769643d", @ANYRESHEX=0xee01, @ANYBLOB=',iocharset=cp869,fmask=00000000000000000000003,dmask=00000000000000000000027,errors=continue,fmask=00000000000000000000011,\x00'], 0x9, 0x1510, &(0x7f0000001780)="$eJzs3AuYjtX6MPD7Xms9Y0xDb5MchrXW/fAmh2WSJJKQQ5IkSZJTQtIkSUJyyikJSchxkhyGkBwmJo3z+Xw+JFuSJCE5s75r2vbn27vd9v++3f7s65r7d13rmnXP+973ez/vPe/pmWvmx45DqjWoXrkeEcG/Bf/6pQcAxAJAfwC4GQACACidUDoh8/LsEnv8ezfC/lxPpt7oDtiNxPPP2nj+WRvPP2vj+WdtPP+sjeeftfH8szaeP2NZ2aZp+W7hlXUXn//Pyvj1P2vj+WdtPP+sjeeftfH8szLi+WdxPP+sjeeftfH8GcvK/pTzyNmuFvsvOJ/9H1h/u6tudB/XWcH/U96N+8ljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZaVnPPXKAD42/5G98UYY4wxxhhjjLE/j892oztgjDHGGGOMMcbYfx4CKAkKAoiBbBAL2SEOboJ4yAE54WaIwC2QALdCLrgNckMeyAv5IBHyQwHQYMACQQgFoRBE4XYoDHdAESgKxaA4OCgBSXAnlIS7oBTcDaXhHigD90JZKAf3QXm4HyrAA1ARKkFleBCqQFWoBtXhIagBD0NNeARqwaNQGx6DOvA41IUnoB48CfXhKWgAT0NDeAYaQWNoAk2h2T/Pl/86/w3oCm9CN+guM++BXvAW9IY+0Bf6QX94GwbAOzAQ3oVBMBiGwHswFN6HYfABDIcRMBI+hFEwGsbAWBgH4yEFPoIJ8DFMhE9gEkyGKTAVUmEaTIdPYQbMhFnwGcyGz2EOzIV5MB/S4AtYAAshHb6ERfAVZMBiWAJLYRkshxWwElbBalgDa2EdrIcNsBE2websmT1ug+2wA3bCLtgNe2Av7IOvYT988z/Jhy2w9Wr+2X/I74SAgAIFKlQYgzEYi7EYh3EYj/GYE3NiBCOYgAmYC3NhbsyNeTEvJmIiFsACaNAgIWFBLIhRjGJhLIxFsAgWw2Lo0GESJmFJvAtLYSksjaWxDJbBslgOy2F5LI8VsAJWxIpY+d65AFgFq2E1fAgfwoexJtbEWlgLa2NtrIN1sC7WxXpYD+tjfWyADbAhNsRG2AibYBNshs2wOTbHFtgCW2ErbI2tsQ22wWRMxrbYFtthO2yP7bEDdsCO2BE7YWfsjG/gG/gmvondsYroib2wF/bG3tgX+2E/fBsH4Dv4Dr6Lg3AwDsH38D18H4fhGRyOI3AkjsQKYjSOwbFIYjymYApOwAk4ESfiJJyMk3EqpuI0nI7TcQbOxJn4Gc7Gz/FznItzcT6mYRouwIWYjum4CM9iBi7GJbgUl+FyXIYrcRWuxDXibw/NjbgRN+Nm3IpbcTtux524E3fjbtyLe3EQ7sf9eAAP4EE8iIfwEB7Gw3gEj+BRPIrH8Bgex+N4Ak/iKTyJp/E0nsGzeA7P4QU8BQCvJX5ff2fR1YNAZFJCiRgRI2JFrIgTcSJexIucIqeIiIhIEAkil8glcovcIq/IKxJFoiggCggjjCARioKioIiKqCgsCgNAD1FMFBNOOJEkkkRJUVKUEqVEaXGPKCPuFWVFOdHSlRflRQXRylUUlURlUVlUEVVFNVFdVBc1RA1RU9QUtUQtUVvUFnXE46Ku6Il98UmROZkGYjA2FEOwkWgsmoim4n18VjQXw7CFaClaiefFCByObURzlyxeEm3FGGwnXhFj8VXRQYzHjuJ10Ul0Fl3EG6KraOG6ie5iEvYUvcRU7C36iL6in5iBVUXmxKqJd8UgMVgMEe+J+fi+GCY+EMPFCDFSfChGidFijBgrxonxIkV8JCaIj8VE8YmYJCaLKWKqSBXTxHTxqZghZopZ4jMxW3wu5oi5Yp6YL9LEF2KBWCjSxZdikfhKZIjFYolYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie1ih9gpdondYo/YK/aJr8V+8Y04IP4iDopvxSHxnTgsvhdHxA/iqPhRHBM/ieOiuzghTopT4hdxWvwqzoiz4pw4Ly6Ii+KSuCyuCC9AohRSSiUDGSOzyViZXcbJm2S8zCFzyptlRN4iE+StMpe8TeaWeWRemU8myvyygNTSSCtJhrKgLCSj8nZZWN4hi8iispgsLp0sIZPknbKkvEuWknfL0vIeWUbeK8vKcvI+WV7eLyvIB2RFWUlWlg/KKrKqrCary4dkDfmwrCkfkbXko7K2fEzWkY/LuvIJWU8+KevLp2QD+bRsKJ+RjWRj2UQ2lc3ks7K5fE62kC1lK/m8bC1fkG3kizJZviTbypdlO/mKbC9flR3ka7KjfF12kp1lF3lZXpFedpPdZQ/ZU/aSb8neso/sK/vJ/vJtOUC+IwfKd+UgOVgOke/JofJ9OUx+IIfLEXKk/FCOkqPlGDlWjpPjZYr8SE6QH8uJ8hM5SU6WU+RUmSqnyb5XK83KzFfwL/M//if5A3+79Y1yk9wst8itcpvcLnfInXKX3CX3yD1yn9wn98v98oA8IA/Kg/KQPCQPy8PyiDwij8qj8pg8Jo/L4/KEPCnPy1/kafmrPCPPyrPyvLwgL8hLV+8DUKiEkkqpQMWobCpWZVdx6iYVr3KonOpmFVG3qAR1q8qlblO5VR6VV+VTiSq/KqC0MsoqUqEqqAqpqLpdFVZ3qCKqqCqmiiunSqgkdecf5QdXn+Gum/8H/S2dcjW/mWqmmqvmqoVqoVqpVqq1aq3aqDYqWSWrtqqtaqfaqfaqveqgOqiOqqPqpDqpLqqL6qq6qm4xmRV6qF7qLdVb9VF9VT/VX72tBqgBaqAaqAapQWqIGqKGqqFqmBqmhqvhaqQaqUapUWqMGqPGqXEqRaWoCWqCmqgmqklqkpqipqhUlaoyX1gzzVKz1Gw1W81Rc9Q8NU+lqTS1QC1Q6SpdLVKLVIZarBarpWqpWq6Wq5VqpVqtVqu1aq1ar9arDLVJbVJb1Ba1TW1TO9QOtUvtUnvUHrVP7VP71X51QB1QB9VBdUgdUofVYXVEHVFH1VF1TB1Tx9VxdUKdUKfUKXVanVZn1Bl1Tp1TF9QFdUldUlfUlcy3fYEIRKACFcQEMUFsEBvEBXFBfBAf5AxyBpEgEiQECUGu4LYgd5AnyBvkCxKD/EGBQAcmsAEFYVAwKBREg9uDwsEdQZGgaFAsKB64oESQFNwZlAzuCkoFdwelg3uCMsG9QdmgXHBfUD64P6gQPBBUDCoFlYMHgypB1aBaUD14KKgRPBzUDB4JagWPBrWDx4I6weNB3eCJoF7wZFA/eCpoEDwdNAyeCRoFjYMmQdOg2Z9a3/szeZ5z3XR3nQ166l76Ld1b99F9dT/dX7+tB+h39ED9rh6kB+sh+j09VL+vh+kP9HA9Qo/UH+pRerQeo8fqcXq8TtEf6Qn6Yz1Rf6In6cl6ip6qU/U0PV1/qmfomXqW/kzP1p/rOXqunqfn6zT9hV6gF+p0/aVepL/SGXqxXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoXfqXXq33qP36n36a71ff6MP6L/og/pbfUh/pw/r7/UR/YM+qn/Ux/RP+rj+WZ/QJ/Up/Ys+rX/VZ/RZfU6f1xf0RX1JX9ZXtM98c5/58m6UUSbGxJhYE2viTJyJN/Emp8lpIiZiEkyCyWVymdwmt8lr8ppEk2gKmAImExkyBU1BEzVRU9gUNkVMEVPMFDPOOJNkkkxJU9KUMqVMaVPalDFlrj5awNxv7jcPmAdMJVPJPGgeNFVNVVPdVDc1TA1T09Q0tUwtU9vUNnVMHVPX1DX1TD1T39Q3DUwD09A0NI1MI9PENDHNTDPT3DQ3LUwL08q0Mq1Na9PGtDHJJtm0NW1NO9POtDftTQfTwXQ0HU0n08l0MV1MV9PVdDPdTA/Tw/QyvUxv09v0NX1Nf9PfDDADzEAz0Awyg8wQM8QMNUPNMDPMDDcjzEjzoRllRpsxZqwZZ8abFJNiJpgJZqKZaCaZSWaKmWJSTaqZbqabGWaGmWVmmdlmtplj5ph5Zp5JM2lmgVlg0k26WWQWmQyTYZaYJWaZWWZWmBVmlVll1pg1Zp1ZZzaYDWaT2WS2mC1mm9lmdpgdZpfZZfaYPWaf2Wf2m/3mgDlgDpqD5pA5ZA6bw+aIOWKOmqPmmDlmjpvj5oQ5YU6ZU+a0OW3OVARzzpwzF8xFc8lcNleMN7E2u42zN9l4m8PmtDfbf4zz2nw20ea3Bay2uW2ev4uNtbaILWqL2eLW2RI2yd75u7isLWfvs+Xt/baCfcBW/F1cwz5sa9pHbC37qK1uH/q7uLZ9zNaxT9u69hlbzza29W1T28A+bRvaZ2wj29g2sU1ta/uCbWNftMn2JdvWvvy7eIFdaFfZ1XaNXWv32L32nD1vj9of7QV70Xaz3W1/+7YdYN+xA+27dpAd/Lt4pP3QjrKj7Rg71o6z438XT7FTbaqdZqfbT+0MO/N3cZr9ws626XaOnWvn2fm/xZk9pdsv7SL7lc2wi+0Su9Qus8vtCrvyf/e61K63G+xGu8vutlvsVrvNbrc77M7f4szj2Ge/tvvtN/aI/cEetN/aQ/aYPWy//y3OPL5j9id73P5sT9iT9pT9xZ62v9oz9uxvx5957L/Yy/aK9RYISZAkRQHFUDaKpewURzdRPOWgnHQzRegWSqBbKRfdRrkpD+WlfJRI+akAaTJkiSikglSIonQ7FaY7qAgVpWJUnByVoCS6k0rSXVSK7qbSdA+VoXupLJWj+6g83U8V6AGqSJWoMj1IVagqVaPq9BDVoIepJj1CtehRqk2PUR16nOrSE1SPnqT69BQ1oKepIT1DjagxNaGm1Iyepeb0HLWgltSKnqfW9AK1oRcpmV6itvQytaNXqD29Sh3oNepIr1Mn6kxd6A3qSm9SN+pOPagn9aK3qDf1ob7Uj/rT2zSA3qGB9C4NosE0hN6jofQ+DaMPaDiNoJH0IY2i0TSGxtI4Gk8p9BFNoI9pIn1Ck2gyTaGplErTaDp9SjNoJs2iz2g2fU5zaC7No/mURl/QAlpI6fQlLaKvKIMW0xJaSstoOa2glbSKVtMaWkvraD1toI20iTbTFtpKSNtpB+2kXQd30x7aS/voa9pP39AB+gsdpG/pEH1Hh+l7OkI/0FH6kY7RT3ScfqYTdJJO0S90mn6lM3SWztF5ukAX6RJdpivkCUIMRShDFQZhTJgtjA2zh3HhTWF8mCPMGd4cRsJbwoTw1jBXeFuYO8wT5g3zhYlh/rBAqEMT2pDCMCwYFgqj4e1h4fCOsEhYNCwWFg9dWCJMCu8MS4Z3haXCu8PS4T1hmfDesGxYLnz60fLh/WGF8IGwYlgprBw+GFYJq4bVwurhQ2GN8OGwZvhIWCt8NCwVPhbWCR8P64ZPhPXCJ8P64VNhg/DpsGH4TNgobBw2CZuGzcJnw+bhc2GLsGXYKnw+bB2+ELYJXwyTw5fCtuHL1728R9gz7BW+Fb4Vev+InBedH02LfhFdEF0YTY9+GV0U/SqaEV0cXRJdGl0WXR5dEV0ZXRVdHV0TXRtdF10f3RDdGPW+ejZw6ISTTrnAxbhsLtZld3HuJhfvcric7mYXcbe4BHery+Vuc7ldHpfX5XOJLr8r4LQzzjpyoSvoCrmou90Vdne4Iq6oK+aKO+dKuCTX1DVzzVxz95xr4Vq6Vu5597x7wb3gXnQvupdcW/eya+dece3dq66De8295l53nVxn18W94bq6N1031931cD1cL9fL9Xa9XV/X1/V3/d0AN8ANdAPdIHfZDXFD3FA31A1zw9xwN9yNdCPdKDfKjXFj3Dg3zqW4FDfBTXAT3UQ3KXaSm+KmuFSX6qa76W6Gm+FmuVludpHZbo6b4+a5eS7NpbkFboFLd+lukVvkMlyGW+KWuGVumVvhVrhVbpVb49a4dW6d2+A2uE1uk9vitrhtbpvb4Xa4XW6X2+P2uH1un9vvvPfdD5zz7qA75L5zh9337oj7wR11P7pj7id33P3sTriT7pT7xZ12v7oz7qw75867C+6iu+QuuyvOu5TIR5EJkY8jEyOfRCZFJkemRKZGUiPTItMjn0ZmRGZGZkU+i8yOfB6ZE5kbmReZH0mLfBFZEFkYSY98GVkU+SqSEVkcWRJZGlkWWR7xPv+W0Bf0hXzU3+4L+zt8EV/UF/PFvfMlfJK/05f0d/lS/m5f2t/jy/h7fVlfzt/nn/GNfGPfxDf1zfyzvrl/zrfwLX0r/7xv7V/wbfyLPtm/5Nv6l307/4pv71/1HfxrvqN/3XfynX0X/4bv6t/03Xx338P39L38W7637+Mv+n6+v3/bD/Dv+IH+XT/ID/ZD/Ht+qH/fD/Mf+OF+hB/pP/Sj/Gg/xo/14/x4n+I/8hP8x36i/8RP8pP9FD/Vp/ppfrr/1M/wM/0s/5mf7T/3c/xcP8/P92n+C7/AL/Tp/ku/yH/lM/xiv8Qv9RC73K/wK/0qv9qv8Wv9Or/eb/Ab/Sa/2W/xW/02v93v8Dv9Lr/b7/F7/T7/td/vv/EH/F/8Qf+tP+S/84f99/6I/8Ef9T/6Y/4nf9z/7E/4k/6UR3/a/+rP+LP+nD/vL/iL/pK/7K/w36wxxhhjjP2PyOtc3vOffE9cXfDb784BcmzNd/gfa67L/dd9H5HYOgIAL3Xv+OTfVpUqPXr0uHrdDAlBobkAELmWHwPX4sXQCl6AZGgJJf9pf31E5wv0r+v/TiwAxME/1r/rD+qPnn2d+kF0LkCRQtdyssO1+Fr9Un9QP0/z69TP/m0KQIv/IycersXX6ifBc/AyJP/dNRljjDHGGGOMsb/qI+5rf73Pt5mfzxPVtZxscC2+3udzxhhjjDHGGGOM3Xivdu7y4rPJyS3b8+YGbDrm+OsU/lv6+YNNzH9HG3/eBq+evfpv6ec/val09dH+f5N1w56SGGOMMcYYY/8h19703+hOGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxrOv/xz8hu9HHyBhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjN1o/ysAAP//7VwZKQ==") rename(&(0x7f0000001c80)='./file0\x00', &(0x7f0000001d80)='./file0\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000900020073797a3200000000050004000000000005000100060000001400078008000640000000000800134000000000050005000a00000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) 3.539465433s ago: executing program 1 (id=2092): r0 = io_uring_setup(0x29ea, &(0x7f0000000480)) syz_io_uring_setup(0x4919, &(0x7f0000000000)={0x0, 0x8724, 0x1cbe, 0x0, 0x0, 0x0, r0}, 0x0, 0x0) 3.490966023s ago: executing program 5 (id=2093): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008880) r2 = syz_io_uring_setup(0x19d3, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0xff39) 2.477406009s ago: executing program 2 (id=2094): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001740)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmsg$qrtr(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000010c0)=""/221, 0xdd}], 0x1}, 0x38, 0x0) sendmsg$unix(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000100)="02", 0x1}], 0x1}, 0x0) mlockall(0x3) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000bd9000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) 2.458207217s ago: executing program 0 (id=2095): prctl$PR_MCE_KILL(0x10, 0xf0ff1f00000000, 0x0) 2.414045334s ago: executing program 1 (id=2096): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x24, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}]}]}, 0x24}}, 0x0) 2.143951587s ago: executing program 0 (id=2097): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x1a00040, &(0x7f0000000100)={[{@utf8}, {@rodir}, {@uni_xlate}, {@uni_xlate}, {@uni_xlate}, {@uni_xlateno}, {@fat=@flush}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@rodir}, {@utf8no}]}, 0x3, 0x350, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, 0xffffffffffffffff, r2) 2.101600938s ago: executing program 5 (id=2098): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}]}, 0x3, 0x43e, &(0x7f0000000340)="$eJzs27tvHEUYAPBv9+yEvLAJ4ZEHYAgIi4cdOwFS0IBAogAJiSaUxnaikEuMYiORKIKAUChRJHpEicRfQAUNAiokWuhRpAilIVAd2rtd38N3ju2cvYH7/aTNzezOZea72bmb3fEGMLDGsn+SiN0R8VtEjDSy7QXGGi83b1ya/fvGpdkkarW3/kzq5f66cWm2KFq8b1eeGU8j0k+TONil3sULF8/MVKvz5/P85NLZ9yYXL1x89vTZmVPzp+bPTR8/fuzo1AvPTz/Xlzjvydp64MOFQ/tfe/vqG7Mnrr7z0zdJEX9HHH0yttrBJ2q1PldXrj0t6WSoxIawLpWIyLpruD7+R6ISzc4biVc/KbVxwKaq5XocvlwD/seSKLsFQDmKH/rs+rfYtm72Ub7rLzUugLK4b+Zb48hQpHmZ4Y7r234ai4gTl//5Mttic+5DAAC0+S6b/zzTbf6Xxv0t5e7O14ZG87WUvRFxb0Tsi4j7IuplH4iIB9dZf+ciycr5T3ptQ4GtUTb/ezFf22qf/xWzvxit5Lk99fiHk5Onq/NH8s9kPIa3Z/mpVer4/pVfP+91rHX+l21Z/cVcMG/HtaHt7e+Zm1mauZ2YW13/OOLAULf4k+WVgCQi9kfEgQ3Wcfqprw/1Onbr+FfRh3Wm2lcRTzb6/3J0xF9IVl+fnLwrqvNHJouzYqWff7nyZq/6byv+Psj6f2fX8385/tGkdb12cf11XPn9s57XNBMbOv+bO7blrx/MLC2dn4rYlrzeaHTr/unme4t8UT6Lf/xw9/G/N5qfxMGIyE7ihyLi4Yh4JO+7RyPisYg4vEr8P778+Lu9jt0J/T/X0f+j7UU6+r+Z2Bade7onKmd++Lb9f2wm1/b9d6yeGs/3rOX7by3t2tjZDAAAAP89aUTsjiSdWE6n6cRE42/498XOtLqwuPT0yYX3z801nhEYjeG0uNM10nI/dCq/rC/y0x35o/l94y8qO+r5idmF6lzZwcOA29Vj/Gf+qJTdOmDTeV4LBpfxD4PL+IfBZfzD4Ooy/neU0Q5g63X7/f+ohHYAW69j/Fv2gwHi+h8Gl/EPg6t1/CcltgPYUos74tYPyUtIrEhEekc0oz+JZJNHwe6yA1x/ouxvJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP74NwAA//+7Iehw") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x1, 0x4eb, &(0x7f0000000540)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$tmpfs(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x103ba52, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}]}}) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f0000005080)={0x2020}, 0x204d) 658.339905ms ago: executing program 1 (id=2099): r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x18, 0x84, 0x5, "10"}], 0x18}}], 0x2, 0x0) 519.681248ms ago: executing program 3 (id=2100): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb0}}, 0xb8}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000027c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@empty, 0x0, 0x2b}, 0x0, @in6=@dev}}, 0xe8) 273.893811ms ago: executing program 1 (id=2101): r0 = syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x3000cd1, &(0x7f0000000440)=ANY=[], 0x1, 0x1506, &(0x7f0000002d40)="$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") r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wg1\x00'}) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x95100c, &(0x7f0000000a40)=ANY=[@ANYRES16=r2, @ANYRESHEX=0x0, @ANYRES16, @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRESDEC=r0, @ANYRES64=r2, @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYRES8=0x0], 0x2, 0x6e6, &(0x7f0000000f40)="$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") r3 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000041c0), 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f00000002c0)=0xc) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r7, 0x0, 0xa, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$P9_RSTATu(0xffffffffffffffff, &(0x7f000001f180)=ANY=[], 0x10d) 214.856617ms ago: executing program 3 (id=2102): r0 = timerfd_create(0x8, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='rxrpc_rx_rwind_change\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) mincore(&(0x7f0000996000/0x2000)=nil, 0x2000, &(0x7f0000000100)=""/111) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munlockall() mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000000100)={0x77359400}) clock_gettime(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x3938700}}, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x77, @vifc_lcl_addr=@empty, @broadcast}, 0x10) socket$qrtr(0x2a, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x22041, 0x0) 0s ago: executing program 0 (id=2103): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xf0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) kernel console output (not intermixed with test programs): cachefs (loop0): done starting filesystem [ 309.719569][ T9289] bcachefs (loop5): alloc_read... done [ 309.729138][ T9289] bcachefs (loop5): stripes_read... done [ 309.736921][ T9289] bcachefs (loop5): snapshots_read... done [ 309.743529][ T9285] fuse: Bad value for 'fd' [ 309.752347][ T9289] bcachefs (loop5): journal_replay... done [ 309.758430][ T9289] bcachefs (loop5): resume_logged_ops... done [ 309.767055][ T9289] bcachefs (loop5): going read-write [ 309.795854][ T9289] bcachefs (loop5): done starting filesystem [ 309.802217][ T5213] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 309.913497][ T5090] bcachefs (loop5): shutting down [ 309.928088][ T5090] bcachefs (loop5): going read-only [ 309.928357][ T7766] bcachefs (loop0): shutting down [ 309.934047][ T5090] bcachefs (loop5): finished waiting for writes to stop [ 309.946624][ T7766] bcachefs (loop0): going read-only [ 309.952253][ T7766] bcachefs (loop0): finished waiting for writes to stop [ 309.959384][ T5090] bcachefs (loop5): flushing journal and stopping allocators, journal seq 11 [ 309.969438][ T7766] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 309.989459][ T5090] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 12 [ 309.992089][ T7766] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 12 [ 310.012606][ T5090] bcachefs (loop5): shutdown complete, journal seq 13 [ 310.019563][ T5213] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 310.031541][ T5090] bcachefs (loop5): marking filesystem clean [ 310.039076][ T7766] bcachefs (loop0): shutdown complete, journal seq 13 [ 310.051677][ T5213] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 310.064286][ T7766] bcachefs (loop0): marking filesystem clean [ 310.078070][ T5213] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 310.087774][ T5213] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 310.096263][ T5213] usb 5-1: Manufacturer: syz [ 310.155721][ T5213] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 310.207851][ T5090] bcachefs (loop5): shutdown complete [ 310.212559][ T7766] bcachefs (loop0): shutdown complete [ 310.326038][ T5213] usb 5-1: USB disconnect, device number 5 [ 310.492994][ T9371] ieee802154 phy0 wpan0: encryption failed: -90 [ 310.959036][ T9380] netlink: 'syz.2.1326': attribute type 11 has an invalid length. [ 310.981190][ T9381] netlink: 'syz.1.1327': attribute type 21 has an invalid length. [ 311.171836][ T9386] loop4: detected capacity change from 0 to 164 [ 311.720871][ T9386] trusted_key: encrypted_key: keylen parameter is missing [ 311.792931][ T9390] tipc: Started in network mode [ 311.821998][ T9390] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 311.851606][ T9386] syz.4.1328 uses obsolete (PF_INET,SOCK_PACKET) [ 312.016009][ T9390] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 312.102887][ T9390] tipc: Enabled bearer , priority 10 [ 312.451880][ T9405] ieee802154 phy0 wpan0: encryption failed: -90 [ 312.538248][ T9408] loop0: detected capacity change from 0 to 1024 [ 312.744231][ T5108] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 312.754839][ T5108] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 312.763569][ T5108] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 312.772964][ T5108] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 312.781341][ T5108] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 312.790952][ T5108] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 312.938922][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1343'. [ 312.948358][ T9420] netlink: 'syz.5.1343': attribute type 11 has an invalid length. [ 312.971881][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 312.972099][ T9420] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.988392][ T9420] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.998173][ T9420] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.007919][ T9420] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.017416][ T9420] vxlan0: entered promiscuous mode [ 313.023923][ T9422] netlink: 'syz.0.1344': attribute type 11 has an invalid length. [ 313.168633][ T9429] tipc: Started in network mode [ 313.178817][ T9429] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 313.194097][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 313.212309][ T9429] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 313.212702][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 313.234210][ T5157] tipc: Node number set to 1 [ 313.235085][ T9429] tipc: Enabled bearer , priority 10 [ 313.258968][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 313.277374][ T25] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 313.311164][ T25] usb 5-1: Manufacturer: syz [ 313.312972][ T9393] loop2: detected capacity change from 0 to 32768 [ 313.331532][ T25] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 313.486950][ T9393] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 313.501007][ T9393] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 313.516054][ T9414] chnl_net:caif_netlink_parms(): no params data found [ 313.548197][ T25] usb 5-1: USB disconnect, device number 6 [ 313.579337][ T9393] bcachefs (loop2): alloc_read... done [ 313.585434][ T9393] bcachefs (loop2): stripes_read... done [ 313.591246][ T9393] bcachefs (loop2): snapshots_read... done [ 313.600567][ T9393] bcachefs (loop2): journal_replay... done [ 313.610705][ T9393] bcachefs (loop2): resume_logged_ops... done [ 313.617253][ T9393] bcachefs (loop2): going read-write [ 313.642454][ T9393] bcachefs (loop2): done starting filesystem [ 313.774009][ T5625] bcachefs (loop2): shutting down [ 313.801764][ T5625] bcachefs (loop2): going read-only [ 313.816942][ T9456] loop0: detected capacity change from 0 to 1024 [ 313.827397][ T5625] bcachefs (loop2): finished waiting for writes to stop [ 313.852796][ T5625] bcachefs (loop2): flushing journal and stopping allocators, journal seq 11 [ 313.886026][ T5625] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 12 [ 313.902801][ T5625] bcachefs (loop2): shutdown complete, journal seq 13 [ 313.910496][ T5625] bcachefs (loop2): marking filesystem clean [ 313.942318][ T9461] loop3: detected capacity change from 0 to 2048 [ 313.963572][ T9414] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.970793][ T9461] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 313.972922][ T9414] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.005168][ T9414] bridge_slave_0: entered allmulticast mode [ 314.018389][ T5625] bcachefs (loop2): shutdown complete [ 314.023259][ T9414] bridge_slave_0: entered promiscuous mode [ 314.033759][ T9414] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.040916][ T9414] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.048690][ T9414] bridge_slave_1: entered allmulticast mode [ 314.056723][ T9414] bridge_slave_1: entered promiscuous mode [ 314.177147][ T9414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.238287][ T9414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.252063][ T5158] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 314.363092][ T8] tipc: Node number set to 1 [ 314.403550][ T9414] team0: Port device team_slave_0 added [ 314.433199][ T9414] team0: Port device team_slave_1 added [ 314.444478][ T5158] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.455686][ T9470] ALSA: seq fatal error: cannot create timer (-19) [ 314.499121][ T5158] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.528081][ T5158] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 314.551731][ T5158] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.577689][ T5158] usb 1-1: config 0 descriptor?? [ 314.586295][ T9414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.636100][ T9414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.719498][ T9414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.746483][ T9414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.759939][ T9414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.862051][ T5108] Bluetooth: hci1: command tx timeout [ 314.881710][ T9414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.040751][ T9464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.055535][ T9464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.947485][ T5158] prodikeys 0003:041E:2801.0006: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input0 [ 316.088581][ T5217] usb 1-1: USB disconnect, device number 6 [ 316.118283][ T9414] hsr_slave_0: entered promiscuous mode [ 316.162084][ T9414] hsr_slave_1: entered promiscuous mode [ 316.208484][ T9414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.221793][ T9414] Cannot create hsr debugfs directory [ 316.433815][ T5158] IPVS: starting estimator thread 0... [ 316.551937][ T9505] IPVS: using max 16 ests per chain, 38400 per kthread [ 316.699099][ T9489] loop4: detected capacity change from 0 to 32768 [ 316.717963][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.724567][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.943874][ T5108] Bluetooth: hci1: command tx timeout [ 318.086372][ T9489] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 318.139749][ T9489] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 318.678363][ T9489] bcachefs (loop4): alloc_read... done [ 318.836935][ T9489] bcachefs (loop4): stripes_read... done [ 319.042242][ T5108] Bluetooth: hci1: command tx timeout [ 319.081362][ T9489] bcachefs (loop4): snapshots_read... done [ 319.121109][ T9489] bcachefs (loop4): journal_replay... done [ 319.127607][ T9489] bcachefs (loop4): resume_logged_ops... done [ 319.157601][ T9489] bcachefs (loop4): going read-write [ 319.189873][ T9489] bcachefs (loop4): bch2_copygc_start(): error creating copygc thread EINTR [ 319.214509][ T9489] bcachefs (loop4): error starting copygc thread [ 319.233648][ T9489] bcachefs (loop4): going read-only [ 319.240318][ T9489] bcachefs (loop4): finished waiting for writes to stop [ 319.267764][ T9489] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10 [ 319.292087][ T9489] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10 [ 319.319749][ T9414] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 319.344292][ T9489] bcachefs (loop4): shutdown complete, journal seq 11 [ 319.351459][ T9552] loop0: detected capacity change from 0 to 4096 [ 319.372140][ T9489] bcachefs (loop4): marking filesystem clean [ 319.389929][ T9552] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 319.396218][ T9414] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 319.412993][ T9489] bcachefs (loop4): bch2_fs_start(): error starting filesystem EINTR [ 319.429172][ T9489] bcachefs (loop4): shutting down [ 319.436253][ T9414] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 319.464431][ T9414] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 319.523132][ T9489] bcachefs (loop4): shutdown complete [ 319.577678][ T9552] ntfs3: loop0: failed to convert "c46c" to koi8-r [ 319.641812][ T5213] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 319.831253][ T9414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.859241][ T5213] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.899896][ T5213] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.917004][ T9414] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.935690][ T5213] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 319.960855][ T5651] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.968082][ T5651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.976665][ T5213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.989526][ T5213] usb 4-1: config 0 descriptor?? [ 320.025314][ T5651] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.032550][ T5651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.040330][ T9572] loop2: detected capacity change from 0 to 1024 [ 320.078388][ T9572] EXT4-fs: Ignoring removed oldalloc option [ 320.100548][ T9572] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 320.168947][ T9572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.111888][ T5108] Bluetooth: hci1: command tx timeout [ 321.223985][ T9558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.233588][ T9558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.320991][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.390664][ T9489] bcachefs: bch2_mount() error: EINTR [ 321.486727][ T5213] prodikeys 0003:041E:2801.0007: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input0 [ 321.649986][ T9414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.698938][ T9592] MTD: Couldn't look up './file0': -15 [ 321.714071][ T25] usb 4-1: USB disconnect, device number 5 [ 321.888357][ T9414] veth0_vlan: entered promiscuous mode [ 321.965255][ T9414] veth1_vlan: entered promiscuous mode [ 322.061027][ T9414] veth0_macvtap: entered promiscuous mode [ 322.090721][ T9414] veth1_macvtap: entered promiscuous mode [ 322.163750][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.174686][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.203886][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.203896][ T9587] loop5: detected capacity change from 0 to 32768 [ 322.224620][ T9587] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1398 (9587) [ 322.254675][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.265668][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.276978][ T9587] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 322.282474][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.302254][ T9587] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 322.326639][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.329761][ T9587] BTRFS info (device loop5): using free-space-tree [ 322.356243][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.391169][ T9414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.464932][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.514465][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.548466][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.582036][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.594976][ T9627] loop2: detected capacity change from 0 to 1024 [ 322.602562][ T9627] EXT4-fs: Ignoring removed oldalloc option [ 322.606804][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.631315][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.642169][ T9627] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 322.653336][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.673555][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.711053][ T9414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.721605][ T9627] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.727472][ T9414] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.742688][ T9414] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.751394][ T9414] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.783455][ T29] audit: type=1800 audit(1720971071.138:172): pid=9587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1398" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 322.801804][ T9414] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.885469][ T9636] MTD: Couldn't look up './file0': -15 [ 322.960330][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.983192][ T1271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.994943][ T9634] loop3: detected capacity change from 0 to 4096 [ 323.014670][ T1271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.029345][ T9634] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 323.066181][ T5090] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 323.138877][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.183465][ T9640] loop2: detected capacity change from 0 to 512 [ 323.244742][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.311240][ T9640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 323.401517][ T9640] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.750905][ T9647] program syz.4.1417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 324.764724][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 325.156808][ T9665] loop2: detected capacity change from 0 to 128 [ 325.219727][ T9665] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 325.294252][ T5108] Bluetooth: hci6: unexpected event for opcode 0x0c26 [ 325.532333][ T9682] loop5: detected capacity change from 0 to 1024 [ 325.541199][ T9682] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 325.580135][ T9682] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 325.620454][ T9682] EXT4-fs (loop5): invalid journal inode [ 325.627389][ T9682] EXT4-fs (loop5): can't get journal size [ 325.647472][ T9682] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 325.698193][ T9686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1430'. [ 325.717739][ T9686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1430'. [ 326.249870][ T9693] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #16: comm syz.5.1429: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1796(4), depth 0(0) [ 326.847083][ T5090] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.855547][ T9699] loop2: detected capacity change from 0 to 1024 [ 326.871343][ T9699] EXT4-fs: Ignoring removed oldalloc option [ 326.988761][ T9699] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 327.329847][ T9699] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.479457][ T9667] loop1: detected capacity change from 0 to 32768 [ 327.519465][ T9710] Bluetooth: MGMT ver 1.22 [ 327.557280][ T9707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.580215][ T9707] bond0: (slave rose0): Enslaving as an active interface with an up link [ 327.741401][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.896860][ T9723] loop0: detected capacity change from 0 to 1024 [ 328.072015][ T393] hfsplus: b-tree write err: -5, ino 4 [ 328.374124][ T9738] loop3: detected capacity change from 0 to 16 [ 328.476516][ T9738] erofs: (device loop3): mounted with root inode @ nid 36. [ 328.794533][ T9738] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 329.209533][ T9738] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 329.293827][ T9738] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 330.240905][ T9777] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 330.451379][ T9782] loop2: detected capacity change from 0 to 512 [ 330.507431][ T9782] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 330.515065][ T9785] loop5: detected capacity change from 0 to 1024 [ 330.583859][ T9782] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz.2.1456: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 330.676228][ T9782] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.1456: couldn't read orphan inode 15 (err -117) [ 330.688342][ T5157] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 330.698827][ T66] hfsplus: b-tree write err: -5, ino 4 [ 330.712216][ T9782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.736663][ T9782] ext2 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.890041][ T5157] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.918093][ T5157] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.943792][ T5157] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 330.973264][ T9798] vlan2: entered promiscuous mode [ 330.979150][ T9798] batman_adv: batadv0: Adding interface: vlan2 [ 330.987395][ T5157] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 331.001108][ T9798] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.023560][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.049008][ T9798] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 331.057620][ T5157] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.096967][ T5157] usb 4-1: config 0 descriptor?? [ 331.271831][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1465'. [ 331.525912][ T9814] loop5: detected capacity change from 0 to 256 [ 331.653033][ T9814] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 331.836057][ T9819] loop2: detected capacity change from 0 to 1764 [ 331.984567][ T9814] /dev/loop5: Can't open blockdev [ 332.136526][ T9788] loop0: detected capacity change from 0 to 32768 [ 332.422095][ T5157] usbhid 4-1:0.0: can't add hid device: -71 [ 332.432144][ T5157] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 332.456335][ T5157] usb 4-1: USB disconnect, device number 6 [ 332.671237][ T9837] nbd: must specify an index to disconnect [ 333.188505][ T9855] loop3: detected capacity change from 0 to 512 [ 333.197114][ T9855] EXT4-fs: Ignoring removed orlov option [ 333.234370][ T9855] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6040e01c, mo2=0002] [ 333.350579][ T9855] System zones: 1-12 [ 333.515619][ T9855] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.1481: casefold flag without casefold feature [ 333.649672][ T9855] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1481: couldn't read orphan inode 15 (err -117) [ 333.694516][ T9855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.782008][ T5162] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 334.921964][ T5162] usb 5-1: Using ep0 maxpacket: 8 [ 334.962022][ T5162] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 335.021790][ T5162] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 335.091197][ T8257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.117722][ T9869] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 335.130204][ T9874] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1483'. [ 335.139779][ T9874] unsupported nlmsg_type 40 [ 335.152931][ T5162] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 335.199163][ T9874] netlink: 'syz.5.1483': attribute type 63 has an invalid length. [ 335.221304][ T5162] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.251559][ T5162] usb 5-1: Product: syz [ 335.269429][ T5162] usb 5-1: Manufacturer: syz [ 335.281209][ T5162] usb 5-1: SerialNumber: syz [ 335.514850][ T5108] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 335.536703][ T5108] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 335.560020][ T5162] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 335.716956][ T9896] loop2: detected capacity change from 0 to 128 [ 335.739445][ T9896] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 335.775798][ T5158] usb 5-1: USB disconnect, device number 7 [ 335.787083][ T5108] Bluetooth: hci6: unexpected event for opcode 0x0c26 [ 335.839883][ T5158] usblp0: removed [ 336.124674][ T9904] nbd: must specify an index to disconnect [ 337.056805][ T9911] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 337.343604][ T9882] loop0: detected capacity change from 0 to 32768 [ 337.352134][ T9882] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1475 (9882) [ 337.387170][ T9882] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 337.442148][ T9882] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 337.458332][ T9882] BTRFS info (device loop0): using free-space-tree [ 337.475738][ T9921] netlink: 'syz.4.1498': attribute type 25 has an invalid length. [ 337.483893][ T9921] netlink: 'syz.4.1498': attribute type 7 has an invalid length. [ 337.542951][ T9919] loop2: detected capacity change from 0 to 4096 [ 337.563611][ T9919] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 337.590516][ T9919] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 337.615226][ T9932] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 337.834175][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1506'. [ 337.916922][ T9953] loop4: detected capacity change from 0 to 64 [ 337.955137][ T29] audit: type=1804 audit(1720971086.298:173): pid=9919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1497" name="/newroot/221/bus/bus" dev="loop2" ino=33 res=1 errno=0 [ 338.034847][ T9953] hfs: bad catalog entry type 23 [ 338.039857][ T9956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1504'. [ 338.052665][ T9956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1504'. [ 338.066314][ T7766] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 338.067131][ T9957] nbd: must specify an index to disconnect [ 338.088551][ T393] ntfs3: loop2: ino=5, ntfs3_write_inode failed, -22. [ 338.522296][ T5108] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 338.537049][ T5108] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 338.822917][ T9974] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 339.018175][ T5651] IPVS: starting estimator thread 0... [ 339.049401][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1519'. [ 339.121973][ T9990] IPVS: using max 16 ests per chain, 38400 per kthread [ 339.136002][ T5157] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 339.181361][ T9995] loop2: detected capacity change from 0 to 64 [ 339.207316][ T9995] hfs: bad catalog entry type 23 [ 339.248669][ T9997] nbd: must specify an index to disconnect [ 339.333811][ T5157] usb 1-1: Using ep0 maxpacket: 32 [ 339.368690][ T5157] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 339.391397][ T5157] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.412236][ T5157] usb 1-1: Product: syz [ 339.416508][ T5157] usb 1-1: Manufacturer: syz [ 339.421283][ T5157] usb 1-1: SerialNumber: syz [ 339.443547][ T5157] usb 1-1: config 0 descriptor?? [ 339.466537][T10003] loop2: detected capacity change from 0 to 1024 [ 339.501347][T10003] EXT4-fs (loop2): bad geometry: first data block 100663296 is beyond end of filesystem (512) [ 339.969739][T10010] loop0: detected capacity change from 0 to 128 [ 341.971777][T10011] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1525'. [ 343.166453][T10010] hpfs: bad mount options. [ 343.205271][ T5108] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 343.220925][ T5108] Bluetooth: hci2: Injecting HCI hardware error event [ 343.234144][ T5108] Bluetooth: hci2: hardware error 0x00 [ 343.433913][ T5157] f81534a_ctrl 1-1:0.0: failed to set register 0x116: -5 [ 343.441859][ T5157] f81534a_ctrl 1-1:0.0: failed to enable ports: -5 [ 343.449171][ T5157] f81534a_ctrl 1-1:0.0: probe with driver f81534a_ctrl failed with error -5 [ 343.478168][ T5157] usb 1-1: USB disconnect, device number 7 [ 343.489497][T10018] loop2: detected capacity change from 0 to 256 [ 343.570489][T10018] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 343.611811][T10024] loop3: detected capacity change from 0 to 128 [ 343.649235][T10024] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 345.015286][T10031] nbd: must specify an index to disconnect [ 345.041999][T10024] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 345.342506][ T5108] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 345.587474][ T5157] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 345.791927][ T5157] usb 4-1: Using ep0 maxpacket: 32 [ 345.818952][ T5157] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.852353][ T5157] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x2 has an invalid bInterval 228, changing to 11 [ 345.886482][T10068] loop1: detected capacity change from 0 to 256 [ 345.894205][ T5157] usb 4-1: config 1 interface 0 has no altsetting 0 [ 345.941785][T10068] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 346.212252][ T5157] usb 4-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.40 [ 346.221338][ T5157] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.231203][ T5157] usb 4-1: Product: syz [ 346.235448][ T5157] usb 4-1: Manufacturer: syz [ 346.240052][ T5157] usb 4-1: SerialNumber: syz [ 347.607915][ T5108] Bluetooth: hci2: Opcode 0x206c failed: -110 [ 348.137246][ T5157] usb 4-1: can't set config #1, error -71 [ 348.191791][ T5157] usb 4-1: USB disconnect, device number 7 [ 349.023048][T10118] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 349.132603][T10122] loop5: detected capacity change from 0 to 512 [ 349.211103][T10122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.235921][T10122] ext4 filesystem being mounted at /296/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 349.273284][T10088] loop4: detected capacity change from 0 to 32768 [ 349.344713][ T5157] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 349.561902][ T5157] usb 3-1: Using ep0 maxpacket: 32 [ 349.579272][ T5157] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 349.835000][ T5108] Bluetooth: hci2: Opcode 0x2046 failed: -110 [ 350.449667][ T5157] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 350.461773][ T5157] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.473228][ T5157] usb 3-1: Product: syz [ 350.477437][ T5157] usb 3-1: Manufacturer: syz [ 350.482138][ T5157] usb 3-1: SerialNumber: syz [ 350.489963][ T5157] usb 3-1: config 0 descriptor?? [ 350.503132][T10120] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 350.506051][T10088] jfs: Unrecognized mount option "01777777777777777777777Xcv:Q" or missing value [ 350.511479][ T5157] hub 3-1:0.0: bad descriptor, ignoring hub [ 350.556218][ T5090] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.558729][ T5157] hub 3-1:0.0: probe with driver hub failed with error -5 [ 350.590716][ T5157] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input20 [ 350.637070][T10138] loop1: detected capacity change from 0 to 764 [ 350.738656][T10145] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 350.746038][T10138] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 350.882671][ T5157] usb 3-1: USB disconnect, device number 5 [ 350.888548][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 350.993032][T10150] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1582'. [ 351.112334][T10150] loop5: detected capacity change from 0 to 1024 [ 351.156634][T10116] loop0: detected capacity change from 0 to 32768 [ 351.158246][T10150] hfsplus: invalid attributes max_key_len 768 [ 351.203136][T10150] hfsplus: failed to load attributes file [ 351.249950][T10164] loop1: detected capacity change from 0 to 512 [ 351.258904][T10116] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 351.295031][T10150] loop5: detected capacity change from 0 to 1024 [ 351.318712][T10150] hfsplus: unable to parse mount options [ 351.373876][T10164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.388697][T10116] XFS (loop0): Ending clean mount [ 351.411013][T10164] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 351.458846][T10116] XFS (loop0): Quotacheck needed: Please wait. [ 351.597575][T10116] XFS (loop0): Quotacheck: Done. [ 351.640552][ T29] audit: type=1800 audit(1720971099.988:174): pid=10164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1585" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 351.710675][ T29] audit: type=1800 audit(1720971100.058:175): pid=10164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1585" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 351.722168][T10184] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 351.802506][ T7766] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 351.847031][ T9414] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.867851][T10189] loop5: detected capacity change from 0 to 256 [ 353.647685][T10193] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 354.345430][T10211] loop3: detected capacity change from 0 to 2048 [ 354.365608][T10210] loop2: detected capacity change from 0 to 764 [ 354.384396][T10213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1599'. [ 354.396470][T10211] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 354.442050][T10210] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 354.458947][T10211] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 354.509845][T10213] loop1: detected capacity change from 0 to 1024 [ 354.544340][T10213] hfsplus: invalid attributes max_key_len 768 [ 354.560705][T10213] hfsplus: failed to load attributes file [ 354.624636][T10221] loop5: detected capacity change from 0 to 256 [ 354.711843][T10222] tipc: Can't bind to reserved service type 0 [ 354.729183][T10221] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 354.755531][T10213] loop1: detected capacity change from 0 to 1024 [ 354.785939][T10213] hfsplus: unable to parse mount options [ 354.844994][T10226] loop0: detected capacity change from 0 to 256 [ 354.862925][T10224] loop2: detected capacity change from 0 to 1024 [ 356.018070][T10238] binder: 10234:10238 ioctl 400c620e 20000080 returned -22 [ 356.141527][T10206] loop4: detected capacity change from 0 to 32768 [ 357.238615][T10259] loop3: detected capacity change from 0 to 1764 [ 357.417566][T10265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1618'. [ 357.434614][T10259] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 357.445325][T10265] loop2: detected capacity change from 0 to 1024 [ 357.475167][T10265] hfsplus: invalid attributes max_key_len 768 [ 357.502331][T10265] hfsplus: failed to load attributes file [ 357.667570][T10265] loop2: detected capacity change from 0 to 1024 [ 357.693971][T10265] hfsplus: unable to parse mount options [ 358.015298][T10277] xt_CT: You must specify a L4 protocol and not use inversions on it [ 358.231911][T10290] binder: 10289:10290 ioctl 400c620e 20000080 returned -22 [ 358.265566][T10292] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 358.596146][ T29] audit: type=1326 audit(1720971106.928:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10295 comm="syz.5.1633" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ac1975bd9 code=0x0 [ 359.399072][T10269] loop0: detected capacity change from 0 to 32768 [ 359.491866][T10269] XFS (loop0): Mounting V5 filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab in no-recovery mode. Filesystem will be inconsistent. [ 359.548719][T10305] loop1: detected capacity change from 0 to 512 [ 359.645490][T10305] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1635: invalid indirect mapped block 256 (level 2) [ 359.700367][T10305] EXT4-fs (loop1): 2 truncates cleaned up [ 359.708009][T10305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.873130][ T7766] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 360.566655][T10313] loop3: detected capacity change from 0 to 8192 [ 360.573040][T10305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.610080][T10313] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 360.723314][T10325] fuse: Invalid rootmode [ 360.950314][T10341] netlink: 'syz.2.1648': attribute type 29 has an invalid length. [ 360.971549][T10341] netlink: 'syz.2.1648': attribute type 29 has an invalid length. [ 361.002161][T10341] netlink: 'syz.2.1648': attribute type 29 has an invalid length. [ 361.394008][ T5221] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 361.997315][ T5221] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 362.046632][ T5221] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.114362][ T29] audit: type=1326 audit(1720971110.468:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.2.1651" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90c6f75bd9 code=0x0 [ 362.119099][ T5221] usb 2-1: config 0 descriptor?? [ 362.187912][T10358] loop5: detected capacity change from 0 to 1024 [ 362.328999][ T66] hfsplus: b-tree write err: -5, ino 4 [ 362.337706][T10360] loop0: detected capacity change from 0 to 4096 [ 362.353046][T10360] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 362.395930][T10360] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 362.550775][T10336] loop4: detected capacity change from 0 to 32768 [ 362.577069][T10336] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1643 (10336) [ 362.623039][T10336] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 362.659274][T10336] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 362.678371][T10336] BTRFS info (device loop4): using free-space-tree [ 362.685096][ T29] audit: type=1804 audit(1720971111.028:178): pid=10360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1653" name="/newroot/119/bus/bus" dev="loop0" ino=33 res=1 errno=0 [ 362.775197][T10372] loop3: detected capacity change from 0 to 4096 [ 362.788989][ T51] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [ 362.801736][T10372] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 362.901137][T10372] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 362.965431][T10393] loop2: detected capacity change from 0 to 512 [ 363.007561][T10372] ntfs3: loop3: ino=1b, "file0" failed to parse mft record [ 363.038131][T10379] loop5: detected capacity change from 0 to 8192 [ 363.052445][T10379] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 363.076520][T10372] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 363.086259][T10393] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #12: comm syz.2.1662: corrupted in-inode xattr: invalid ea_ino [ 363.109317][T10393] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.1662: couldn't read orphan inode 12 (err -117) [ 363.135066][T10393] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.143985][T10372] ntfs3: loop3: ino=1b, "file0" attr_set_size [ 363.150277][ T5089] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 363.221295][ T5221] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 363.237806][T10400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1664'. [ 363.264512][ T5221] asix 2-1:0.0: probe with driver asix failed with error -32 [ 363.264857][ T8257] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22. [ 363.359721][ T5625] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 363.459550][ T5221] usb 2-1: USB disconnect, device number 8 [ 364.024735][T10425] loop3: detected capacity change from 0 to 256 [ 364.575118][T10429] netlink: 'syz.4.1663': attribute type 29 has an invalid length. [ 364.639767][T10429] netlink: 'syz.4.1663': attribute