last executing test programs: 1m46.03016856s ago: executing program 4 (id=234): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xb, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r1}, &(0x7f0000000540), &(0x7f0000000580)='%pI4 \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x35) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002200f2ff090001007770616e3100"], 0x20}}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000640)='cpu.weight.nice\x00', 0x2, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0xfeff, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1, {[@timestamp={0x44, 0x10, 0x7d, 0x0, 0xc, [0x0, 0x2, 0xf98]}, @noop, @ssrr={0x89, 0x17, 0x52, [@remote, @dev={0xac, 0x14, 0x14, 0x36}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101]}, @generic={0x83, 0x12, "7d0300c31167cc04ff00000100000000"}]}}}}}}}, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0x12) 1m45.424379566s ago: executing program 4 (id=235): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_read_part_table(0x1065, &(0x7f0000002100)="$eJzsz7FNxEAQhtF/vV5pndKA2yAkQCIhBFEOIFECFRASkdMBXdCCGzCSse46uLvgvXDm00gTzmoa+tVXcv1W39OTvCR5aklq6rGak++f+5KkfSw9tdTcjNumJ3PZq5qMd8tD2vpcftdhm5Xb6b9qezS8zofD9fHzhK8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX6CwAA//9BDg4U") r1 = getpid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$bt_hci(r2, 0x0, 0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000005840)={0x1ff}) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) 18.059408679s ago: executing program 0 (id=322): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYRES8=0x0, @ANYRES32=r1, @ANYRESOCT=r5, @ANYRES16=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000000040)=0x2388, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r6, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r6, &(0x7f0000000180)={0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000001740)=""/4100, 0xa15b0}, {&(0x7f00000001c0)=""/57}], 0x1, 0x0, 0x63695dc5e766}, 0x700) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0) ftruncate(r8, 0xde34) msgget$private(0x0, 0x51) 16.737112377s ago: executing program 0 (id=324): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)=""/187, 0x32, 0xbb, 0x1}, 0x20) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x0, 0xb0}, {0x6}]}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000200)={[{@data_err_abort}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) syz_emit_ethernet(0xfffffffffffffd4d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8002, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x100000}, 0x48) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) syz_emit_ethernet(0x10ab, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5451, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f00000000c0)) inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x5421, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo\x00') ioctl$NS_GET_OWNER_UID(r3, 0xb704, 0x0) 15.607886632s ago: executing program 2 (id=326): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRESHEX=r0, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES16=r1, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020", @ANYRES8=r1, @ANYRES32], 0x5c, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000002d80)={0x2020}, 0x2025) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r7, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 15.336710862s ago: executing program 4 (id=236): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = dup2(0xffffffffffffffff, r1) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000407d1eb42d000000090001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@bloom_filter={0x1e, 0x2, 0x3, 0x80000001, 0x1030, 0xffffffffffffffff, 0x3ff80000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5, 0x7}, 0x48) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000500)={0x24, &(0x7f0000000580)={0x40, 0x0, 0x68, {0x68, 0xe, "d1abc63f6e686bbc4d2183b32ffe220d53e5e35b6655581f5be24ea18556cec844dbee46eb81659a4e7d27f02bba9f8ec90570d354e15c3b4793d381da5b93bdc6740006e4f7f9d35ca9b58748760a716bac1b5e2bd7d9bb972a15cd947a20867bff1d98527e"}}, &(0x7f0000000300)=ANY=[@ANYBLOB="009cc66b18d12e15509f767fd4a28999ed80760ba6f579950020957a073f42ce793360ec740adf31290901256e0e4728b4351b92ce2bf20486dd"], 0x0, 0x0}, &(0x7f0000000880)={0x2c, &(0x7f0000000640)={0x0, 0x17, 0x61, "6cb459d822116988b5de75911ce563c616807a6f9e55092370fdacfa508ef889518f84806474f16c9de063398f91a9e319592f7d74d4a7a9d7e767e2a505744aba64f1621a15006a95eeff1e9558a9180c222a7ad6b5942a5553f0d5622b7d7a56"}, 0x0, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000800), 0x0}) ioctl$RTC_PIE_OFF(r5, 0x7006) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x78) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="b5af00000000000000000100000004000300040002800c0001800800010005"], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 14.467953162s ago: executing program 3 (id=327): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x20000, 0x182, 0xe}, 0x18) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fallocate(0xffffffffffffffff, 0x53, 0x0, 0x5) r2 = open(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0xee01, @ANYBLOB="0200", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="c01fd4e2c9289e8b514d3163201ca09887fadae0daee868dca594e97496241069fd53ef9697228c81c8f57"], 0x5c, 0x2) io_setup(0x81, &(0x7f0000000180)=0x0) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r5, 0x0, &(0x7f0000001d00)) openat$dir(0xffffffffffffff9c, &(0x7f0000005080)='./file1\x00', 0x1, 0x8) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)=[&(0x7f0000000180)='#]\xe0[-{$)!\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='\\#-\x00', &(0x7f0000000300)='(!\x91^.]){\x00', &(0x7f0000000340)='.:^%(\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='+\xd5*^\'\x00', &(0x7f0000000400)='\x00'], &(0x7f0000000640)=[&(0x7f00000004c0)='@-O\'#\\\\%%\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)='\x10\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='\\@@*@\x00'], 0x1000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000080)="3b464c3bcd2bd7d2b1a92eca79c286a06dffdfeb623ea9e40a2c95cd702350d944237596556c9479bf1521276d845eb45d2cd8e6380fc6ce9c3451c4c197909a", 0x40}, {&(0x7f0000000180)="fa302c5276f60e090ecdcd2ab8152552e0ec74a69db872f09ac999fb27496391dbf3d0bc94611c29a7ddbe0b2b272911544465bb22aa", 0x36}, {&(0x7f00000002c0)="87c3752dd3dafc", 0x7}], 0x3, 0x0, 0x0, 0x40000}}], 0x1, 0x0) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000680)=@req3={0x7f800000, 0x5, 0x1, 0x0, 0x200, 0x6, 0x8001}, 0x1c) pipe2$watch_queue(&(0x7f00000006c0), 0x80) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x19) 13.838804855s ago: executing program 1 (id=328): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x0) r5 = io_uring_setup(0x137e, &(0x7f0000000080)={0x0, 0x204e51}) r6 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) close(r6) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r7, 0x0) accept4(r6, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 13.594031562s ago: executing program 0 (id=329): r0 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000080)={"a0453822", 0x0, 0x6, 0x1, 0x0, 0x0, "33793ed2edede2df2a87ba3158b8da", "0054946a", "0600", "8606ba80", ["d8085781ae0cff21223446fe", "51f3d17dc9ed6f291acb3a10", "2ce50f8a285d9500c522afe1"]}) syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x0, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x15, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f900001ab703000008000000b704000000001500850000003300000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f}}, 0x50) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000004a40), 0x2400) syz_fuse_handle_req(r5, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 13.47811117s ago: executing program 2 (id=330): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000730115000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x90) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101c7bb0000b000000000", 0x25) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) geteuid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) pread64(r5, &(0x7f00000002c0)=""/40, 0x28, 0x4f) sendto(r0, &(0x7f0000000540)="120000001200e7ef007b000000003dfd81db97a9a981fc61480d44cfab5cdbc6d513fb0a7dd719fb9482e3c3412eaf929e51bf39a041", 0x36, 0x0, 0x0, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r6, 0x0, 0x0, 0x20, 0x0, 0x0) setsockopt$inet_int(r6, 0x0, 0x17, &(0x7f0000000140)=0x1df5, 0x4) bind$l2tp(r6, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) sendto$l2tp(r6, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = open$dir(&(0x7f0000000080)='./bus\x00', 0x7a1e40, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 11.60562889s ago: executing program 3 (id=331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbb34f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, 0x0) getdents64(r5, &(0x7f00000000c0)=""/44, 0x2c) r6 = syz_io_uring_setup(0x5169, &(0x7f0000000600)={0x0, 0x4000, 0x10100, 0x7fffffe, 0x0, 0x0, r5}, &(0x7f0000000100), &(0x7f0000000040)=0x0) syz_io_uring_setup(0x360b, &(0x7f0000001040), &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r8, r7, 0x0) io_uring_enter(r6, 0xb15, 0x0, 0x0, 0x0, 0x0) unshare(0x24020400) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x80040, 0x0) r10 = dup(r9) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESOCT=r11]) sendmsg$NFT_BATCH(r0, 0x0, 0x20000000) 11.378271164s ago: executing program 0 (id=332): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300000000000904010000020d0000"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x2c}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone3(0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_print_times', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040), 0x12) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff008}, {0x6}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 11.377218593s ago: executing program 1 (id=333): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x4, 0x80000001, 0x0, 0x3528, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x5}, 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1fe) write$binfmt_script(r0, &(0x7f0000000a80)={'#! ', './file0', [{}, {0x20, 'n\x89CD\x8f\xb2\r\t\x90\x15etdevs\x00m\x00\xd0\xaf8\x18\xd5\xaa\xac\fd\xce1\xbd\xbf5,\xa1 \xaak\xb4/\x8c\xe0\x9f\x8fo\x8c\xb9v\xdb\xfa\xfcV\n\xb3y\xf7Y0\"\x84\xad\xdcvc5H\x1e\xd7rS\xa3\x1c\x87\x13K\x84\xba>^\x04\xed\xa3\xb1\xfa\x89R\xb3\xdc\xed\xee\xe5\xbc$\x7f\t\x90O\xf6\x9es\xc5:\x7f\x13Y!\xadv\xc9\xcd\xf2[\xef\xf0\xd8A3\xb4\xbe\x97\x03\x88\xc1<\xc6\x02\x93\x83\xacZ\xa6@2n\x86\xaarl\x04f\xc7\xd1R\xf4\xe3b)+\xd0\x01\'\x86f\xdf}\xac\x8c\x99\x92\x19\xd8\x9c\x9c\x88acO\xf4\t\xf0\xb6\x15\v=\xaf\x05\x06.\x9d\xf7\xb8\xd8-\xbep)\xd7\xc8\xe2\x96\xab\xfbx\x99\xff\xb7\x1c7\xaf\x93H1*\xe5+\xf0~\xa3\x8c\xf53UKzg\xdd\xfej\xa5\x17'}, {0x20, 'exfat\x00'}, {0x20, '\xc1/-:'}, {0x20, 'devlink\x00'}, {}, {0x20, '((\x88\xa9\xca\x12.~\xee\xf8\xc6\xa1\x95\xd4\xbd\xa1n\x04\xe8\x19!fIG\x84{?yb\xc9J\x9e\xadT\x01QD\f\xe3\x00\x1dcVo_\xa5\x83/\xbf\x90\xbb\xcf\x1f\x12\f\xe5v\xe6\x16O\x1a\x02N\x8c\xf3D\xa4\xb7\x9fuU)t\x97\xf2G\xba\xe2\xfct\xbeEoV\xd6\xc0\x10o\x86\xaevfl\xf6\xb5\x82\xb2\aO\xbfbM%\xbeU\xc1\xe1Hx\xa7\xfdJt\xa4\xe9\x7fw\xc5v\xd4\xdfiOX\'\v8\x972X\x01\x06\xff\xd0\x97z\x8a\x16'}]}, 0x18a) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001439) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) ioctl$RTC_SET_TIME(r5, 0x7002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095000000000000002507739f99c037611e0668cd5456e371b9b18b2d515ed69be664167e9e9e2d8081be8051dbfc249a3893e319e5b1f1fad53b606cf2896bd0f42543c79af38ccc06dbbe987ef5261d0a9588c6dd"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x0, 0x1c, 0x8, &(0x7f0000000280)="5f33d04b18b3c6aecc6e7ea278877ddbe4bf102d5e36bb24228f78fc", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r4) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001"], 0xb8}}, 0x0) 9.760953426s ago: executing program 2 (id=334): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x10}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0xa, 0x5}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @restrict, @union]}}, 0x0, 0x5e, 0x0, 0x1}, 0x20) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000040), 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000380)={0x0, 'macsec0\x00', 0xfffffffe}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b0d, &(0x7f0000000040)) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x1, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) socket(0x2c, 0x4, 0x6a) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0xfea0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000911821000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) unshare(0x22030600) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 9.746008349s ago: executing program 3 (id=335): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000e00)='./file0\x00', 0x200000, &(0x7f0000000f40)={[{@grpjquota}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x85c5}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0xfe, 