type 29 has an invalid length. [ 364.709701][T10430] netlink: 'syz.4.1663': attribute type 29 has an invalid length. [ 364.928022][T10436] loop5: detected capacity change from 0 to 512 [ 364.961837][T10436] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2234: inode #12: comm syz.5.1680: corrupted in-inode xattr: invalid ea_ino [ 365.021871][T10436] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz.5.1680: couldn't read orphan inode 12 (err -117) [ 365.108321][T10436] EXT4-fs (loop5): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.149068][T10443] loop3: detected capacity change from 0 to 8192 [ 365.186574][T10443] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 365.263946][T10447] loop4: detected capacity change from 0 to 8 [ 365.297835][ T5090] EXT4-fs (loop5): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 365.311033][T10447] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 365.731137][T10449] cramfs: Error -5 while decompressing! [ 365.737457][T10449] cramfs: ffffffff948da7a8(26)->ffff8880615de000(4096) [ 365.746665][T10449] cramfs: Error -3 while decompressing! [ 365.752854][T10449] cramfs: ffffffff948da7c2(26)->ffff8880615dc000(4096) [ 365.760098][T10449] cramfs: Error -3 while decompressing! [ 365.766229][T10449] cramfs: ffffffff948da7dc(16)->ffff88805ae7f000(4096) [ 365.773678][T10449] cramfs: Error -5 while decompressing! [ 365.779580][T10449] cramfs: ffffffff948da7a8(26)->ffff8880615de000(4096) [ 367.989996][T10466] usb usb9: usbfs: process 10466 (syz.3.1689) did not claim interface 8 before use [ 368.281855][ T5159] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 368.416398][T10476] loop3: detected capacity change from 0 to 512 [ 369.389920][T10476] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1690: invalid block [ 369.415729][T10491] loop2: detected capacity change from 0 to 512 [ 369.424129][ T5159] usb 6-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 369.428570][T10476] EXT4-fs (loop3): Remounting filesystem read-only [ 369.443051][T10476] EXT4-fs (loop3): 2 truncates cleaned up [ 369.505241][ T5159] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.516235][T10491] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #12: comm syz.2.1696: corrupted in-inode xattr: invalid ea_ino [ 369.540312][T10476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.556818][ T5159] usb 6-1: config 0 descriptor?? [ 369.609115][T10491] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.1696: couldn't read orphan inode 12 (err -117) [ 369.654872][T10491] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.899114][ T5625] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 370.075161][ T8257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.146766][T10501] loop2: detected capacity change from 0 to 1024 [ 370.211152][T10501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.621531][ T5159] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 370.644027][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.647673][ T5159] asix 6-1:0.0: probe with driver asix failed with error -32 [ 371.356637][T10487] loop4: detected capacity change from 0 to 32768 [ 371.438642][T10487] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1695 (10487) [ 371.600282][ T5159] usb 6-1: USB disconnect, device number 4 [ 371.758207][T10516] loop3: detected capacity change from 0 to 1024 [ 371.817063][T10518] loop2: detected capacity change from 0 to 1024 [ 371.844143][T10518] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 371.908225][T10502] loop1: detected capacity change from 0 to 32768 [ 371.971849][T10502] XFS (loop1): Mounting V5 filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab in no-recovery mode. Filesystem will be inconsistent. [ 372.048496][T10518] loop2: detected capacity change from 0 to 1764 [ 372.069474][T10518] isofs_fill_super: root inode is not a directory. Corrupted media? [ 372.182005][ T9414] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 372.205908][T10518] loop2: detected capacity change from 0 to 8 [ 372.253257][T10532] loop3: detected capacity change from 0 to 1024 [ 372.286473][ T29] audit: type=1326 audit(1720971120.638:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.5.1709" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ac1975bd9 code=0x0 [ 372.365587][T10532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.644329][ T8257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.019103][T10555] loop0: detected capacity change from 0 to 1024 [ 373.089126][T10555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.177329][ T5108] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 373.307610][ T7766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.561811][ T5157] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 373.654204][T10539] loop4: detected capacity change from 0 to 32768 [ 373.775103][ T5157] usb 6-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 373.781400][T10590] usb usb9: usbfs: process 10590 (syz.3.1724) did not claim interface 8 before use [ 373.817824][ T5157] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.876310][ T5157] usb 6-1: config 0 descriptor?? [ 373.997639][T10539] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 374.041246][T10539] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 374.157633][ T29] audit: type=1326 audit(1720971122.508:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10600 comm="syz.2.1730" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90c6f75bd9 code=0x0 [ 374.186469][T10539] bcachefs (loop4): alloc_read... done [ 374.201829][T10539] bcachefs (loop4): stripes_read... done [ 374.212165][T10539] bcachefs (loop4): snapshots_read... done [ 374.240784][T10539] bcachefs (loop4): journal_replay... done [ 374.251780][T10539] bcachefs (loop4): resume_logged_ops... done [ 374.268382][T10539] bcachefs (loop4): going read-write [ 374.291752][T10539] bcachefs (loop4): done starting filesystem [ 374.459451][T10615] loop3: detected capacity change from 0 to 8 [ 374.479336][T10615] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 374.535287][ T5089] bcachefs (loop4): shutting down [ 374.550592][ T5089] bcachefs (loop4): going read-only [ 374.570693][ T5089] bcachefs (loop4): finished waiting for writes to stop [ 374.682498][ T5089] bcachefs (loop4): flushing journal and stopping allocators, journal seq 12 [ 374.783013][ T5089] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 13 [ 374.849166][T10620] cramfs: Error -5 while decompressing! [ 374.855278][T10620] cramfs: ffffffff948d67a8(26)->ffff88805c8f5000(4096) [ 374.857418][T10580] loop1: detected capacity change from 0 to 32768 [ 374.869198][T10620] cramfs: Error -3 while decompressing! [ 374.876781][T10620] cramfs: ffffffff948d67c2(26)->ffff8880558a9000(4096) [ 374.884749][T10620] cramfs: Error -3 while decompressing! [ 374.892368][T10620] cramfs: ffffffff948d67dc(16)->ffff88807aa14000(4096) [ 374.899738][T10620] cramfs: Error -5 while decompressing! [ 374.905807][T10620] cramfs: ffffffff948d67a8(26)->ffff88805c8f5000(4096) [ 374.964020][ T5089] bcachefs (loop4): shutdown complete, journal seq 14 [ 374.981797][ T5089] bcachefs (loop4): marking filesystem clean [ 374.985108][ T5157] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 375.349918][ T5157] asix 6-1:0.0: probe with driver asix failed with error -32 [ 375.364539][ T5089] bcachefs (loop4): shutdown complete [ 375.408049][T10580] XFS (loop1): Mounting V5 filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab in no-recovery mode. Filesystem will be inconsistent. [ 375.411798][T10630] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 375.427862][T10630] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 375.493566][T10630] vhci_hcd vhci_hcd.0: Device attached [ 375.521542][T10636] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 375.575646][T10630] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 375.585946][T10630] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 375.607475][ T9414] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 375.624389][T10630] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 375.631016][T10630] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 375.645223][T10640] usb usb9: usbfs: process 10640 (syz.0.1740) did not claim interface 8 before use [ 375.649531][ T5651] usb 6-1: USB disconnect, device number 5 [ 375.695504][T10636] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 375.697926][T10630] vhci_hcd vhci_hcd.0: Device attached [ 375.771135][T10630] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 375.792231][ T5158] vhci_hcd: vhci_device speed not set [ 375.814453][T10630] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 375.842777][T10631] usbip_core: unknown command [ 375.858218][T10631] vhci_hcd: unknown pdu 95516817 [ 375.866958][T10630] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(19) [ 375.873580][T10630] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 375.898288][ T5158] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 375.906121][T10631] usbip_core: unknown command [ 375.921127][T10632] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 375.944876][ T2453] vhci_hcd: stop threads [ 375.949145][ T2453] vhci_hcd: release socket [ 375.953668][T10630] vhci_hcd vhci_hcd.0: Device attached [ 375.963973][T10637] vhci_hcd: connection closed [ 375.964194][T10645] vhci_hcd: connection closed [ 375.977069][ T2453] vhci_hcd: disconnect device [ 375.992018][ T2453] vhci_hcd: stop threads [ 375.996290][ T2453] vhci_hcd: release socket [ 376.000958][ T2453] vhci_hcd: disconnect device [ 376.012005][ T2453] vhci_hcd: stop threads [ 376.024331][ T2453] vhci_hcd: release socket [ 376.031190][ T2453] vhci_hcd: disconnect device [ 376.221938][T10650] netlink: 'syz.0.1744': attribute type 1 has an invalid length. [ 376.234541][T10650] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1744'. [ 378.039852][T10674] loop1: detected capacity change from 0 to 512 [ 378.149117][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.155512][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.289312][T10674] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1749: invalid block [ 378.318638][T10674] EXT4-fs (loop1): Remounting filesystem read-only [ 378.334862][T10674] EXT4-fs (loop1): 2 truncates cleaned up [ 378.363517][T10674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.371992][T10693] netlink: 'syz.0.1758': attribute type 1 has an invalid length. [ 378.416707][T10693] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1758'. [ 378.631829][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 378.747662][ T9414] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.800842][T10657] loop5: detected capacity change from 0 to 32768 [ 378.813515][T10657] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1747 (10657) [ 378.872586][ T8] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 378.893827][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.905899][T10657] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 378.933167][ T8] usb 4-1: config 0 descriptor?? [ 378.945670][T10657] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 378.963419][T10704] fuse: Unknown parameter '' [ 378.968473][T10657] BTRFS info (device loop5): using free-space-tree [ 380.123357][T10657] BTRFS error (device loop5): open_ctree failed [ 380.354842][T10743] loop2: detected capacity change from 0 to 1024 [ 380.404030][T10743] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 380.472784][ T8] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 380.510042][ T8] asix 4-1:0.0: probe with driver asix failed with error -32 [ 380.522680][T10746] netlink: 'syz.1.1774': attribute type 1 has an invalid length. [ 380.553174][T10746] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1774'. [ 380.658386][T10747] loop2: detected capacity change from 0 to 1764 [ 380.684961][T10747] isofs_fill_super: root inode is not a directory. Corrupted media? [ 380.727946][ T8] usb 4-1: USB disconnect, device number 8 [ 380.921524][T10714] loop4: detected capacity change from 0 to 32768 [ 381.075114][ T5158] vhci_hcd: vhci_device speed not set [ 381.514060][T10743] loop2: detected capacity change from 0 to 8 [ 381.557223][T10755] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1773'. [ 382.949959][T10769] loop5: detected capacity change from 0 to 256 [ 383.020366][ T5159] usb usb14-port1: attempt power cycle [ 383.286161][T10764] loop0: detected capacity change from 0 to 4096 [ 383.856664][ T5159] usb usb14-port1: unable to enumerate USB device [ 385.050269][T10764] ntfs3: loop0: Failed to read $AttrDef (-4). [ 385.161839][T10789] netlink: 'syz.1.1788': attribute type 1 has an invalid length. [ 385.181056][T10789] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1788'. [ 386.315817][T10808] ALSA: seq fatal error: cannot create timer (-22) [ 386.464485][ T5108] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 386.830197][ T5157] libceph: connect (1)[c::]:6789 error -101 [ 386.847976][ T5157] libceph: mon0 (1)[c::]:6789 connect error [ 386.883224][T10819] ceph: No mds server is up or the cluster is laggy [ 387.194547][ T5157] libceph: connect (1)[c::]:6789 error -101 [ 387.200633][ T5157] libceph: mon0 (1)[c::]:6789 connect error [ 388.814511][T10867] loop0: detected capacity change from 0 to 1024 [ 388.852413][T10867] EXT4-fs: Ignoring removed orlov option [ 388.858089][T10867] EXT4-fs: Ignoring removed nomblk_io_submit option [ 388.928518][T10867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.085001][ T7766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.328711][T10846] loop1: detected capacity change from 0 to 40427 [ 389.372192][T10846] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1541) blocks(1024) [ 389.420614][T10846] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 389.751133][T10846] F2FS-fs (loop1): invalid crc_offset: 16 [ 390.255549][T10846] F2FS-fs (loop1): Found nat_bits in checkpoint [ 390.664388][T10902] netlink: 'syz.3.1829': attribute type 2 has an invalid length. [ 390.696831][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1829'. [ 390.716500][T10846] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 390.751715][T10846] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 390.782781][T10902] serio: Serial port pts0 [ 390.797476][T10863] loop2: detected capacity change from 0 to 32768 [ 390.845119][T10863] BTRFS: device /dev/loop2 (7:2) using temp-fsid 83c053c6-005e-4f00-b5a8-c29c2c88d709 [ 390.874182][T10863] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1816 (10863) [ 390.926940][T10863] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 390.971961][T10863] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 390.997473][ T9414] syz-executor: attempt to access beyond end of device [ 390.997473][ T9414] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 391.007493][T10863] BTRFS info (device loop2): using free-space-tree [ 391.037261][ T9414] syz-executor: attempt to access beyond end of device [ 391.037261][ T9414] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 391.084354][ T9414] syz-executor: attempt to access beyond end of device [ 391.084354][ T9414] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 391.108103][ T9414] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 391.213181][T10927] loop3: detected capacity change from 0 to 1024 [ 391.252519][T10927] EXT4-fs: Ignoring removed orlov option [ 391.271930][T10927] EXT4-fs: Ignoring removed nomblk_io_submit option [ 391.313144][T10927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.337065][ T5625] BTRFS info (device loop2): last unmount of filesystem 83c053c6-005e-4f00-b5a8-c29c2c88d709 [ 391.668185][ T8257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.942139][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1836'. [ 393.737418][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.956721][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.127962][T10934] loop0: detected capacity change from 0 to 32768 [ 394.198994][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.443867][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.570233][T10940] loop2: detected capacity change from 0 to 32768 [ 394.660108][ T5106] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 394.679453][ T5106] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 394.689469][ T5106] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 394.701595][ T5106] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 394.719807][ T5106] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 394.728650][ T5106] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 394.761879][T10940] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 394.877573][ T51] bridge_slave_1: left allmulticast mode [ 394.901105][ T51] bridge_slave_1: left promiscuous mode [ 394.943309][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.002566][ T51] bridge_slave_0: left allmulticast mode [ 395.040509][ T51] bridge_slave_0: left promiscuous mode [ 395.081403][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.118032][T10940] XFS (loop2): Ending clean mount [ 396.545797][ T5625] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 396.595877][T10943] loop3: detected capacity change from 0 to 32768 [ 396.739714][T10943] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 396.782036][ T5106] Bluetooth: hci1: command tx timeout [ 397.000496][T10943] XFS (loop3): Ending clean mount [ 397.052148][T10943] XFS (loop3): Quotacheck needed: Please wait. [ 397.164847][T10943] XFS (loop3): Quotacheck: Done. [ 397.220944][T10997] loop0: detected capacity change from 0 to 1024 [ 397.317180][ T8257] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 397.513636][T10972] loop4: detected capacity change from 0 to 32768 [ 397.599380][T10972] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 397.623179][T10972] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 397.671824][T10972] BTRFS info (device loop4): using free-space-tree [ 398.013739][T10972] BTRFS error (device loop4): open_ctree failed [ 398.016248][T11031] loop0: detected capacity change from 0 to 256 [ 398.915539][ T5106] Bluetooth: hci1: command tx timeout [ 399.603648][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.812684][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.864461][ T51] bond0 (unregistering): Released all slaves [ 399.955151][T11029] tipc: Invalid UDP bearer configuration [ 399.955213][T11029] tipc: Enabling of bearer rejected, failed to enable media [ 400.954610][ T5106] Bluetooth: hci1: command tx timeout [ 401.721473][T11080] loop0: detected capacity change from 0 to 512 [ 401.761976][T11078] input: syz1 as /devices/virtual/input/input21 [ 402.243092][T11080] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 402.253267][ T51] hsr_slave_0: left promiscuous mode [ 402.291156][T11080] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 402.319582][T11080] EXT4-fs error (device loop0): ext4_acquire_dquot:6860: comm syz.0.1879: Failed to acquire dquot type 1 [ 402.336740][ T51] hsr_slave_1: left promiscuous mode [ 402.347171][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.373434][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.430780][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.438040][T11080] EXT4-fs (loop0): 1 truncate cleaned up [ 402.445788][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.479078][T11080] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.531019][T11080] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.546121][ T51] veth1_macvtap: left promiscuous mode [ 402.563866][ T51] veth0_macvtap: left promiscuous mode [ 402.578889][ T51] veth1_vlan: left promiscuous mode [ 402.585615][ T51] veth0_vlan: left promiscuous mode [ 402.610184][T11080] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 402.655329][T11080] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 402.678321][T11080] EXT4-fs error (device loop0): ext4_acquire_dquot:6860: comm syz.0.1879: Failed to acquire dquot type 1 [ 402.780464][ T7766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.866591][T11097] loop2: detected capacity change from 0 to 512 [ 402.893410][T11097] ext4: Unknown parameter 'fowner>00000000000000000000' [ 402.996262][T11097] evm: overlay not supported [ 403.010062][ T29] audit: type=1804 audit(1720971151.358:181): pid=11097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1885" name="/newroot/286/bus/file1" dev="overlay" ino=1588 res=1 errno=0 [ 403.037243][ T5106] Bluetooth: hci1: command tx timeout [ 403.557050][ T29] audit: type=1326 audit(1720971151.908:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.3.1892" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d0b375bd9 code=0x0 [ 403.912078][ T51] team0 (unregistering): Port device team_slave_1 removed [ 403.973435][ T51] team0 (unregistering): Port device team_slave_0 removed [ 404.647886][T11120] loop2: detected capacity change from 0 to 32768 [ 404.782367][T11126] overlayfs: upper fs needs to support d_type. [ 404.800533][T11126] overlayfs: upper fs does not support tmpfile. [ 404.826623][T11126] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 404.973621][T11091] tipc: Invalid UDP bearer configuration [ 404.973686][T11091] tipc: Enabling of bearer rejected, failed to enable media [ 405.169351][T11133] loop4: detected capacity change from 0 to 512 [ 405.206363][T11136] loop0: detected capacity change from 0 to 256 [ 405.208230][T11138] loop3: detected capacity change from 0 to 512 [ 405.220083][T11133] ext4: Unknown parameter 'fowner>00000000000000000000' [ 405.258658][T10955] chnl_net:caif_netlink_parms(): no params data found [ 405.312858][T11138] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.1901: casefold flag without casefold feature [ 405.389970][T11138] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1901: couldn't read orphan inode 15 (err -117) [ 405.436126][ T29] audit: type=1804 audit(1720971153.768:183): pid=11133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1899" name="/newroot/307/bus/file1" dev="overlay" ino=1669 res=1 errno=0 [ 405.521052][T11138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.598017][ T8257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.630283][T11151] loop4: detected capacity change from 0 to 64 [ 406.699348][ T29] audit: type=1800 audit(1720971155.028:184): pid=11151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1906" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 406.882366][T11161] loop4: detected capacity change from 0 to 512 [ 406.888967][T10955] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.900100][T10955] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.911038][T10955] bridge_slave_0: entered allmulticast mode [ 406.924045][T11161] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 406.948210][T10955] bridge_slave_0: entered promiscuous mode [ 406.949502][T11161] System zones: 0-5 [ 406.971589][T11161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.984347][T10955] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.986192][T10955] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.004763][T10955] bridge_slave_1: entered allmulticast mode [ 407.012790][T10955] bridge_slave_1: entered promiscuous mode [ 407.092881][T11161] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1907: bg 0: block 161: padding at end of block bitmap is not set [ 407.137324][T10955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.185869][T10955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.263430][T11167] loop0: detected capacity change from 0 to 4096 [ 407.278550][ T5089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.336812][T11168] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 407.405454][T10955] team0: Port device team_slave_0 added [ 407.454660][T10955] team0: Port device team_slave_1 added [ 407.615728][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.671924][T11175] loop0: detected capacity change from 0 to 512 [ 407.679078][T11175] ext4: Unknown parameter 'fowner>00000000000000000000' [ 407.717688][T11177] loop4: detected capacity change from 0 to 256 [ 407.851926][ T29] audit: type=1804 audit(1720971156.198:185): pid=11175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1913" name="/newroot/187/bus/file1" dev="overlay" ino=1042 res=1 errno=0 [ 408.112263][T11185] ALSA: seq fatal error: cannot create timer (-22) [ 408.288730][T11183] loop5: detected capacity change from 0 to 1024 [ 408.692623][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.964050][ T5108] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 409.049571][T11198] loop3: detected capacity change from 0 to 2048 [ 409.066025][ T5108] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 409.073931][ T5108] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 409.082009][ T5108] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 409.089642][ T5108] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 409.096973][ T5108] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 409.134248][T11198] NILFS (loop3): invalid segment: Sequence number mismatch [ 409.141544][T11198] NILFS (loop3): trying rollback from an earlier position [ 409.170981][T11198] NILFS (loop3): recovery complete [ 409.209270][T11199] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 409.317340][T11202] loop0: detected capacity change from 0 to 4096 [ 409.334187][T10955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.341203][T10955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.749561][T10955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.787670][T10955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.799176][T11203] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 409.827499][T10955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.916461][T10955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.014613][T11209] loop5: detected capacity change from 0 to 512 [ 410.061369][T11209] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 410.077999][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.090970][T11209] System zones: 0-5 [ 410.109930][T11209] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.289349][T11209] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1925: bg 0: block 161: padding at end of block bitmap is not set [ 410.358606][T11219] loop3: detected capacity change from 0 to 512 [ 410.391234][T11219] ext4: Unknown parameter 'fowner>00000000000000000000' [ 410.418817][ T5090] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.441479][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.454645][T11221] ALSA: seq fatal error: cannot create timer (-22) [ 410.599481][ T29] audit: type=1804 audit(1720971158.948:186): pid=11219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1930" name="/newroot/194/bus/file1" dev="overlay" ino=1073 res=1 errno=0 [ 410.635562][T10955] hsr_slave_0: entered promiscuous mode [ 410.676900][T10955] hsr_slave_1: entered promiscuous mode [ 410.701832][T10955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 410.731296][T10955] Cannot create hsr debugfs directory [ 410.814319][T11225] loop5: detected capacity change from 0 to 512 [ 410.849209][T11225] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 410.877629][T11225] UDF-fs: Scanning with blocksize 512 failed [ 410.917721][T11225] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 410.950081][T11225] UDF-fs: Scanning with blocksize 1024 failed [ 410.963858][T11231] loop3: detected capacity change from 0 to 256 [ 410.970890][T11225] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 410.981281][T11225] UDF-fs: Scanning with blocksize 2048 failed [ 411.000262][T11225] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 411.056228][T11225] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 411.243664][ T5108] Bluetooth: hci3: command tx timeout [ 411.251043][T11230] tipc: Enabling of bearer rejected, failed to enable media [ 412.298956][T11240] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 80 marked as free, partition length is 40) [ 412.325166][T11237] loop4: detected capacity change from 0 to 164 [ 412.337619][T11237] Unable to read rock-ridge attributes [ 412.354211][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1937'. [ 412.584796][ T51] bridge_slave_1: left allmulticast mode [ 412.601263][T11245] loop4: detected capacity change from 0 to 512 [ 412.604519][ T51] bridge_slave_1: left promiscuous mode [ 412.642601][T11245] EXT4-fs: Ignoring removed mblk_io_submit option [ 412.642607][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.659139][ T51] bridge_slave_0: left allmulticast mode [ 412.679202][ T51] bridge_slave_0: left promiscuous mode [ 412.687918][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.697501][T11245] EXT4-fs error (device loop4): __ext4_iget:4906: inode #11: block 1: comm syz.4.1939: invalid block [ 412.748368][T11245] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.1939: couldn't read orphan inode 11 (err -117) [ 412.772085][T11245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.821242][T11251] loop5: detected capacity change from 0 to 64 [ 412.860357][T11251] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 412.997091][T11251] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 413.102297][T11251] CIFS: Unable to determine destination address [ 413.190818][T11256] loop0: detected capacity change from 0 to 512 [ 413.218532][T11256] ext4: Unknown parameter 'fowner>00000000000000000000' [ 413.265317][ T5108] Bluetooth: hci3: command tx timeout [ 413.319592][T11259] snd_dummy snd_dummy.0: control 0:0:0:syz1:0 is already present [ 413.852944][ T5089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.873783][ T29] audit: type=1804 audit(1720971161.938:187): pid=11256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1944" name="/newroot/198/bus/file1" dev="overlay" ino=1108 res=1 errno=0 [ 413.990890][T11262] input: syz1 as /devices/virtual/input/input22 [ 414.504918][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.538417][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.553359][ T51] bond0 (unregistering): Released all slaves [ 414.598321][T11273] tipc: Enabling of bearer rejected, failed to enable media [ 414.874285][T11277] loop3: detected capacity change from 0 to 256 [ 415.536719][ T5108] Bluetooth: hci3: command tx timeout [ 416.129186][T11285] loop5: detected capacity change from 0 to 512 [ 416.169809][T11285] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 416.180675][T11285] UDF-fs: Scanning with blocksize 512 failed [ 416.205826][T11285] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 416.224780][T11289] loop3: detected capacity change from 0 to 64 [ 416.231917][T11285] UDF-fs: Scanning with blocksize 1024 failed [ 416.248224][T11285] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 416.263845][T11285] UDF-fs: Scanning with blocksize 2048 failed [ 416.270752][T11285] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 416.289788][T11289] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 416.315335][T11285] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 416.343835][T11289] CIFS: Unable to determine destination address [ 416.428969][T11292] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 80 marked as free, partition length is 40) [ 416.564967][T11295] loop3: detected capacity change from 0 to 128 [ 416.602362][T11295] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 416.619925][ T51] hsr_slave_0: left promiscuous mode [ 416.634783][ T51] hsr_slave_1: left promiscuous mode [ 416.644506][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.671976][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.684142][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.701784][T11295] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 416.710868][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.789528][ T51] veth1_macvtap: left promiscuous mode [ 416.806625][ T51] veth0_macvtap: left promiscuous mode [ 416.832213][ T51] veth1_vlan: left promiscuous mode [ 416.837599][ T51] veth0_vlan: left promiscuous mode [ 417.678104][ T5108] Bluetooth: hci3: command tx timeout [ 417.976088][ T5106] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 418.000769][ T5106] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 418.019591][ T5106] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 418.030930][ T5106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 418.063370][ T5106] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 418.074948][ T5106] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 418.927553][ T51] team0 (unregistering): Port device team_slave_1 removed [ 419.042341][ T51] team0 (unregistering): Port device team_slave_0 removed [ 419.311733][T11325] usb usb9: check_ctrlrecip: process 11325 (syz.0.1966) requesting ep 01 but needs 81 [ 419.321752][T11325] usb usb9: usbfs: process 11325 (syz.0.1966) did not claim interface 0 before use [ 419.333713][T11325] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1966'. [ 419.681918][ T928] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 419.749171][T11313] tipc: Enabling of bearer rejected, failed to enable media [ 419.873726][ T928] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 419.892551][ T928] usb 1-1: language id specifier not provided by device, defaulting to English [ 419.919790][ T928] usb 1-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.40 [ 419.939609][ T928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.948190][ T928] usb 1-1: Product: syz [ 419.960646][ T928] usb 1-1: Manufacturer: 꼳ฐḼ馊ᠪ횔ꑇ꛲⨀맾ߟな㡰홖⒙ᒅ煗ﵙ [ 419.970655][ T928] usb 1-1: SerialNumber: syz [ 420.005641][ T928] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 420.036237][T11191] chnl_net:caif_netlink_parms(): no params data found [ 420.141831][ T5108] Bluetooth: hci2: command tx timeout [ 420.386288][ T928] usb 1-1: USB disconnect, device number 8 [ 420.960049][T11191] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.981984][T11191] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.018773][T11191] bridge_slave_0: entered allmulticast mode [ 421.043410][T11191] bridge_slave_0: entered promiscuous mode [ 421.068857][T11191] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.076417][T11191] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.092764][T11191] bridge_slave_1: entered allmulticast mode [ 421.100511][T11191] bridge_slave_1: entered promiscuous mode [ 421.385964][T11191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.459457][T11191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.800309][T11191] team0: Port device team_slave_0 added [ 421.816599][T11191] team0: Port device team_slave_1 added [ 421.847153][T10955] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 422.072277][T11191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.079267][T11191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.158659][T11191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.180645][T10955] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 422.207514][T10955] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 422.232845][ T5108] Bluetooth: hci2: command tx timeout [ 422.262813][T11191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.269809][T11191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.345852][T11191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.382676][T10955] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 422.681294][T11369] loop5: detected capacity change from 0 to 64 [ 422.925074][T11191] hsr_slave_0: entered promiscuous mode [ 422.932630][T11191] hsr_slave_1: entered promiscuous mode [ 422.939038][T11191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.947141][T11191] Cannot create hsr debugfs directory [ 423.346789][T11310] chnl_net:caif_netlink_parms(): no params data found [ 423.813960][T11382] loop0: detected capacity change from 0 to 32768 [ 423.837532][T11382] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1984 (11382) [ 423.864268][T11382] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 423.950463][T11382] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 423.962197][T11382] BTRFS info (device loop0): using free-space-tree [ 424.215237][ T51] team0: left allmulticast mode [ 424.220248][ T51] team_slave_0: left allmulticast mode [ 424.246898][ T51] team_slave_1: left allmulticast mode [ 424.256669][ T51] team0: left promiscuous mode [ 424.261540][ T51] team_slave_0: left promiscuous mode [ 424.269297][ T51] team_slave_1: left promiscuous mode [ 424.275278][ T51] bridge0: port 3(team0) entered disabled state [ 424.289668][ T51] bridge_slave_1: left allmulticast mode [ 424.295616][ T51] bridge_slave_1: left promiscuous mode [ 424.301953][ T5108] Bluetooth: hci2: command tx timeout [ 424.311671][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.346200][ T51] bridge_slave_0: left allmulticast mode [ 424.355376][ T51] bridge_slave_0: left promiscuous mode [ 424.361166][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.365288][ T7766] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 425.074054][ T5106] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 425.092420][ T5106] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 425.112507][ T5106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 425.120711][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.132801][ T5106] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 425.133457][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.141346][ T5106] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 425.156726][ T5106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 425.158344][ T51] bond0 (unregistering): Released all slaves [ 425.186988][T11310] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.194949][T11310] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.202668][T11310] bridge_slave_0: entered allmulticast mode [ 425.210015][T11310] bridge_slave_0: entered promiscuous mode [ 425.222034][T11310] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.247813][T11310] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.276318][T11310] bridge_slave_1: entered allmulticast mode [ 425.290529][T11310] bridge_slave_1: entered promiscuous mode [ 425.479164][T11310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.508287][T11310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.545747][T11426] loop0: detected capacity change from 0 to 256 [ 425.702096][T11310] team0: Port device team_slave_0 added [ 425.716303][T11310] team0: Port device team_slave_1 added [ 425.888548][T11310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.908761][T11310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.938020][T11310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.976353][ T51] hsr_slave_0: left promiscuous mode [ 425.990074][ T51] hsr_slave_1: left promiscuous mode [ 425.998530][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.018815][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.395891][ T5106] Bluetooth: hci2: command tx timeout [ 426.662714][ T51] team0 (unregistering): Port device team_slave_1 removed [ 426.732358][ T51] team0 (unregistering): Port device team_slave_0 removed [ 427.271165][ T5106] Bluetooth: hci0: command tx timeout [ 427.524230][T10955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.540554][T11310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.547762][T11310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.574056][T11310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.658486][T10955] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.789284][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.796502][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.819815][T11310] hsr_slave_0: entered promiscuous mode [ 427.829628][T11310] hsr_slave_1: entered promiscuous mode [ 427.836258][T11310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.844122][T11310] Cannot create hsr debugfs directory [ 427.886179][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.893381][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.073819][T11191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 428.142902][T11191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 428.163675][T11191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 428.281061][T11191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 428.319305][T11418] chnl_net:caif_netlink_parms(): no params data found [ 428.380544][ T51] IPVS: stop unused estimator thread 0... [ 428.491426][ T5108] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 428.509536][ T5108] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 428.519786][ T5108] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 428.532918][ T5108] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 428.547107][ T5108] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 428.555041][ T5108] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 428.773922][T11418] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.781173][T11418] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.788836][T11418] bridge_slave_0: entered allmulticast mode [ 428.807612][T11418] bridge_slave_0: entered promiscuous mode [ 428.877117][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.949149][T11418] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.957431][T11418] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.964955][T11418] bridge_slave_1: entered allmulticast mode [ 428.974999][T11418] bridge_slave_1: entered promiscuous mode [ 429.041223][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.087001][T11418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.119484][T11418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.157834][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.228116][T10955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.281308][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.326516][T11418] team0: Port device team_slave_0 added [ 429.342475][ T5108] Bluetooth: hci0: command tx timeout [ 429.367475][T11418] team0: Port device team_slave_1 added [ 429.465788][T11418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.473142][T11418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.500054][T11418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.519430][T11418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.527495][T11418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.554144][T11418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.757341][T11418] hsr_slave_0: entered promiscuous mode [ 429.764191][T11418] hsr_slave_1: entered promiscuous mode [ 429.770464][T11418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.779350][T11418] Cannot create hsr debugfs directory [ 429.979004][T11191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.017543][ T51] bridge_slave_1: left allmulticast mode [ 430.023663][ T51] bridge_slave_1: left promiscuous mode [ 430.029424][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.041003][ T51] bridge_slave_0: left allmulticast mode [ 430.047023][ T51] bridge_slave_0: left promiscuous mode [ 430.053941][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.500849][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.514647][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.525810][ T51] bond0 (unregistering): Released all slaves [ 430.556527][T11439] chnl_net:caif_netlink_parms(): no params data found [ 430.588184][T11310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 430.629124][ T5108] Bluetooth: hci4: command tx timeout [ 430.654466][T10955] veth0_vlan: entered promiscuous mode [ 430.678668][T11310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 430.714003][T11310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 430.892817][T11310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 430.978818][T11191] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.095456][T10955] veth1_vlan: entered promiscuous mode [ 431.179998][T11418] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.218396][ T928] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.225570][ T928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.263525][ T51] hsr_slave_0: left promiscuous mode [ 431.269796][ T51] hsr_slave_1: left promiscuous mode [ 431.279033][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.288525][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.299818][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.307825][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.338199][ T51] veth1_macvtap: left promiscuous mode [ 431.344173][ T51] veth0_macvtap: left promiscuous mode [ 431.349851][ T51] veth1_vlan: left promiscuous mode [ 431.358276][ T51] veth0_vlan: left promiscuous mode [ 431.421922][ T5108] Bluetooth: hci0: command tx timeout [ 431.948192][ T51] team0 (unregistering): Port device team_slave_1 removed [ 431.997474][ T51] team0 (unregistering): Port device team_slave_0 removed [ 432.396292][T11439] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.405411][T11439] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.413089][T11439] bridge_slave_0: entered allmulticast mode [ 432.420262][T11439] bridge_slave_0: entered promiscuous mode [ 432.436307][ T928] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.443521][ T928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.485213][T11418] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.520127][T11439] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.527606][T11439] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.535211][T11439] bridge_slave_1: entered allmulticast mode [ 432.551054][T11439] bridge_slave_1: entered promiscuous mode [ 432.647415][T11418] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.674644][T11439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.710245][ T5108] Bluetooth: hci4: command tx timeout [ 432.712506][T11439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.785227][T11418] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.856424][T11439] team0: Port device team_slave_0 added [ 432.874532][T11439] team0: Port device team_slave_1 added [ 432.953402][T10955] veth0_macvtap: entered promiscuous mode [ 432.979710][T11439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.991979][T11439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.019234][T11439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.038576][T10955] veth1_macvtap: entered promiscuous mode [ 433.066033][T11439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.077606][T11439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.107163][T11439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.307495][T11439] hsr_slave_0: entered promiscuous mode [ 433.332943][T11439] hsr_slave_1: entered promiscuous mode [ 433.339722][T11439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.347970][T11439] Cannot create hsr debugfs directory [ 433.388924][T10955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.400893][T10955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.416141][T10955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.427678][T10955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.440116][T10955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.449518][T11418] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 433.476877][T11418] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 433.502289][ T5108] Bluetooth: hci0: command tx timeout [ 433.521771][T10955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.535813][T10955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.546353][T10955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.558084][T10955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.569952][T10955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.577719][T11418] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 433.589738][T11418] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 433.666830][T11310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.689665][T10955] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.698957][T10955] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.708424][T10955] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.717694][T10955] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.817613][T11191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.889335][T11310] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.980947][ T5651] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.988158][ T5651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.007178][ T5651] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.014393][ T5651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.193739][T11471] loop5: detected capacity change from 0 to 256 [ 434.204856][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.242154][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.534535][T11191] veth0_vlan: entered promiscuous mode [ 434.648418][T11191] veth1_vlan: entered promiscuous mode [ 434.800549][ T5108] Bluetooth: hci4: command tx timeout [ 434.967538][T11418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.190601][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.219390][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.317865][T11418] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.465517][T11191] veth0_macvtap: entered promiscuous mode [ 435.496605][ T5651] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.503930][ T5651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.548157][T11191] veth1_macvtap: entered promiscuous mode [ 435.596217][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.603451][ T5224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.628816][T11191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.649201][T11191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.660244][T11191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.672650][T11191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.682531][T11191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.696585][T11191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.712004][T11191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.846200][T11191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.857270][T11191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.867742][T11191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.879966][T11191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.890323][T11191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.901162][T11191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.927763][T11191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.941071][T11191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.950861][T11191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.959664][T11191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.968526][T11191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.989448][T11439] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 