0x576, &(0x7f00000024c0)="$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") open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f5, &(0x7f0000001580)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804000, &(0x7f0000000280)=ANY=[@ANYBLOB='nls=cp1255,decompose,uid=', @ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRESHEX=0xee01, @ANYBLOB="2c626172726965722c6e6f624ab38a9261003f5c"], 0x3, 0x6ab, &(0x7f0000005d00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000003a80)=""/4104, 0x1008) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f00000000c0)={0x8, 0x7f, 0x0, 0x0, 0x3, "f06fc539471398450104663ea5b3e92dad434f"}) r6 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="b40000001800000426bd7000010000801c2020fffd04c802002000000c00090001001020", @ANYRES32=0x0, @ANYBLOB="840013000000000000000000000f0f00000002000000000000000000000000000000010000000f00000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000010000000000000001000000000000000300000000001700000005001a0001000000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000015}, 0x4004) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x400c8c6, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) write$UHID_INPUT(r5, &(0x7f0000001980)={0x765, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) 9.745346737s ago: executing program 4 (id=336): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x2131c100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000083667d1040206402d14e010203010902"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r6 = accept4$tipc(r3, 0x0, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000085}, 0x18) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x10001, 0x0, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 8.921795171s ago: executing program 1 (id=337): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x123201, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x8000, 0x7800, 0x0, 0x3cf7, {{0x10, 0x4, 0x0, 0x34, 0x40, 0x68, 0x0, 0x40, 0x0, 0x0, @broadcast, @broadcast, {[@generic={0x82, 0xc, "d1b8e8e67167506fd168"}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x8, [{@private=0xa010100, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010100, 0xd3}]}, @ra={0x94, 0x4}]}}}}}) bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x1b, r1, 0x1, 0x5}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x3, @sdr={0x31324d59}}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) futex(&(0x7f000000cffc), 0xd, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000100)={r6, 0x0, 0x2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000180)={r7, 0x3, r5, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(0xffffffffffffffff) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) 8.752439083s ago: executing program 2 (id=338): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c"}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x522500, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000440)={0x80, "421ae375378525f149154c9422ad0644f47d3bd7aaa45d6bb4823ab4c98100"}) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup(r6) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/41, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000580)={0x2, 0x0, [{0x1, 0x30, &(0x7f0000000480)=""/48}, {0x7000, 0x96, &(0x7f00000004c0)=""/150}]}) r9 = dup(r7) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000000)={0x1, r9}) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f00000003c0)={0x1, r7}) close_range(r0, 0xffffffffffffffff, 0x0) 5.750001089s ago: executing program 2 (id=339): openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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") mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x0) r0 = open(0x0, 0x14113e, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001dc0)=ANY=[@ANYBLOB="12010000578bfe20e60406000502000000010902120001000020000904000000a56ae600fcdab76a920d6adf46710ce4449403d6243c34216ee72ea5a050d24cd8293d79f472d10f3f6f2d56435c9b8466bb09f5b351798751e88da5b3c5c0ecda575b19666229daa93c42ea83c2a26fe7f4e46eddc334875e906ba858489404b464ffcc2ae37617c672b0aed3ebd398638ae59a4aac4df83716a8199455e39125b3735cfa0425094ba51a69cc"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x20000400) r5 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = landlock_create_ruleset(&(0x7f00000000c0)={0x5949}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000080)={0x1008, r6}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r8 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r8, r9, r9}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}}) 5.689002444s ago: executing program 1 (id=340): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2a, 0x4, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x4, [{@multicast1}, {@dev, 0x65a}, {@broadcast}, {@empty}, {@multicast1}, {@multicast2}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x8, [{@dev}, {@multicast2}, {@private}, {@empty}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0x7, 0x0, [@rand_addr]}, @rr={0x7, 0xf, 0x0, [@dev={0xac, 0x14, 0x14, 0x32}, @remote, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r3 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x7, 0x8000) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00'/10, @ANYRES16=r2, @ANYBLOB="00032bbd7000fcffffff18000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) r4 = dup(r1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000440)=0x0) ptrace$ARCH_SET_CPUID(0x1e, r7, 0x0, 0x1012) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100)="290000001600190f00003fffffffda0602000000ffe80001dd0000040d001800ea1101650005000000", 0x29}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.608408473s ago: executing program 0 (id=341): r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x6000001f}) read$char_usb(r1, &(0x7f00000004c0)=""/185, 0xb9) preadv(r1, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/72, 0x48}], 0x1, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[], [{@hash}]}, 0x0, 0x560, &(0x7f00000008c0)="$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") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x20000172, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRESHEX, @ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0xff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r3}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0xbed, 0x0) llistxattr(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000040)=0xfdfffdfd, 0x4) connect$inet(r2, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0x19, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r2, &(0x7f0000001940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/211, 0xd3}}], 0x1, 0x12002, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e25}, 0x6e) r7 = socket$netlink(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, r7) 5.607974604s ago: executing program 4 (id=342): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x11}, @generic={0xa7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000008000000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f00000005c0)=ANY=[], &(0x7f0000000780)=""/219, 0x6b, 0xdb, 0x1}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0xaa3, &(0x7f0000008f00)=ANY=[@ANYBLOB="120110014b193508e20400141365010203010902910a020706c00509047a050a027a4509092406"], 0x0) ioctl$TUNGETDEVNETNS(r9, 0x54e3, 0x0) 5.432324338s ago: executing program 3 (id=343): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYBLOB="00646d61736b3d303030303030303030303030303135322c696f636861720300000069736f383835392d312c6769643d00000000000000", @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYBLOB="1e1456b97f43020078423fad8569494e28e58bd88d6b502cfe943956d9f8efde4f8659ce67cc37b7e1d988638175e2db1b654dccc1a203850b09873b0184822257d4c12aaf0b5efe2105301b585b58256d90fffa59ece5882178fb533b8ed99c4c2c6d1ba6d7f5dac0cad0eaeee76479fb488f67037b1b2a880c53fe952d632ba034c8d2758f1bd92565024144b0862cb3639c534e323806be01dd7a6252a5999b81aa1f34d13acf872bbbfc5bb3bd8b2cfe4db9838e94", @ANYRESOCT=r3], 0x81, 0x14f5, &(0x7f0000001580)="$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") unlinkat(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000430000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x17, 0x9, 0x1c, &(0x7f0000000340)="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"}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000740)={'#! ', '', [], 0xa, "d3c621ef204b80883877907b9644c821abfa28bbc6aea4594884272d2fbc291fcc3ae76c1c2e2378f391c2f55165b5c5ef7a955fc9026e8c24632d71be3b9786969b7771138461b9e715094214eb"}, 0x52) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r9 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r9, &(0x7f00000082c0)={0x2020}, 0x2020) read$FUSE(r9, &(0x7f0000012400)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x380000a, 0x28011, r6, 0x31d8b000) r10 = dup(r5) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) 2.902309566s ago: executing program 4 (id=344): syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f0000000800)='./file0\x00', 0x480e, &(0x7f00000003c0)=ANY=[@ANYBLOB="6d61703d6f66662c6d61703d61636f726e006e6f726f636b2c73657373696f6e3d307830203030303030303030332c636865636b3d72656c617865642c6e6f726f636b416e0400000000000000c86b2c6d6f44653d30783030303030303090cf5cee73e4fdbccf1ad8f6238d714830303030303030756e686964652c6d61703d61636f726e2c6f76657272696465726f636b706572916964652c00add51ea29069028397e9808a385f6e0c9ab44fb55e327ad812fe293a6347f7f502634dfa74f42b394b1587068ecfa5acd459ae5a7dce3d2ca29a5d67adb9bfb87ce6ccb85cb98b2b7a0c5bae05ac8cfd1895938b2910b1498c0d61c80000"], 0x0, 0x694, &(0x7f0000000840)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x400) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) dup3(r3, r2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3ff}, 0x48) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}}, &(0x7f0000000080)='GPL\x00'}, 0x90) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r7}, 0x10) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r8, 0xa, 0x13) fcntl$setlease(r8, 0x400, 0x0) 1.592022408s ago: executing program 2 (id=345): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x0, 0x2, 0x6) r2 = creat(0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000440)={'\x00', 0x64f, 0x1da, 0x10, 0x173b, 0x100}) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000400)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"/1267], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x300f000, 0x0, 0x0, 0x0, 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x50) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0x1, 0x246, &(0x7f0000000ac0)="$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") creat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x121) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = open(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0xf8020dd1cb444a70) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), r7) sendmsg$NLBL_MGMT_C_REMOVE(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="010028bd700100dbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="3800000012002102000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x38}}, 0x0) lseek(r4, 0x7ff, 0x0) getdents64(r4, 0x0, 0x10) 1.448236559s ago: executing program 1 (id=346): pipe(&(0x7f0000000200)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3011, 0x17) socket$tipc(0x1e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$vbi(0x0, 0x0, 0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4008031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x20, 0x140e, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@exit]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x24, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x18, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, @snprintf]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000100), &(0x7f0000000140)=r10}, 0x20) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f95f24fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.391425291s ago: executing program 0 (id=347): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x0, 0x0, 0x8000, 0x100}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000100)={[{@noquota}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@debug}, {@grpid}]}, 0x80, 0x536, &(0x7f0000000680)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0xfffd, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000000c0)={0x5, {{0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x3e}}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000cc0)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000003000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210) socket(0x0, 0x0, 0x1fdfc) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000410000009500200000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x281200c, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRES64=r3, @ANYRES32, @ANYRES16, @ANYRESOCT, @ANYRES64, @ANYRES16, @ANYRES16=0x0], 0x6, 0x715, &(0x7f0000000500)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x1, 0x3000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) read$char_usb(r3, &(0x7f0000000cc0)=""/4096, 0x1000) syz_open_procfs(0x0, &(0x7f0000000c80)='net/ptype\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x35, 0x0, 0x1, 0xad}, {0x35}, {0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfd, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x3, &(0x7f0000000240)=[{0x5, 0x2}, {0x7fff, 0x9, 0x80, 0x4}, {0x4, 0x2f, 0x3f, 0x2}]}) 1.354874201s ago: executing program 3 (id=348): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_getroute={0x1c, 0x1a, 0xaba2493891f2befb, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}}, 0x1c}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x68, 0x10, 0x503, 0x4, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}, @IFLA_GRE_ENCAP_LIMIT={0x5}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0xffffffff}, @IFLA_GRE_IKEY={0x8}]}}}, @IFLA_LINK={0x8}]}, 0x68}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x0, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000", @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x12, 0x8, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000140)={@empty}, 0x14) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) 280.314145ms ago: executing program 1 (id=349): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x9b, {"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", 0xfffffffffffffebd}}, 0x1006) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xb}, @hci_ev_le_remote_conn_param_req={{}, {0xc9, 0x3, 0x0, 0x740, 0x1ff}}}}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b400005428a49a3ba4b75ba1"], 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) socket$vsock_stream(0x28, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100018b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newlink={0xc7, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINKINFO={0x0, 0x12, 0x0, 0x1, @bond={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS, @IFLA_BOND_MIN_LINKS={0x0, 0x12, 0x1}, @IFLA_BOND_LP_INTERVAL={0x0, 0x13, 0x2}]}}}, @IFLA_LINKMODE={0x5}]}, 0x6c}}, 0x0) r7 = dup(r2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r7, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f00000cb000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 3 (id=350): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0x10008, 0x1, 0x8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000180)={@id={0x2, 0x0, @c}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(r2, 0x8, &(0x7f0000000280)=0x3ff) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002611000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200fffeac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x8801, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fstat(r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x810410, &(0x7f0000001a00)=ANY=[@ANYRES32=r8, @ANYRES16, @ANYRES32=r8, @ANYRES16, @ANYRESDEC=r8, @ANYRES16, @ANYRESHEX, @ANYBLOB="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"], 0x1, 0x1d2, &(0x7f0000000700)="$eJxiGAWjYBSMWPDo4dcHvU4WIToMDAw8DCoM7FDxF8wINUxI6u/MLNWeaus6Z9PtpUfy+Gp3oZvHTqL9ILMPODIzlED5/////48srwImGVlAKlWgYqEMTAyaUHY4AyODKpSdwMDEEAZlpzIwMkRC2VlI7HxOKCMnVS85PyclLTMn1QBEGIIIIxBhjGw/CwMDw9tGRoYUBgYGDqj7GJHkiyurshNzclKL0Bms/2H2YEiRysAXfmD3OTIx2CKFHyhMIzqaG0F8Pai4AVL4GTIwMRhC2cYMjAzBULYFAzuDnp4eIkiQ/C/FgjCfmRj/DwaGoO6gcMYoY3AxGNFFQBkaLiL2dtdpTF1PKbedcaCyDLjgYmBgwJC6xEWZyWxQH2FVgyifQKW3OlL5xMLAAi8/9EtyC/SLK6t0M3MT01PTU/OMjIzNDEwMDEyN9MEFEYTEU/5xgMsnLiTzWXGoZWNkY6hILCkpMqxgYCgpMoTzjSAkUokbvC3/DVgPE7j8Y2LQUIaYAYpEsLdxVHSMUMwEpkEsDWacjh8Fo2AUjIJRMApGwSgYBaNgFIyCUTAKRsEoGAWjYBSMApKAPAMjeBQUOlH1HwcwCgCrBgQAAP//fg1jkw==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): 42.324502][ T5793] bridge_slave_1: entered allmulticast mode [ 142.344667][ T5793] bridge_slave_1: entered promiscuous mode [ 142.630920][ T5279] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 142.863595][ T5279] usb 5-1: Using ep0 maxpacket: 8 [ 143.360991][ T5279] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 143.391194][ T5279] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 143.448875][ T5279] usb 5-1: config 135 has no interface number 0 [ 143.502316][ T5279] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.536291][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.550755][ T5279] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 143.573460][ T5279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.663436][ T5279] usb 5-1: Product: syz [ 143.668095][ T5279] usb 5-1: Manufacturer: syz [ 143.693492][ T5279] usb 5-1: SerialNumber: syz [ 143.906207][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.008142][ T5878] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 144.806599][ T5652] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 144.980923][ T5793] team0: Port device team_slave_0 added [ 145.040345][ T5652] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 145.089457][ T5652] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 145.211530][ T5793] team0: Port device team_slave_1 added [ 145.323658][ T5309] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 145.349882][ T5652] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 145.488048][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.528556][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.596909][ T5309] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 145.621469][ T5309] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 145.661431][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.712363][ T5309] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 145.731175][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.769046][ T5309] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 145.773719][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.861624][ T5279] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 145.876335][ T5309] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 145.876513][ T5279] usb 5-1: No valid video chain found. [ 145.932923][ T5309] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 145.945459][ T5279] usb 5-1: USB disconnect, device number 5 [ 145.953824][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.973665][ T5309] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 146.053743][ T5309] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 146.107362][ T5309] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 146.195368][ T5309] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 146.264900][ T5309] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 146.272367][ T5309] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 146.335215][ T5793] hsr_slave_0: entered promiscuous mode [ 146.539651][ T5309] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 147.646625][ T5309] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 147.676346][ T5793] hsr_slave_1: entered promiscuous mode [ 147.719997][ T5309] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 147.732728][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.749059][ T5897] loop4: detected capacity change from 0 to 256 [ 147.770400][ T5793] Cannot create hsr debugfs directory [ 147.798701][ T5897] vfat: Bad value for 'dmask' [ 147.831250][ T5309] usb 2-1: string descriptor 0 read error: -22 [ 148.050924][ T5309] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 148.962137][ T5309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.142561][ T5309] usb 2-1: can't set config #168, error -71 [ 149.178769][ T5309] usb 2-1: USB disconnect, device number 6 [ 149.205775][ T5652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.332491][ T5910] loop3: detected capacity change from 0 to 256 [ 149.374623][ T5910] vfat: Unknown parameter '00000000000000000000ÿÿ' [ 149.534860][ T5905] loop1: detected capacity change from 0 to 4096 [ 149.548977][ T5652] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.577623][ T5905] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 149.783114][ T5914] syz.3.105: attempt to access beyond end of device [ 149.783114][ T5914] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 149.796450][ T5914] EXT4-fs (loop3): unable to read superblock [ 150.442163][ T5793] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.539337][ T5905] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 151.490163][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.497295][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.398461][ T5923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.409760][ T5923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.421897][ T5923] bond0 (unregistering): Released all slaves [ 152.521957][ T5928] loop1: detected capacity change from 0 to 1024 [ 152.620665][ T5793] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.769223][ T5932] loop3: detected capacity change from 0 to 2048 [ 152.785756][ T5932] NILFS (loop3): invalid segment: Sequence number mismatch [ 152.788419][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.793630][ T5932] NILFS (loop3): trying rollback from an earlier position [ 152.800288][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.018997][ T5932] NILFS (loop3): recovery complete [ 153.030468][ T5935] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.869391][ T5793] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.107694][ T5718] hfsplus: b-tree write err: -5, ino 4 [ 155.349718][ T5793] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.458388][ T5954] loop4: detected capacity change from 0 to 16 [ 155.481737][ T5954] erofs: (device loop4): mounted with root inode @ nid 36. [ 156.535766][ T5652] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.612521][ T5957] process 'syz.1.110' launched './file0' with NULL argv: empty string added [ 157.353503][ T1168] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 157.411315][ T5793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 157.434877][ T5793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 157.640495][ T1168] usb 4-1: Using ep0 maxpacket: 8 [ 157.755360][ T1168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.795402][ T1168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.814170][ T5793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 157.948154][ T5793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 157.948641][ T1168] usb 4-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 157.992200][ T5963] loop1: detected capacity change from 0 to 4096 [ 158.127196][ T5963] ntfs3: Bad value for 'gid' [ 158.135614][ T1168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.151294][ T1168] usb 4-1: config 0 descriptor?? [ 158.169565][ T5963] ntfs3: Bad value for 'gid' [ 158.221859][ T5652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.545325][ T1168] usbhid 4-1:0.0: can't add hid device: -71 [ 159.553273][ T1168] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 159.734313][ T1168] usb 4-1: USB disconnect, device number 6 [ 159.942786][ T5652] veth0_vlan: entered promiscuous mode [ 160.008307][ T5652] veth1_vlan: entered promiscuous mode [ 160.078794][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.105011][ T5652] veth0_macvtap: entered promiscuous mode [ 160.125326][ T5652] veth1_macvtap: entered promiscuous mode [ 160.155801][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.169161][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.180015][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.202705][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.262306][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.297111][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.472686][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.502333][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.526565][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.536776][ T5986] loop1: detected capacity change from 0 to 4096 [ 160.671446][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.683539][ T5986] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 160.725590][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.735995][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.746588][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.759459][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.773132][ T5652] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.782879][ T5652] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.792415][ T5652] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.839277][ T5652] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.875044][ T5963] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 160.951626][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.051557][ T5718] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.058732][ T5718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.069568][ T5718] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.076758][ T5718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.473077][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.503772][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.531845][ T6008] loop3: detected capacity change from 0 to 2048 [ 161.714839][ T6011] loop4: detected capacity change from 0 to 16 [ 161.726330][ T6011] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 161.733808][ T6018] loop1: detected capacity change from 0 to 2048 [ 161.741902][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.758220][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.802426][ T6008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.015982][ T6018] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.256056][ T5223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.452756][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.868511][ T5793] veth0_vlan: entered promiscuous mode [ 164.997146][ T5793] veth1_vlan: entered