436.003027][T11439] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 436.017144][T11439] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 436.032369][T11439] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 436.054933][T11310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.562362][ T2475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.578866][ T2475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.911809][ T5108] Bluetooth: hci4: command tx timeout [ 437.353533][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.382290][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.635338][T11439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.708269][T11439] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.752959][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.760109][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.792855][ T5221] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.800018][ T5221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.833927][T11418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.914185][T11310] veth0_vlan: entered promiscuous mode [ 437.976918][T11439] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 437.988018][ T5162] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 437.988902][T11439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 438.058848][T11310] veth1_vlan: entered promiscuous mode [ 438.087089][T11418] veth0_vlan: entered promiscuous mode [ 438.137512][T11418] veth1_vlan: entered promiscuous mode [ 438.183707][T11310] veth0_macvtap: entered promiscuous mode [ 438.194354][ T5162] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 438.206825][T11310] veth1_macvtap: entered promiscuous mode [ 438.220466][ T5162] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.237343][ T5162] usb 2-1: config 0 descriptor?? [ 438.269893][ T5162] cp210x 2-1:0.0: cp210x converter detected [ 438.306652][T11418] veth0_macvtap: entered promiscuous mode [ 438.340441][T11310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.364562][T11310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.385466][T11310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.421770][T11310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.441952][T11310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.468524][T11310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.490040][T11310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.511192][T11310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.529827][T11310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.559903][T11418] veth1_macvtap: entered promiscuous mode [ 438.589419][T11310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.616438][T11310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.661715][T11310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.691800][T11310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.705641][ T5162] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 438.721984][T11310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.761699][T11310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.772248][T11310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.784893][T11510] loop2: detected capacity change from 0 to 32768 [ 438.788108][T11310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.809635][T11310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.835217][T11510] find_entry called with index = 0 [ 438.853881][T11510] read_mapping_page failed! [ 438.858461][T11510] ERROR: (device loop2): txCommit: [ 438.858461][T11510] [ 438.875836][T11510] ERROR: (device loop2): diFree: numfree > numinos [ 438.875836][T11510] [ 438.946095][T11310] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.956570][ T5162] usb 2-1: cp210x converter now attached to ttyUSB0 [ 438.967654][T11310] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.985189][T11310] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.994176][T11310] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.065046][T11439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.084943][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.104351][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.114611][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.129408][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.145075][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.156775][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.166972][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.170683][ T5162] usb 2-1: USB disconnect, device number 9 [ 439.178211][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.194350][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.205681][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.213073][ T5162] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 439.218707][T11418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.295123][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.309912][ T5162] cp210x 2-1:0.0: device disconnected [ 439.322871][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.342055][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.370810][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.392112][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.412846][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.435883][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.458189][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.482287][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.521660][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.545413][T11418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.566950][T11531] usb usb9: check_ctrlrecip: process 11531 (syz.2.2023) requesting ep 01 but needs 81 [ 439.577673][T11531] usb usb9: usbfs: process 11531 (syz.2.2023) did not claim interface 0 before use [ 439.598853][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.610336][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.619709][T11533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2023'. [ 439.647421][T11418] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.656728][T11418] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.666424][T11418] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.675606][T11418] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.964391][ T5224] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 439.992396][T11537] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 440.021120][ T2475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.038407][ T2475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.138600][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.152649][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.181248][ T5224] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 440.206859][T11539] loop1: detected capacity change from 0 to 2048 [ 440.212167][ T5224] usb 3-1: language id specifier not provided by device, defaulting to English [ 440.213566][T11439] veth0_vlan: entered promiscuous mode [ 440.240477][ T2475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.257886][T11539] UDF-fs: warning (device loop1): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 440.268438][ T2475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.280054][ T5224] usb 3-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.40 [ 440.294443][ T5224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.320199][ T5224] usb 3-1: Product: syz [ 440.325544][ T5224] usb 3-1: Manufacturer: 꼳ฐḼ馊ᠪ횔ꑇ꛲⨀맾ߟな㡰홖⒙ᒅ煗ﵙ [ 440.326443][T11439] veth1_vlan: entered promiscuous mode [ 440.359174][ T5224] usb 3-1: SerialNumber: syz [ 440.394792][ T5224] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 440.421043][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1959'. [ 440.432102][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.450905][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.559311][T11439] veth0_macvtap: entered promiscuous mode [ 440.600663][T11439] veth1_macvtap: entered promiscuous mode [ 440.728065][T11439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.769620][T11439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.781961][T11495] usb 3-1: USB disconnect, device number 6 [ 440.782210][T11439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.802975][T11439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.814509][T11439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.825387][T11439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.835624][T11439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.849524][T11439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.876993][T11439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.898350][T11439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.921712][T11439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.961801][T11439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.010780][T11439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.099212][T11439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.149778][T11439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.208911][T11439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.259303][T11439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.298607][T11439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.356096][T11439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.397822][T11439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.460227][T11439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.510742][T11439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.567628][T11439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.614607][T11439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.655794][T11439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.689311][T11439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.746881][T11439] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.786167][T11439] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.826382][T11439] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.855795][T11439] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.144718][T11550] loop4: detected capacity change from 0 to 32768 [ 442.217601][T11566] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 442.217732][T11550] find_entry called with index = 0 [ 442.248160][T11550] read_mapping_page failed! [ 442.257642][T11550] ERROR: (device loop4): txCommit: [ 442.257642][T11550] [ 442.301910][T11550] ERROR: (device loop4): diFree: numfree > numinos [ 442.301910][T11550] [ 442.355389][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.380392][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.541455][T11572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2039'. [ 442.548940][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.583136][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.670556][T11575] loop5: detected capacity change from 0 to 2048 [ 442.718807][T11575] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.001018][T11575] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 56 with max blocks 4 with error 28 [ 443.122339][T11575] EXT4-fs (loop5): This should not happen!! Data will be lost [ 443.122339][T11575] [ 443.205730][T11575] EXT4-fs (loop5): Total free blocks count 0 [ 443.340351][T11575] EXT4-fs (loop5): Free/Dirty block details [ 443.539808][T11575] EXT4-fs (loop5): free_blocks=0 [ 443.751537][T11575] EXT4-fs (loop5): dirty_blocks=0 [ 443.808402][T11575] EXT4-fs (loop5): Block reservation details [ 443.851506][T11575] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 444.749570][T11597] loop3: detected capacity change from 0 to 512 [ 444.776964][T11597] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c018, mo2=0103] [ 444.801410][T11599] loop4: detected capacity change from 0 to 1024 [ 444.811931][T11597] System zones: 1-12 [ 444.816550][T11597] EXT4-fs error (device loop3): ext4_init_orphan_info:586: comm syz.3.2047: inode #0: comm syz.3.2047: iget: illegal inode # [ 444.843345][T11597] EXT4-fs (loop3): get orphan inode failed [ 444.848848][ T5090] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.849506][T11597] EXT4-fs (loop3): mount failed [ 445.028770][ T5213] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 445.040913][T11573] loop1: detected capacity change from 0 to 40427 [ 445.143915][T11573] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 445.162515][T11573] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 445.242222][ T5213] usb 1-1: Using ep0 maxpacket: 16 [ 445.260666][ T5213] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.262558][T11573] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 445.302019][ T5213] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 445.375988][ T5213] usb 1-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=91.ed [ 445.432574][ T5213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.474243][ T5213] usb 1-1: Product: syz [ 445.489231][ T5213] usb 1-1: Manufacturer: syz [ 445.509226][ T5213] usb 1-1: SerialNumber: syz [ 445.523546][ T5213] usb 1-1: config 0 descriptor?? [ 445.792387][ T5106] Bluetooth: hci6: sending frame failed (-49) [ 445.801031][ T5108] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 445.882985][ T5162] usb 1-1: USB disconnect, device number 9 [ 446.089759][T11627] loop2: detected capacity change from 0 to 512 [ 446.118776][T11627] EXT4-fs (loop2): filesystem is read-only [ 446.369584][T11638] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 0, id = 0 [ 446.383808][T11634] IPVS: stopping backup sync thread 11638 ... [ 446.528542][ T5108] block nbd3: Receive control failed (result -32) [ 446.549895][T11637] block nbd3: shutting down sockets [ 448.149121][T11615] loop5: detected capacity change from 0 to 32768 [ 448.264397][T11615] find_entry called with index = 0 [ 448.302256][T11615] read_mapping_page failed! [ 448.306821][T11615] ERROR: (device loop5): txCommit: [ 448.306821][T11615] [ 448.317964][T11658] loop2: detected capacity change from 0 to 1024 [ 448.391507][T11615] ERROR: (device loop5): diFree: numfree > numinos [ 448.391507][T11615] [ 448.683106][ T29] audit: type=1326 audit(1720971196.948:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11654 comm="syz.0.2068" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ddeb75bd9 code=0x0 [ 449.766889][T11679] loop4: detected capacity change from 0 to 1024 [ 449.812495][T11679] EXT4-fs: Ignoring removed orlov option [ 449.830953][T11679] EXT4-fs: Ignoring removed nomblk_io_submit option [ 449.951276][T11679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.185333][T11688] loop0: detected capacity change from 0 to 256 [ 450.202356][T11689] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2075'. [ 450.258560][T11310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.593870][T11701] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 454.232419][T11712] loop4: detected capacity change from 0 to 256 [ 454.498292][ T5108] block nbd5: Receive control failed (result -32) [ 454.549507][T11712] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 455.461768][T11716] tracefs: Unknown parameter 'z0' [ 455.801104][ T29] audit: type=1326 audit(1720971204.138:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.1.2087" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96f2975bd9 code=0x0 [ 456.226722][T11704] block nbd5: shutting down sockets [ 458.278729][T11746] loop3: detected capacity change from 0 to 256 [ 458.441451][T11746] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x4fb01312, utbl_chksum : 0xe619d30d) [ 459.635906][T11753] loop5: detected capacity change from 0 to 512 [ 459.643714][T11754] loop0: detected capacity change from 0 to 256 [ 459.705129][T11753] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 459.789076][T11754] FAT-fs (loop0): Directory bread(block 64) failed [ 459.799497][T11753] EXT4-fs (loop5): 1 orphan inode deleted [ 459.805698][T11754] FAT-fs (loop0): Directory bread(block 65) failed [ 459.820748][T11754] FAT-fs (loop0): Directory bread(block 66) failed [ 459.833250][T11753] EXT4-fs (loop5): 1 truncate cleaned up [ 459.858744][T11754] FAT-fs (loop0): Directory bread(block 67) failed [ 459.872380][T11753] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.886974][T11754] FAT-fs (loop0): Directory bread(block 68) failed [ 459.914494][T11754] FAT-fs (loop0): Directory bread(block 69) failed [ 459.921139][T11754] FAT-fs (loop0): Directory bread(block 70) failed [ 459.971741][T11754] FAT-fs (loop0): Directory bread(block 71) failed [ 459.978389][T11754] FAT-fs (loop0): Directory bread(block 72) failed [ 459.992494][T11754] FAT-fs (loop0): Directory bread(block 73) failed [ 460.188235][T11765] loop1: detected capacity change from 0 to 256 [ 460.235669][T11765] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 565.941626][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 565.948616][ C0] rcu: 1-...!: (1 GPs behind) idle=8134/1/0x4000000000000000 softirq=36595/36598 fqs=0 [ 565.960288][ C0] rcu: (detected by 0, t=10505 jiffies, g=52061, q=473 ncpus=2) [ 565.968018][ C0] Sending NMI from CPU 0 to CPUs 1: [ 565.973232][ C1] NMI backtrace for cpu 1 [ 565.973244][ C1] CPU: 1 PID: 11763 Comm: syz.3.2102 Not tainted 6.10.0-rc7-syzkaller-00266-g4d145e3f830b #0 [ 565.973268][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 565.973282][ C1] RIP: 0010:validate_chain+0x581/0x5900 [ 565.973318][ C1] Code: cd ca 8b 48 c7 c6 00 e7 ca 8b e9 5c 04 00 00 e8 35 ba 38 03 89 c3 e8 5e fe fe ff 85 db 0f 85 3a 04 00 00 48 c7 c0 ac c7 ad 8f <48> c1 e8 03 42 0f b6 04 20 84 c0 0f 85 71 48 00 00 83 3d 13 a8 3a [ 565.973338][ C1] RSP: 0018:ffffc90000a18720 EFLAGS: 00000087 [ 565.973359][ C1] RAX: ffffffff8fadc7ac RBX: 00000000000a4021 RCX: 1ffff92000143104 [ 565.973377][ C1] RDX: 0000000000000001 RSI: ffff88802a83c6e0 RDI: ffff88802a83bc00 [ 565.973393][ C1] RBP: ffffc90000a18a20 R08: ffffffff92fad587 R09: 1ffffffff25f5ab0 [ 565.973411][ C1] R10: dffffc0000000000 R11: fffffbfff25f5ab1 R12: dffffc0000000000 [ 565.973429][ C1] R13: ffff88802a83c700 R14: 58cce5e7c8d5ebdc R15: ffff88802a83bc00 [ 565.973454][ C1] FS: 00007fba3bdcc6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 565.973475][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 565.973491][ C1] CR2: 0000001b2d70bff8 CR3: 000000005dc20000 CR4: 0000000000350ef0 [ 565.973510][ C1] Call Trace: [ 565.973519][ C1] [ 565.973529][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 565.973557][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 565.973584][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 565.973622][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 565.973651][ C1] ? nmi_handle+0x151/0x5a0 [ 565.973687][ C1] ? nmi_handle+0x2a/0x5a0 [ 565.973724][ C1] ? validate_chain+0x581/0x5900 [ 565.973754][ C1] ? default_do_nmi+0x63/0x160 [ 565.973782][ C1] ? exc_nmi+0x123/0x1f0 [ 565.973808][ C1] ? end_repeat_nmi+0xf/0x53 [ 565.973839][ C1] ? validate_chain+0x581/0x5900 [ 565.973870][ C1] ? validate_chain+0x581/0x5900 [ 565.973902][ C1] ? validate_chain+0x581/0x5900 [ 565.973932][ C1] [ 565.973940][ C1] [ 565.973950][ C1] ? __pfx_validate_chain+0x10/0x10 [ 565.973979][ C1] ? validate_chain+0x11e/0x5900 [ 565.974010][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 565.974040][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 565.974067][ C1] ? __pfx_validate_chain+0x10/0x10 [ 565.974105][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 565.974129][ C1] ? mark_lock+0x9a/0x350 [ 565.974157][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 565.974181][ C1] ? mark_lock+0x9a/0x350 [ 565.974210][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 565.974234][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 565.974267][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 565.974291][ C1] ? mark_lock+0x9a/0x350 [ 565.974320][ C1] __lock_acquire+0x1346/0x1fd0 [ 565.974356][ C1] lock_acquire+0x1ed/0x550 [ 565.974380][ C1] ? advance_sched+0xa02/0xca0 [ 565.974419][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 565.974447][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 565.974476][ C1] ? advance_sched+0x9b4/0xca0 [ 565.974511][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 565.974546][ C1] ? __pfx_lock_release+0x10/0x10 [ 565.974575][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 565.974600][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 565.974634][ C1] ? taprio_set_budgets+0x32c/0x370 [ 565.974657][ C1] ? advance_sched+0xa02/0xca0 [ 565.974694][ C1] advance_sched+0xa1e/0xca0 [ 565.974730][ C1] ? advance_sched+0xa02/0xca0 [ 565.974776][ C1] ? __pfx_advance_sched+0x10/0x10 [ 565.974813][ C1] __hrtimer_run_queues+0x59d/0xd50 [ 565.974848][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 565.974886][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 565.974921][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 565.974945][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 565.974976][ C1] hrtimer_interrupt+0x396/0x990 [ 565.975025][ C1] __sysvec_apic_timer_interrupt+0x112/0x3f0 [ 565.975063][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 565.975097][ C1] [ 565.975104][ C1] [ 565.975113][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 565.975151][ C1] RIP: 0010:finish_task_switch+0x1ea/0x870 [ 565.975184][ C1] Code: c9 50 e8 99 c9 0b 00 48 83 c4 08 4c 89 f7 e8 cd 38 00 00 0f 1f 44 00 00 4c 89 f7 e8 10 9a 2a 0a e8 bb ed 36 00 fb 48 8b 5d c0 <48> 8d bb f8 15 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc [ 565.975204][ C1] RSP: 0018:ffffc90004f4f1e8 EFLAGS: 00000282 [ 565.975223][ C1] RAX: 991013b04cceb700 RBX: ffff88802a83bc00 RCX: ffffffff947a5603 [ 565.975241][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: ffffffff8c202900 [ 565.975259][ C1] RBP: ffffc90004f4f230 R08: ffffffff8fad956f R09: 1ffffffff1f5b2ad [ 565.975277][ C1] R10: dffffc0000000000 R11: fffffbfff1f5b2ae R12: 1ffff110172a7e9f [ 565.975294][ C1] R13: dffffc0000000000 R14: ffff8880b953e780 R15: ffff8880b953f4f8 [ 565.975324][ C1] ? finish_task_switch+0x1e5/0x870 [ 565.975360][ C1] __schedule+0x17f0/0x4a20 [ 565.975396][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 565.975425][ C1] ? __pfx___schedule+0x10/0x10 [ 565.975456][ C1] ? __pfx_lock_release+0x10/0x10 [ 565.975492][ C1] ? schedule+0x90/0x320 [ 565.975515][ C1] schedule+0x14b/0x320 [ 565.975541][ C1] schedule_timeout+0xb0/0x310 [ 565.975577][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 565.975619][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 565.975643][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 565.975678][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 565.975708][ C1] unix_wait_for_peer+0x250/0x340 [ 565.975739][ C1] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 565.975766][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 565.975791][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 565.975829][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 565.975854][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 565.975881][ C1] unix_dgram_sendmsg+0x127a/0x1f80 [ 565.975926][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 565.975953][ C1] ? iovec_from_user+0x61/0x240 [ 565.975983][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 565.976008][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 565.976046][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 565.976070][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 565.976095][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 565.976126][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 565.976153][ C1] __sock_sendmsg+0x223/0x270 [ 565.976179][ C1] ____sys_sendmsg+0x525/0x7d0 [ 565.976211][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 565.976241][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 565.976276][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 565.976303][ C1] ? __might_fault+0xaa/0x120 [ 565.976343][ C1] __sys_sendmmsg+0x3b2/0x740 [ 565.976382][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 565.976435][ C1] ? wake_up_q+0xdc/0x120 [ 565.976461][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 565.976488][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 565.976512][ C1] ? futex_wait+0x285/0x360 [ 565.976541][ C1] ? __pfx_futex_wait+0x10/0x10 [ 565.976576][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 565.976600][ C1] ? unix_dgram_connect+0xb5b/0xdb0 [ 565.976631][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 565.976656][ C1] ? do_futex+0x33b/0x560 [ 565.976682][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 565.976707][ C1] ? __sys_connect+0x16b/0x310 [ 565.976742][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 565.976769][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 565.976795][ C1] ? do_syscall_64+0x100/0x230 [ 565.976834][ C1] __x64_sys_sendmmsg+0xa0/0xb0 [ 565.976867][ C1] do_syscall_64+0xf3/0x230 [ 565.976907][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.976943][ C1] RIP: 0033:0x7fba3af75bd9 [ 565.976962][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.976983][ C1] RSP: 002b:00007fba3bdcc048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 565.977005][ C1] RAX: ffffffffffffffda RBX: 00007fba3b103f60 RCX: 00007fba3af75bd9 [ 565.977023][ C1] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000007 [ 565.977038][ C1] RBP: 00007fba3afe4e60 R08: 0000000000000000 R09: 0000000000000000 [ 565.977053][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.977068][ C1] R13: 000000000000000b R14: 00007fba3b103f60 R15: 00007fff5d706d28 [ 565.977095][ C1] [ 565.977224][ C0] rcu: rcu_preempt kthread starved for 10505 jiffies! g52061 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 566.796514][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 566.806491][ C0] rcu: RCU grace-period kthread stack dump: [ 566.812378][ C0] task:rcu_preempt state:R running task stack:25136 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 566.824134][ C0] Call Trace: [ 566.827431][ C0] [ 566.830373][ C0] __schedule+0x17e8/0x4a20 [ 566.834914][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 566.840568][ C0] ? __pfx___schedule+0x10/0x10 [ 566.845445][ C0] ? __pfx_lock_release+0x10/0x10 [ 566.850484][ C0] ? __asan_memset+0x23/0x50 [ 566.855097][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 566.860925][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 566.867270][ C0] ? schedule+0x90/0x320 [ 566.871531][ C0] schedule+0x14b/0x320 [ 566.875709][ C0] schedule_timeout+0x1be/0x310 [ 566.880592][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 566.885993][ C0] ? __pfx_process_timeout+0x10/0x10 [ 566.891303][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 566.896950][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 566.902519][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 566.907404][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 566.912358][ C0] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 566.918467][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 566.923765][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 566.929679][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 566.935330][ C0] ? finish_swait+0xd4/0x1e0 [ 566.939937][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 566.944544][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 566.949753][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 566.955664][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 566.961310][ C0] ? __kthread_parkme+0x169/0x1d0 [ 566.966353][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 566.971652][ C0] kthread+0x2f2/0x390 [ 566.975745][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 566.980957][ C0] ? __pfx_kthread+0x10/0x10 [ 566.985565][ C0] ret_from_fork+0x4d/0x80 [ 566.990003][ C0] ? __pfx_kthread+0x10/0x10 [ 566.994612][ C0] ret_from_fork_asm+0x1a/0x30 [ 566.999417][ C0] [ 567.002439][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 567.008762][ C0] CPU: 0 PID: 2475 Comm: kworker/u8:8 Not tainted 6.10.0-rc7-syzkaller-00266-g4d145e3f830b #0 [ 567.019007][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 567.029068][ C0] Workqueue: events_unbound toggle_allocation_gate [ 567.035773][ C0] RIP: 0010:smp_call_function_many_cond+0x1860/0x29d0 [ 567.042559][ C0] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 c9 0c 0c 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 74 08 0c 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 58 08 [ 567.062191][ C0] RSP: 0018:ffffc90009b7f700 EFLAGS: 00000293 [ 567.068279][ C0] RAX: ffffffff818a1fc8 RBX: 1ffff110172a8899 RCX: ffff8880298b9e00 [ 567.076264][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 567.084242][ C0] RBP: ffffc90009b7f8e0 R08: ffffffff818a1f97 R09: 1ffffffff25f5ab0 [ 567.092223][ C0] R10: dffffc0000000000 R11: fffffbfff25f5ab1 R12: dffffc0000000000 [ 567.100202][ C0] R13: ffff8880b95444c8 R14: ffff8880b943f8c0 R15: 0000000000000001 [ 567.108188][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 567.117122][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 567.123714][ C0] CR2: 00007f85dd5e23a0 CR3: 000000005e958000 CR4: 0000000000350ef0 [ 567.131781][ C0] Call Trace: [ 567.135063][ C0] [ 567.137910][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 567.144264][ C0] ? print_other_cpu_stall+0x1470/0x15a0 [ 567.149905][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.155550][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 567.160602][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 567.166430][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.172078][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.177728][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 567.184016][ C0] ? rcu_sched_clock_irq+0x9f4/0x10a0 [ 567.189407][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.195063][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 567.200710][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.206355][ C0] ? hrtimer_run_queues+0x16c/0x460 [ 567.211574][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.217218][ C0] ? acct_account_cputime+0x207/0x210 [ 567.222610][ C0] ? update_process_times+0x1ce/0x230 [ 567.227997][ C0] ? tick_nohz_handler+0x37c/0x500 [ 567.233138][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 567.238623][ C0] ? __hrtimer_run_queues+0x553/0xd50 [ 567.244018][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 567.250031][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 567.255774][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.261425][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 567.267522][ C0] ? hrtimer_interrupt+0x396/0x990 [ 567.272683][ C0] ? __sysvec_apic_timer_interrupt+0x112/0x3f0 [ 567.278863][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 567.284688][ C0] [ 567.287621][ C0] [ 567.290563][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 567.296750][ C0] ? smp_call_function_many_cond+0x1847/0x29d0 [ 567.302922][ C0] ? smp_call_function_many_cond+0x1878/0x29d0 [ 567.309101][ C0] ? smp_call_function_many_cond+0x1860/0x29d0 [ 567.315282][ C0] ? kmem_cache_alloc_bulk_noprof+0x146/0x770 [ 567.321363][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 567.326401][ C0] ? kmem_cache_alloc_bulk_noprof+0x146/0x770 [ 567.332497][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.338144][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 567.344491][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.350148][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 567.355187][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 567.360323][ C0] text_poke_bp_batch+0x9ef/0xb30 [ 567.365360][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.371015][ C0] ? kmem_cache_alloc_bulk_noprof+0x147/0x770 [ 567.377092][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 567.382655][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.388302][ C0] ? srso_alias_return_thunk+0x4/0xfbef5 [ 567.393945][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 567.400205][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.405856][ C0] text_poke_finish+0x30/0x50 [ 567.410542][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 567.416539][ C0] static_key_disable_cpuslocked+0xce/0x1c0 [ 567.422467][ C0] static_key_disable+0x1a/0x20 [ 567.427342][ C0] toggle_allocation_gate+0x1b8/0x250 [ 567.432749][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 567.438660][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 567.445016][ C0] ? process_scheduled_works+0x945/0x1830 [ 567.450744][ C0] process_scheduled_works+0xa2e/0x1830 [ 567.456335][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 567.462336][ C0] ? assign_work+0x364/0x3d0 [ 567.466941][ C0] worker_thread+0x86d/0xd50 [ 567.471558][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 567.477473][ C0] ? __kthread_parkme+0x169/0x1d0 [ 567.482517][ C0] ? __pfx_worker_thread+0x10/0x10 [ 567.487641][ C0] kthread+0x2f2/0x390 [ 567.491727][ C0] ? __pfx_worker_thread+0x10/0x10 [ 567.496849][ C0] ? __pfx_kthread+0x10/0x10 [ 567.501461][ C0] ret_from_fork+0x4d/0x80 [ 567.506021][ C0] ? __pfx_kthread+0x10/0x10 [ 567.510718][ C0] ret_from_fork_asm+0x1a/0x30 [ 567.515525][ C0]