promiscuous mode [ 165.148186][ T5793] veth0_macvtap: entered promiscuous mode [ 165.201124][ T5793] veth1_macvtap: entered promiscuous mode [ 165.335208][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.418049][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.473487][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.525126][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.573536][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.598366][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.637912][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.726680][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.779876][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.898797][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.957497][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.991910][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.041748][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.073984][ T6039] 9pnet_fd: Insufficient options for proto=fd [ 166.076615][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.109490][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.145134][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.186337][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.235674][ T6046] loop1: detected capacity change from 0 to 32768 [ 166.256180][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.291165][ T6046] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.123 (6046) [ 166.347406][ T5793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.394631][ T5793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.462141][ T6046] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 166.474689][ T5793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.501026][ T6046] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 166.544466][ T5793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.546341][ T6046] BTRFS info (device loop1): using free-space-tree [ 166.923307][ T6079] loop2: detected capacity change from 0 to 4096 [ 167.005208][ T6089] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.941628][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.014488][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.029129][ T29] audit: type=1800 audit(1724087519.208:25): pid=6094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.125" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 168.218008][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.293894][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.441067][ T5227] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 169.927852][ T4620] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 169.934912][ T5235] Bluetooth: hci6: command 0x1003 tx timeout [ 173.527195][ T6128] loop3: detected capacity change from 0 to 32768 [ 173.603994][ T6128] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section journal: journal bucket at sector 0 [ 173.603994][ T6128] journal (size 152): [ 173.603994][ T6128] Buckets: 136 14648362867559965851 6735162007305869200 128 34376515584 1714681272 1611530240 0 0 0 0 0 0 0 0 0 41 1170781241344 [ 173.603994][ T6128] [ 173.636595][ T6128] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal [ 180.036084][ T29] audit: type=1326 audit(1724087530.108:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d5d79e79 code=0x7ffc0000 [ 180.228386][ T6170] netlink: 44 bytes leftover after parsing attributes in process `syz.1.139'. [ 181.057702][ T29] audit: type=1326 audit(1724087530.108:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d5d79e79 code=0x7ffc0000 [ 181.492460][ T6180] loop4: detected capacity change from 0 to 512 [ 181.534616][ T6180] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.141: corrupted in-inode xattr: invalid ea_ino [ 181.557996][ T6180] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.141: couldn't read orphan inode 15 (err -117) [ 181.608279][ T6180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.703000][ T6184] loop1: detected capacity change from 0 to 2048 [ 181.716665][ T6184] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.295764][ T5474] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.510773][ T6204] netlink: 16 bytes leftover after parsing attributes in process `syz.4.145'. [ 187.542480][ T6206] loop3: detected capacity change from 0 to 512 [ 187.718560][ T6206] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.147: casefold flag without casefold feature [ 188.059268][ T6216] loop4: detected capacity change from 0 to 512 [ 188.552843][ T6206] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.147: couldn't read orphan inode 15 (err -117) [ 188.873668][ T6216] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 188.881452][ T6216] UDF-fs: Scanning with blocksize 512 failed [ 188.904407][ T6216] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 188.912021][ T6216] UDF-fs: Scanning with blocksize 1024 failed [ 189.333427][ T6216] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 189.341109][ T6216] UDF-fs: Scanning with blocksize 2048 failed [ 189.350589][ T6216] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 189.422284][ T6206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.562497][ T6216] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.587705][ T29] audit: type=1800 audit(1724087540.768:28): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.150" name="file1" dev="loop4" ino=26 res=0 errno=0 [ 191.563420][ T6239] loop4: detected capacity change from 0 to 8192 [ 191.633724][ T5233] Bluetooth: hci4: command 0x0406 tx timeout [ 191.640373][ T5244] Bluetooth: hci3: command 0x0406 tx timeout [ 191.846609][ T6239] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.903187][ T5233] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 191.933830][ T4620] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 191.944686][ T4620] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 191.957060][ T4620] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 191.979328][ T4620] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 192.005191][ T4620] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 192.029141][ T6242] binder: 6233:6242 ioctl c018620c 200002c0 returned -22 [ 192.587030][ T5223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.633480][ T5276] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 192.642914][ T6240] chnl_net:caif_netlink_parms(): no params data found [ 194.249036][ T5235] Bluetooth: hci6: command tx timeout [ 195.249080][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.256622][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.288106][ T4620] Bluetooth: hci6: command tx timeout [ 197.021265][ T6265] loop4: detected capacity change from 0 to 32768 [ 197.047085][ T5276] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 197.067839][ T5276] usb 1-1: can't read configurations, error -71 [ 197.313634][ T4620] Bluetooth: hci0: command 0x0406 tx timeout [ 198.354155][ T5235] Bluetooth: hci6: command tx timeout [ 200.354979][ T6240] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.391611][ T6240] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.434187][ T5235] Bluetooth: hci6: command tx timeout [ 200.437445][ T6240] bridge_slave_0: entered allmulticast mode [ 200.484930][ T6240] bridge_slave_0: entered promiscuous mode [ 200.503007][ T6298] loop1: detected capacity change from 0 to 512 [ 200.525122][ T6299] loop4: detected capacity change from 0 to 256 [ 200.539383][ T6299] exfat: Deprecated parameter 'namecase' [ 200.554752][ T6299] exfat: Deprecated parameter 'utf8' [ 200.583523][ T6298] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 200.613817][ T6299] exfat: Deprecated parameter 'namecase' [ 200.619908][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.673523][ T6240] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.680662][ T6240] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.737223][ T6298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 200.764689][ T6240] bridge_slave_1: entered allmulticast mode [ 200.771732][ T6240] bridge_slave_1: entered promiscuous mode [ 200.798472][ T6299] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 200.848006][ T6298] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.641631][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.658966][ T5281] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 201.758767][ T5227] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 201.762029][ T6240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.856832][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.963444][ T5281] usb 5-1: Using ep0 maxpacket: 32 [ 201.970644][ T5281] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 201.975759][ T6240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.002890][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 202.122763][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 202.156526][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.199071][ T6295] loop3: detected capacity change from 0 to 40427 [ 202.238565][ T6295] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 202.271151][ T6295] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 202.288206][ T5281] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 202.322464][ T6295] F2FS-fs (loop3): invalid crc value [ 202.374295][ T6295] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 152982424156046821) [ 202.398606][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.445626][ T5281] usb 5-1: config 0 descriptor?? [ 202.473533][ T6240] team0: Port device team_slave_0 added [ 202.481998][ T6240] team0: Port device team_slave_1 added [ 202.488733][ T6292] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 202.503159][ T5281] hub 5-1:0.0: USB hub found [ 202.614798][ T6240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.632844][ T6240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.658974][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.679841][ T6295] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 202.680439][ T6240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.693453][ T6295] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 202.716179][ T5281] hub 5-1:0.0: 2 ports detected [ 202.763146][ T6240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.775083][ T6240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.830007][ T6240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.573953][ T6315] syz.3.164 (6315): drop_caches: 2 [ 203.942605][ T6309] loop1: detected capacity change from 0 to 40427 [ 203.945572][ T6240] hsr_slave_0: entered promiscuous mode [ 203.970504][ T6309] F2FS-fs (loop1): Unrecognized mount option "lazytime" or missing value [ 204.238844][ T6240] hsr_slave_1: entered promiscuous mode [ 204.733944][ T6240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.741583][ T6240] Cannot create hsr debugfs directory [ 205.056525][ T6322] loop1: detected capacity change from 0 to 1024 [ 205.327260][ T51] bridge_slave_1: left allmulticast mode [ 205.332980][ T51] bridge_slave_1: left promiscuous mode [ 206.670344][ T5281] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 206.966416][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.604124][ T5232] usb 5-1: USB disconnect, device number 6 [ 208.766076][ T51] bridge_slave_0: left allmulticast mode [ 208.771894][ T51] bridge_slave_0: left promiscuous mode [ 208.853611][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.250287][ T4620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.283944][ T4620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.293141][ T4620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.304346][ T4620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.312042][ T4620] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 210.319837][ T4620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.428799][ T6339] loop1: detected capacity change from 0 to 164 [ 210.566997][ T6339] Unable to read rock-ridge attributes [ 210.629736][ T6333] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 210.928556][ T6343] xt_hashlimit: invalid rate [ 211.803138][ T6345] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 212.045822][ T6351] loop3: detected capacity change from 0 to 128 [ 212.590631][ T5235] Bluetooth: hci1: command tx timeout [ 212.833998][ T4620] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 214.678977][ T4620] Bluetooth: hci1: command tx timeout [ 215.037854][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.055393][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.069973][ T51] bond0 (unregistering): Released all slaves [ 216.830831][ T4620] Bluetooth: hci1: command tx timeout [ 218.190108][ T6371] ALSA: mixer_oss: invalid OSS volume '' [ 218.464697][ T51] hsr_slave_0: left promiscuous mode [ 218.591947][ T51] hsr_slave_1: left promiscuous mode [ 218.604387][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.637720][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.739683][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.772243][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.963345][ T51] veth1_macvtap: left promiscuous mode [ 218.972481][ T51] veth0_macvtap: left promiscuous mode [ 218.978740][ T51] veth1_vlan: left promiscuous mode [ 218.984623][ T5235] Bluetooth: hci1: command tx timeout [ 218.990276][ T4620] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 219.003505][ T51] veth0_vlan: left promiscuous mode [ 219.798963][ T6405] trusted_key: encrypted_key: keylen parameter is missing [ 219.810226][ T6405] netlink: 'syz.0.179': attribute type 7 has an invalid length. [ 222.590894][ T5232] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 222.787325][ T5232] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 222.808918][ T51] team0 (unregistering): Port device team_slave_1 removed [ 222.816533][ T5232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.850624][ T5232] usb 1-1: config 0 descriptor?? [ 222.867553][ T5232] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 222.921535][ T51] team0 (unregistering): Port device team_slave_0 removed [ 223.090914][ T4620] Bluetooth: hci2: unexpected event for opcode 0x0c14 [ 223.385745][ T5232] gspca_sunplus: reg_w_riv err -110 [ 223.391127][ T5232] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 224.202194][ T6422] loop3: detected capacity change from 0 to 1024 [ 224.328641][ T6422] loop3: detected capacity change from 0 to 256 [ 224.339420][ T6422] vfat: Unknown parameter 'iocharseodir' [ 225.405765][ T6335] chnl_net:caif_netlink_parms(): no params data found [ 226.623419][ T4620] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 227.651894][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.187153][ T1168] usb 1-1: USB disconnect, device number 6 [ 228.950091][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.396643][ T6335] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.413477][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.422023][ T6335] bridge_slave_0: entered allmulticast mode [ 229.429701][ T6457] syz.1.189: attempt to access beyond end of device [ 229.429701][ T6457] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 229.434758][ T6335] bridge_slave_0: entered promiscuous mode [ 229.471918][ T6335] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.501849][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.523681][ T6335] bridge_slave_1: entered allmulticast mode [ 229.544040][ T6335] bridge_slave_1: entered promiscuous mode [ 229.554930][ T6457] EXT4-fs (loop3): unable to read superblock [ 229.866786][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.943282][ T6240] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 230.019450][ T6335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.067607][ T6335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.162072][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.212612][ T6240] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 230.299132][ T6457] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.380309][ T6458] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.387590][ T6458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.452799][ T6335] team0: Port device team_slave_0 added [ 230.472847][ T6240] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 230.499342][ T6240] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 230.531237][ T6335] team0: Port device team_slave_1 added [ 230.775492][ T6335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.782500][ T6335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.525280][ T6335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.321173][ T6335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.360363][ T6335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.516499][ T6335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.865137][ T6497] tipc: Started in network mode [ 234.870370][ T6497] tipc: Node identity 0000000000002d000000000000000001, cluster identity 4711 [ 234.881113][ T6497] tipc: Enabling of bearer rejected, failed to enable media [ 234.994177][ T51] bridge_slave_1: left allmulticast mode [ 235.000708][ T51] bridge_slave_1: left promiscuous mode [ 235.042407][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.083524][ T51] bridge_slave_0: left allmulticast mode [ 235.093431][ T51] bridge_slave_0: left promiscuous mode [ 235.099339][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.232790][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.261620][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.285723][ T51] bond0 (unregistering): Released all slaves [ 237.311518][ T6335] hsr_slave_0: entered promiscuous mode [ 237.324266][ T6335] hsr_slave_1: entered promiscuous mode [ 237.339805][ T6335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.379494][ T6335] Cannot create hsr debugfs directory [ 237.421264][ T6240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.509543][ T6528] netlink: 44 bytes leftover after parsing attributes in process `syz.3.198'. [ 238.114021][ T6240] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.198244][ T6551] Bluetooth: MGMT ver 1.23 [ 239.416661][ T6561] Invalid option length (1044984) for dns_resolver key [ 239.439762][ T6561] loop1: detected capacity change from 0 to 512 [ 239.446816][ T6561] ext4: Unknown parameter 'context' [ 240.364760][ T5718] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.372093][ T5718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.130658][ T5718] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.137975][ T5718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.412526][ T51] hsr_slave_0: left promiscuous mode [ 241.440417][ T51] hsr_slave_1: left promiscuous mode [ 241.462655][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.472185][ T29] audit: type=1326 audit(1724087592.638:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.3.204" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42d5d79e79 code=0x0 [ 241.501181][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.556380][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.673566][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.933690][ T51] veth1_macvtap: left promiscuous mode [ 241.943351][ T51] veth0_macvtap: left promiscuous mode [ 242.204296][ T51] veth1_vlan: left promiscuous mode [ 242.217263][ T51] veth0_vlan: left promiscuous mode [ 243.545309][ T51] team0 (unregistering): Port device team_slave_1 removed [ 243.709170][ T51] team0 (unregistering): Port device team_slave_0 removed [ 244.339663][ T6589] tipc: Failed to remove unknown binding: 66,1,1/0:3847810014/3847810016 [ 244.485945][ T6590] tipc: Failed to remove unknown binding: 66,1,1/0:3847810014/3847810016 [ 244.527321][ T6590] tipc: Failed to remove unknown binding: 66,1,1/0:3847810014/3847810016 [ 245.261678][ T6588] loop3: detected capacity change from 0 to 40427 [ 245.374765][ T6588] F2FS-fs (loop3): Found nat_bits in checkpoint [ 245.597876][ T6588] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 245.683083][ T6240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.931356][ T6335] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 245.965610][ T6335] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 246.040407][ T6614] evm: overlay not supported [ 246.612423][ T6335] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 246.617338][ T5223] syz-executor: attempt to access beyond end of device [ 246.617338][ T5223] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 246.656331][ T6335] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 246.672498][ T5223] syz-executor: attempt to access beyond end of device [ 246.672498][ T5223] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 246.886425][ T989] kworker/u8:5: attempt to access beyond end of device [ 246.886425][ T989] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 246.917250][ T989] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 246.930926][ T989] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 246.940502][ T989] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 246.949165][ T989] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 246.992206][ T6240] veth0_vlan: entered promiscuous mode [ 247.014885][ T6335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.125806][ T6240] veth1_vlan: entered promiscuous mode [ 247.186441][ T6335] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.236557][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.243740][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.278794][ T2534] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.286087][ T2534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.437287][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.528901][ T6240] veth0_macvtap: entered promiscuous mode [ 247.567016][ T6240] veth1_macvtap: entered promiscuous mode [ 247.770880][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.870666][ T6335] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 247.910755][ T6335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.061814][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.508452][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.542164][ T6635] netlink: 104 bytes leftover after parsing attributes in process `syz.0.210'. [ 248.560871][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.578528][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.595201][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.613974][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.657851][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 248.671576][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.751532][ T6635] netlink: 'syz.0.210': attribute type 26 has an invalid length. [ 248.808641][ T29] audit: type=1326 audit(1724087599.988:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1930b79e79 code=0x7fc00000 [ 248.841485][ T6335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.860730][ T4620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 248.894210][ T4620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 248.919174][ T4620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 248.934173][ T4620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 248.943253][ T4620] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 248.951593][ T4620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 248.974594][ T29] audit: type=1326 audit(1724087600.028:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f1930b79e79 code=0x7fc00000 [ 248.998619][ T29] audit: type=1326 audit(1724087600.108:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1930b79e79 code=0x7fc00000 [ 249.208165][ T51] bridge_slave_1: left allmulticast mode [ 249.224495][ T51] bridge_slave_1: left promiscuous mode [ 249.232651][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.277262][ T51] bridge_slave_0: left allmulticast mode [ 249.325048][ T51] bridge_slave_0: left promiscuous mode [ 249.330900][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.796191][ T5282] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 250.013449][ T5282] usb 1-1: Using ep0 maxpacket: 8 [ 250.043873][ T5282] usb 1-1: New USB device found, idVendor=06cd, idProduct=011c, bcdDevice=d7.cc [ 250.063771][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.106548][ T5282] usb 1-1: config 0 descriptor?? [ 250.145738][ T5282] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected [ 250.173717][ T5282] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84 [ 250.212934][ T5282] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 250.236230][ T5282] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 82 [ 250.254113][ T5282] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 250.283415][ T5282] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 250.291396][ T5282] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 250.303791][ T5282] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 250.334234][ T5282] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 250.423251][ T5282] usb 1-1: USB disconnect, device number 7 [ 250.449041][ T5282] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 250.504830][ T5282] keyspan 1-1:0.0: device disconnected [ 250.749171][ T6637] chnl_net:caif_netlink_parms(): no params data found [ 250.756730][ T4620] Bluetooth: hci0: command tx timeout [ 250.895430][ T51] hsr_slave_0: left promiscuous mode [ 250.939458][ T51] hsr_slave_1: left promiscuous mode [ 250.961649][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.980158][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.993910][ T4620] Bluetooth: hci5: command tx timeout [ 251.034136][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.074050][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.147397][ T51] veth1_macvtap: left promiscuous mode [ 251.173491][ T51] veth0_macvtap: left promiscuous mode [ 251.191664][ T51] veth1_vlan: left promiscuous mode [ 251.203549][ T51] veth0_vlan: left promiscuous mode [ 251.832022][ T5235] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 251.847210][ T5235] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 251.856182][ T5235] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 251.871832][ T5235] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 251.885196][ T5235] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 251.892632][ T5235] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 252.625726][ T51] team0 (unregistering): Port device team_slave_1 removed [ 252.685147][ T51] team0 (unregistering): Port device team_slave_0 removed [ 252.834621][ T4620] Bluetooth: hci0: command tx timeout [ 253.083616][ T4620] Bluetooth: hci5: command tx timeout [ 253.738943][ T6335] veth0_vlan: entered promiscuous mode [ 253.891467][ T6335] veth1_vlan: entered promiscuous mode [ 253.953849][ T4620] Bluetooth: hci6: command tx timeout [ 254.109974][ T6637] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.118896][ T6637] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.126617][ T6637] bridge_slave_0: entered allmulticast mode [ 254.151396][ T6637] bridge_slave_0: entered promiscuous mode [ 254.182456][ T6643] chnl_net:caif_netlink_parms(): no params data found [ 254.262564][ T6637] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.271096][ T6637] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.315904][ T6637] bridge_slave_1: entered allmulticast mode [ 254.344867][ T6637] bridge_slave_1: entered promiscuous mode [ 254.702602][ T6637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.754654][ T6335] veth0_macvtap: entered promiscuous mode [ 254.828771][ T6637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.876975][ T6335] veth1_macvtap: entered promiscuous mode [ 254.905071][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.916551][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.924019][ T4620] Bluetooth: hci0: command tx timeout [ 254.946532][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.973508][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.995241][ T6335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.153588][ T4620] Bluetooth: hci5: command tx timeout [ 255.239645][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.274963][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.298551][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.335144][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.375513][ T6335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.462927][ T6637] team0: Port device team_slave_0 added [ 255.608966][ T6335] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.621338][ T6335] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.631773][ T6335] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.649105][ T6335] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.709701][ T6643] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.723539][ T6643] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.731188][ T6643] bridge_slave_0: entered allmulticast mode [ 255.744112][ T6643] bridge_slave_0: entered promiscuous mode [ 255.761035][ T6637] team0: Port device team_slave_1 added [ 255.869339][ T6643] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.877420][ T6643] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.886105][ T6643] bridge_slave_1: entered allmulticast mode [ 255.894085][ T6643] bridge_slave_1: entered promiscuous mode [ 255.913694][ T6637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.920646][ T6637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.947757][ T6637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.960831][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.967208][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.985411][ T6637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.994884][ T6637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.036057][ T5235] Bluetooth: hci6: command tx timeout [ 256.048071][ T6637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.305859][ T6643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.367276][ T6643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.427015][ T6692] chnl_net:caif_netlink_parms(): no params data found [ 256.464125][ T6637] hsr_slave_0: entered promiscuous mode [ 256.514091][ T6637] hsr_slave_1: entered promiscuous mode [ 256.530328][ T6637] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.538656][ T6637] Cannot create hsr debugfs directory [ 256.869240][ T6643] team0: Port device team_slave_0 added [ 256.993589][ T5235] Bluetooth: hci0: command tx timeout [ 257.040058][ T6643] team0: Port device team_slave_1 added [ 257.111331][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.128558][ T6692] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.143412][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.164024][ T6692] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.171359][ T6692] bridge_slave_0: entered allmulticast mode [ 257.195096][ T6692] bridge_slave_0: entered promiscuous mode [ 257.234613][ T5235] Bluetooth: hci5: command tx timeout [ 257.292464][ T6643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.310471][ T6643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.422398][ T6643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.510721][ T6692] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.523728][ T6692] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.557014][ T6692] bridge_slave_1: entered allmulticast mode [ 257.582844][ T6692] bridge_slave_1: entered promiscuous mode [ 257.658620][ T6643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.683500][ T6643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.740907][ T6643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.954809][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.973564][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.997640][ T6692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.034570][ T5235] Bluetooth: hci2: command 0x0405 tx timeout [ 258.114058][ T4620] Bluetooth: hci6: command tx timeout [ 259.014338][ T6692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.266623][ T6692] team0: Port device team_slave_0 added [ 259.466023][ T6643] hsr_slave_0: entered promiscuous mode [ 260.248743][ T6643] hsr_slave_1: entered promiscuous mode [ 260.368692][ T4620] Bluetooth: hci6: command tx timeout [ 260.437067][ T6643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.453441][ T6643] Cannot create hsr debugfs directory [ 260.459260][ T51] bridge_slave_1: left allmulticast mode [ 260.492715][ T51] bridge_slave_1: left promiscuous mode [ 260.503653][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.513079][ T51] bridge_slave_0: left allmulticast mode [ 260.529171][ T51] bridge_slave_0: left promiscuous mode [ 260.535071][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.663268][ T6757] input: syz0 as /devices/virtual/input/input8 [ 264.092178][ T6763] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 264.102493][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.142294][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.172722][ T51] bond0 (unregistering): Released all slaves [ 264.335318][ T6692] team0: Port device team_slave_1 added [ 264.415962][ T51] hsr_slave_0: left promiscuous mode [ 264.432357][ T51] hsr_slave_1: left promiscuous mode [ 264.454105][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.481382][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.539331][ T51] veth1_macvtap: left promiscuous mode [ 264.552366][ T51] veth0_macvtap: left promiscuous mode [ 264.558822][ T51] veth1_vlan: left promiscuous mode [ 264.565582][ T51] veth0_vlan: left promiscuous mode [ 265.166165][ T6773] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 265.173138][ T6773] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 265.194951][ T6773] vhci_hcd vhci_hcd.0: Device attached [ 265.506062][ T5280] usb 18-1: SetAddress Request (2) to port 0 [ 265.526696][ T5280] usb 18-1: new SuperSpeed USB device number 2 using vhci_hcd [ 265.744794][ T6777] vhci_hcd: connection reset by peer [ 265.771669][ T5718] vhci_hcd: stop threads [ 265.790447][ T5718] vhci_hcd: release socket [ 265.814156][ T5718] vhci_hcd: disconnect device [ 265.941101][ T51] team0 (unregistering): Port device team_slave_1 removed [ 265.963476][ T4620] Bluetooth: hci0: command 0x0401 tx timeout [ 266.064855][ T51] team0 (unregistering): Port device team_slave_0 removed [ 266.464073][ T5706] EXT4-fs (loop0): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 266.775936][ T6782] loop4: detected capacity change from 0 to 1764 [ 269.273475][ T5281] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 269.359282][ T6692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.376926][ T6692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.404450][ T6692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.427313][ T6692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.434809][ T6692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.473455][ T5281] usb 5-1: Using ep0 maxpacket: 8 [ 269.494177][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 269.513107][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.522997][ T6692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.540283][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 269.566069][ T5281] usb 5-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 269.577004][ T5281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.587659][ T5281] usb 5-1: Product: syz [ 269.591870][ T5281] usb 5-1: Manufacturer: syz [ 269.605919][ T5281] usb 5-1: SerialNumber: syz [ 269.616164][ T5281] usb 5-1: config 0 descriptor?? [ 269.823606][ T6692] hsr_slave_0: entered promiscuous mode [ 269.855440][ T6692] hsr_slave_1: entered promiscuous mode [ 269.873480][ T6692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.882141][ T6692] Cannot create hsr debugfs directory [ 270.235904][ T6789] loop0: detected capacity change from 0 to 8192 [ 270.434997][ T6637] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 270.496924][ T6637] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 270.526379][ T6637] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 270.676280][ T5280] usb 18-1: device descriptor read/8, error -110 [ 270.699791][ T6637] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 270.767146][ T51] bridge_slave_1: left allmulticast mode [ 270.778555][ T51] bridge_slave_1: left promiscuous mode [ 270.794963][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.824100][ T51] bridge_slave_0: left allmulticast mode [ 270.831044][ T51] bridge_slave_0: left promiscuous mode [ 270.844251][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.121328][ T5280] usb usb18-port1: attempt power cycle [ 271.622608][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.657895][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.679419][ T51] bond0 (unregistering): Released all slaves [ 271.782383][ T5280] usb usb18-port1: unable to enumerate USB device [ 272.051911][ T5280] usb 5-1: USB disconnect, device number 7 [ 272.206516][ T6806] loop4: detected capacity change from 0 to 2048 [ 272.261372][ T6806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.610675][ T51] hsr_slave_0: left promiscuous mode [ 272.629943][ T51] hsr_slave_1: left promiscuous mode [ 272.651629][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.806150][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.517894][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.543562][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.560092][ T6335] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.629370][ T51] veth1_macvtap: left promiscuous mode [ 273.658659][ T51] veth0_macvtap: left promiscuous mode [ 273.665042][ T51] veth1_vlan: left promiscuous mode [ 273.670568][ T51] veth0_vlan: left promiscuous mode [ 275.271098][ T51] team0 (unregistering): Port device team_slave_1 removed [ 275.303198][ T6823] loop0: detected capacity change from 0 to 1024 [ 275.741906][ T51] team0 (unregistering): Port device team_slave_0 removed [ 276.087943][ T12] hfsplus: b-tree write err: -5, ino 4 [ 276.174206][ T29] audit: type=1326 audit(1724087627.348:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.0.230" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1930b79e79 code=0x0 [ 276.392196][ T6828] netlink: 'syz.0.230': attribute type 10 has an invalid length. [ 276.471402][ T6828] team0: Port device netdevsim0 added [ 276.533184][ T6637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.657294][ T6692] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.736936][ T6643] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 276.764639][ T6643] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 276.809008][ T6643] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 276.818465][ T6643] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 277.617368][ T6692] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.666427][ T6637] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.698301][ T6836] loop0: detected capacity change from 0 to 16 [ 277.707821][ T6836] erofs: Unknown parameter 'ž‡v ž@l‡¶JpÎô¥HÊ«ÜËP•¤X®Ÿmíäýʦ' [ 277.850597][ T6838] loop4: detected capacity change from 0 to 1024 [ 277.851946][ T6692] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.984513][ T6692] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.007558][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.014833][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.024308][ T5309] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 278.078301][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.085532][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.203610][ T5309] usb 1-1: Using ep0 maxpacket: 16 [ 278.219741][ T5309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 278.237179][ T6637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.250476][ T5309] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 278.287990][ T5309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.307490][ T5309] usb 1-1: config 0 descriptor?? [ 278.352960][ T6643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.391181][ T6643] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.398200][ T5276] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 278.422266][ T2499] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.429559][ T2499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.454268][ T6692] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 278.472404][ T2499] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.479598][ T2499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.501718][ T6692] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 278.528457][ T6692] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 278.577911][ T6692] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 278.596159][ T5276] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.618317][ T5276] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 278.659679][ T5276] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 278.689459][ T5276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 278.713887][ T6836] loop0: detected capacity change from 0 to 4096 [ 278.726785][ T5276] usb 5-1: SerialNumber: syz [ 278.728072][ T6836] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 278.756945][ T6643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.851820][ T6637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.999179][ T5276] usb 5-1: 0:2 : does not exist [ 279.096980][ T6692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.111559][ T5276] usb 5-1: USB disconnect, device number 8 [ 279.198024][ T6637] veth0_vlan: entered promiscuous mode [ 279.213016][ T6198] udevd[6198]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.306675][ T6637] veth1_vlan: entered promiscuous mode [ 279.332016][ T6692] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.417824][ T29] audit: type=1800 audit(1724087630.598:34): pid=6857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.232" name="file1" dev="loop0" ino=29 res=0 errno=0 [ 279.461866][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.469072][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.562686][ T6335] hfsplus: bad catalog entry type [ 279.635991][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.643224][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.905501][ T6637] veth0_macvtap: entered promiscuous mode [ 279.956020][ T6643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.989079][ T6637] veth1_macvtap: entered promiscuous mode [ 280.037899][ T66] hfsplus: b-tree write err: -5, ino 8 [ 280.103813][ T2499] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.338527][ T2499] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.472419][ T6637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.511917][ T6637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.541205][ T6637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.570649][ T6637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.612913][ T6637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.698307][ T2499] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.799049][ T6637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.877531][ T6637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.892894][ T6637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.910160][ T6637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.940784][ T6637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.962679][ T6637] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.973798][ T6637] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.982596][ T6637] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.994583][ T6637] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.052058][ T2499] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.202814][ T6643] veth0_vlan: entered promiscuous mode [ 281.276860][ T6643] veth1_vlan: entered promiscuous mode [ 281.336617][ T6692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.585247][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 281.597871][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 281.607730][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 281.623966][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 281.635280][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 281.642665][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 281.756329][ T6643] veth0_macvtap: entered promiscuous mode [ 281.768415][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.806102][ T2499] bridge_slave_1: left allmulticast mode [ 281.817799][ T2499] bridge_slave_1: left promiscuous mode [ 281.818115][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.832262][ T2499] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.863048][ T2499] bridge_slave_0: left allmulticast mode [ 281.882871][ T2499] bridge_slave_0: left promiscuous mode [ 281.898938][ T2499] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.005093][ T5309] usbhid 1-1:0.0: can't add hid device: -71 [ 282.024065][ T5309] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 282.044184][ T5309] usb 1-1: USB disconnect, device number 8 [ 282.359113][ T6896] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 282.427638][ T6896] kvm: pic: non byte read [ 282.451825][ T6896] kvm: pic: non byte read [ 282.457596][ T6896] kvm: pic: non byte read [ 282.646078][ T2499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.683376][ T2499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.716053][ T2499] bond0 (unregistering): Released all slaves [ 282.902096][ T6643] veth1_macvtap: entered promiscuous mode [ 282.930306][ T6692] veth0_vlan: entered promiscuous mode [ 282.973231][ T6692] veth1_vlan: entered promiscuous mode [ 282.990934][ T29] audit: type=1326 audit(1724087634.168:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6916 comm="syz.0.238" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1930b79e79 code=0x0 [ 283.093549][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.135141][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.387255][ T2499] hsr_slave_0: left promiscuous mode [ 283.418228][ T2499] hsr_slave_1: left promiscuous mode [ 283.470252][ T2499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.492516][ T2499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.520559][ T2499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.528280][ T2499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.574132][ T2499] veth1_macvtap: left promiscuous mode [ 283.582201][ T2499] veth0_macvtap: left promiscuous mode [ 283.589474][ T2499] veth1_vlan: left promiscuous mode [ 283.599411][ T2499] veth0_vlan: left promiscuous mode [ 283.713513][ T5235] Bluetooth: hci1: command tx timeout [ 283.934386][ T6941] loop0: detected capacity change from 0 to 512 [ 284.111056][ T6941] EXT4-fs (loop0): Test dummy encryption mode enabled [ 284.206462][ T6941] EXT4-fs error (device loop0): __ext4_iget:4982: inode #11: block 1: comm syz.0.239: invalid block [ 284.233861][ T6941] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.239: couldn't read orphan inode 11 (err -117) [ 284.261656][ T6941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.498700][ T6941] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 284.510873][ T6941] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.239: Directory hole found for htree leaf block 0 [ 284.837886][ T6970] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.239: Directory hole found for htree leaf block 0 [ 285.354933][ T2499] team0 (unregistering): Port device team_slave_1 removed [ 285.432111][ T2499] team0 (unregistering): Port device team_slave_0 removed [ 285.803465][ T5235] Bluetooth: hci1: command tx timeout [ 286.030746][ T6643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.060205][ T6643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.071714][ T6643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.082473][ T6643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.105650][ T6643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.134990][ T6692] veth0_macvtap: entered promiscuous mode [ 286.165450][ T6643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.182115][ T6643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.192233][ T6643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.208895][ T6643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.260546][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.264256][ T6643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.344711][ T6692] veth1_macvtap: entered promiscuous mode [ 286.396546][ T6643] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.433525][ T6643] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.454495][ T6643] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.481202][ T6643] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.672704][ T6692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.693930][ T6692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.705529][ T6692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.965963][ T6692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.096415][ T6692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.426273][ T6692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.540565][ T6692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.564223][ T7009] netlink: 'syz.2.241': attribute type 5 has an invalid length. [ 287.727641][ T6692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.741025][ T6692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.770265][ T6692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.787919][ T6692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.799661][ T6692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.815924][ T6692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.830400][ T6692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.010367][ T5235] Bluetooth: hci1: command tx timeout [ 289.119456][ T6692] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.394651][ T6692] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.404141][ T6692] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.412882][ T6692] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.085532][ T5235] Bluetooth: hci1: command tx timeout [ 290.251645][ T6884] chnl_net:caif_netlink_parms(): no params data found [ 290.269032][ T5718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.307444][ T5718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.587197][ T2499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.611335][ T2499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.682882][ T7040] loop2: detected capacity change from 0 to 32768 [ 291.776011][ T5718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.824496][ T5718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.875487][ T7040] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,nojournal_transaction_names [ 291.893904][ T7040] invalid journal entry, version=1.7: mi_btree_bitmap type=usage in superblock: invalid journal entry usage: bad size, shutting down [ 291.909222][ T7040] bcachefs (loop2): inconsistency detected - emergency read only at journal seq 0 [ 291.922906][ T7040] bcachefs (loop2): bch2_fs_recovery(): error fsck_errors_not_fixed [ 291.925499][ T6884] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.931605][ T7040] bcachefs (loop2): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 291.948049][ T7040] bcachefs (loop2): shutting down [ 291.971222][ T7040] bcachefs (loop2): shutdown complete [ 291.979060][ T6884] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.013743][ T6884] bridge_slave_0: entered allmulticast mode [ 292.020921][ T6884] bridge_slave_0: entered promiscuous mode [ 292.140848][ T6884] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.170047][ T6884] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.188232][ T6884] bridge_slave_1: entered allmulticast mode [ 292.199515][ T6884] bridge_slave_1: entered promiscuous mode [ 292.360987][ T6884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.374693][ T6884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.421429][ T29] audit: type=1326 audit(1724087643.578:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd16379e79 code=0x7ffc0000 [ 292.450989][ T29] audit: type=1326 audit(1724087643.578:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd16379e79 code=0x7ffc0000 [ 292.515064][ T6884] team0: Port device team_slave_0 added [ 292.522146][ T7062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.533614][ T7041] loop0: detected capacity change from 0 to 32768 [ 292.554452][ T2534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.569647][ T6884] team0: Port device team_slave_1 added [ 292.607849][ T29] audit: type=1326 audit(1724087643.588:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fbd16379e79 code=0x7ffc0000 [ 292.659875][ T6884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.660667][ T7041] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.245 (7041) [ 292.680629][ T6884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.680669][ T6884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.682925][ T6884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.726449][ T2534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.737957][ T7063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.749043][ T29] audit: type=1326 audit(1724087643.588:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd16379e79 code=0x7ffc0000 [ 292.779039][ T6884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.806037][ T29] audit: type=1326 audit(1724087643.598:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd16379e79 code=0x7ffc0000 [ 292.835268][ T6884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.849110][ T29] audit: type=1326 audit(1724087643.598:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd16379e79 code=0x7ffc0000 [ 292.894426][ T7062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.909048][ T29] audit: type=1326 audit(1724087643.598:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd16379e79 code=0x7ffc0000 [ 292.931617][ T7041] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 293.002810][ T29] audit: type=1326 audit(1724087643.598:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fbd16379e79 code=0x7ffc0000 [ 293.014281][ T7041] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 293.045187][ T7041] BTRFS info (device loop0): using free-space-tree [ 293.068205][ T6884] hsr_slave_0: entered promiscuous mode [ 293.122816][ T29] audit: type=1326 audit(1724087643.598:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd16379e79 code=0x7ffc0000 [ 293.146587][ T6884] hsr_slave_1: entered promiscuous mode [ 293.241191][ T29] audit: type=1326 audit(1724087643.598:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd16379e79 code=0x7ffc0000 [ 293.356100][ T7077] loop1: detected capacity change from 0 to 256 [ 293.398216][ T7040] bcachefs: bch2_fs_get_tree() error: fsck_errors_not_fixed [ 293.494318][ T7077] vfat: Unknown parameter '00000000000000000000ÿÿ' [ 294.773642][ T7091] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 295.611321][ T5793] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 296.776653][ T5327] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.819861][ T5327] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.065964][ T5327] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.203231][ T4620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.231022][ T4620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.267918][ T7099] loop1: detected capacity change from 0 to 40427 [ 298.277825][ T7111] veth0_vlan: left promiscuous mode [ 298.344524][ T4620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.391424][ T7099] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 298.419733][ T5327] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.442905][ T4620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.460821][ T7099] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 298.473566][ T4620] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 298.485196][ T4620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 299.223531][ T7099] F2FS-fs (loop1): invalid crc value [ 299.257716][ T7099] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4) [ 299.440054][ T7131] loop3: detected capacity change from 0 to 256 [ 301.430057][ T4620] Bluetooth: hci0: command tx timeout [ 301.729424][ T7150] loop0: detected capacity change from 0 to 1024 [ 301.769722][ T7150] hfsplus: creator requires a 4 character value [ 301.807197][ T7150] hfsplus: unable to parse mount options [ 302.637956][ T5327] bridge_slave_1: left allmulticast mode [ 302.649249][ T5327] bridge_slave_1: left promiscuous mode [ 302.719510][ T5327] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.770021][ T5327] bridge_slave_0: left allmulticast mode [ 302.802463][ T5327] bridge_slave_0: left promiscuous mode [ 302.832428][ T5327] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.219756][ T7170] affs: No valid root block on device nbd0 [ 303.416589][ T7171] loop0: detected capacity change from 0 to 2048 [ 303.519244][ T4620] Bluetooth: hci0: command tx timeout [ 303.701335][ T7171] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.738131][ T7171] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.353233][ T7159] loop1: detected capacity change from 0 to 40427 [ 304.389904][ T7159] F2FS-fs (loop1): Found nat_bits in checkpoint [ 304.477075][ T7159] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 304.554310][ T5327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.575045][ T5327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.596072][ T5327] bond0 (unregistering): Released all slaves [ 305.422073][ T6692] syz-executor: attempt to access beyond end of device [ 305.422073][ T6692] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 305.436894][ T6692] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 305.451038][ T6692] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 305.458805][ T6692] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 305.504371][ T7177] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 305.521422][ T7186] loop3: detected capacity change from 0 to 256 [ 305.560358][ T4620] Bluetooth: hci0: command tx timeout [ 308.319507][ T4620] Bluetooth: hci0: command tx timeout [ 308.749401][ T5327] hsr_slave_0: left promiscuous mode [ 308.784403][ T5327] hsr_slave_1: left promiscuous mode [ 308.812937][ T5327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.890413][ T7188] loop0: detected capacity change from 0 to 40427 [ 308.900818][ T7188] F2FS-fs (loop0): Unable to read 1th superblock [ 308.907708][ T7188] F2FS-fs (loop0): Unable to read 2th superblock [ 308.936957][ T5327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.962602][ T5327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.024261][ T5327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.293204][ T7217] loop1: detected capacity change from 0 to 1024 [ 310.634347][ T5327] veth1_macvtap: left promiscuous mode [ 310.762625][ T5327] veth0_macvtap: left promiscuous mode [ 310.816080][ T5327] veth1_vlan: left promiscuous mode [ 310.821440][ T5327] veth0_vlan: left promiscuous mode [ 311.067213][ T7227] loop1: detected capacity change from 0 to 256 [ 311.137911][ T7227] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 312.980354][ T7242] loop3: detected capacity change from 0 to 512 [ 313.011945][ T7242] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 313.040257][ T7242] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 313.173910][ T7220] loop0: detected capacity change from 0 to 40427 [ 313.212560][ T7220] F2FS-fs (loop0): invalid crc value [ 313.227731][ T7242] EXT4-fs (loop3): 1 orphan inode deleted [ 313.235018][ T7242] EXT4-fs (loop3): 1 truncate cleaned up [ 313.241881][ T7242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.258166][ T7220] F2FS-fs (loop0): Found nat_bits in checkpoint [ 313.324713][ T7242] EXT4-fs error (device loop3): ext4_lookup:1811: inode #15: comm syz.3.271: iget: bad extra_isize 46 (inode size 256) [ 313.376666][ T7220] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 313.387947][ T7242] EXT4-fs (loop3): Remounting filesystem read-only [ 313.486415][ T7253] netlink: 20 bytes leftover after parsing attributes in process `syz.1.272'. [ 313.730673][ T7254] fuse: Unknown parameter '017777777777777777777771844674407370955161500000000000000000000' [ 314.145163][ T7256] syz.0.267: attempt to access beyond end of device [ 314.145163][ T7256] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 314.160678][ T7256] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 316.181596][ T6643] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.723968][ T5327] team0 (unregistering): Port device team_slave_1 removed [ 316.840918][ T5327] team0 (unregistering): Port device team_slave_0 removed [ 317.405290][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.413010][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.499202][ T7268] loop0: detected capacity change from 0 to 1024 [ 317.524342][ T7268] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 317.980762][ T7268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.210705][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.464701][ T6884] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 319.489501][ T7115] chnl_net:caif_netlink_parms(): no params data found [ 319.696868][ T6884] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 319.719298][ T6884] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 319.772347][ T6884] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 320.180296][ T7286] loop1: detected capacity change from 0 to 128 [ 320.926692][ T7286] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 320.940695][ T7286] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 321.106063][ T7115] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.143922][ T7115] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.152676][ T7115] bridge_slave_0: entered allmulticast mode [ 321.167586][ T7115] bridge_slave_0: entered promiscuous mode [ 321.524086][ T6692] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 321.912477][ T7115] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.163125][ T7115] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.180375][ T7115] bridge_slave_1: entered allmulticast mode [ 322.224642][ T7115] bridge_slave_1: entered promiscuous mode [ 322.700614][ T7311] ubi0: attaching mtd0 [ 322.767258][ T7311] ubi0: scanning is finished [ 322.773790][ T7311] ubi0: empty MTD device detected [ 323.597061][ T7313] loop1: detected capacity change from 0 to 256 [ 325.128045][ T7115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.142981][ T7313] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 326.196233][ T7311] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 326.349590][ T7115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.741247][ T6884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.855359][ T7115] team0: Port device team_slave_0 added [ 328.926519][ T7115] team0: Port device team_slave_1 added [ 329.743938][ T7115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.752751][ T7115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.822123][ T7115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.847899][ T7115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.863312][ T7115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.913332][ T7115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.116181][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.213697][ T6884] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.255631][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.262807][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.342633][ T7115] hsr_slave_0: entered promiscuous mode [ 330.378803][ T7115] hsr_slave_1: entered promiscuous mode [ 330.409997][ T7115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.434066][ T7115] Cannot create hsr debugfs directory [ 330.515815][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.574602][ T2534] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.581785][ T2534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.690482][ T7337] loop1: detected capacity change from 0 to 40427 [ 330.794006][ T7337] F2FS-fs (loop1): Found nat_bits in checkpoint [ 330.911523][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 330.917749][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.930798][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 330.951969][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 330.967759][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 330.982311][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 330.993717][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 331.046622][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.047361][ T7337] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 332.182959][ T11] bridge_slave_1: left allmulticast mode [ 332.213478][ T11] bridge_slave_1: left promiscuous mode [ 332.219295][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.268859][ T11] bridge_slave_0: left allmulticast mode [ 332.317609][ T11] bridge_slave_0: left promiscuous mode [ 332.344587][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.444308][ T7383] netlink: 20 bytes leftover after parsing attributes in process `syz.0.289'. [ 333.085612][ T5235] Bluetooth: hci3: command tx timeout [ 335.155800][ T5235] Bluetooth: hci3: command tx timeout [ 335.191132][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.216232][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.266525][ T11] bond0 (unregistering): Released all slaves [ 335.672086][ T7407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.292'. [ 336.065030][ T6884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.555838][ T7435] netlink: 'syz.0.293': attribute type 3 has an invalid length. [ 337.233794][ T5235] Bluetooth: hci3: command tx timeout [ 337.248791][ T11] hsr_slave_0: left promiscuous mode [ 337.430168][ T11] hsr_slave_1: left promiscuous mode [ 337.552442][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.656142][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.004164][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.011635][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.149232][ T11] veth1_macvtap: left promiscuous mode [ 338.165630][ T11] veth0_macvtap: left promiscuous mode [ 338.184319][ T11] veth1_vlan: left promiscuous mode [ 338.189773][ T11] veth0_vlan: left promiscuous mode [ 339.396378][ T5235] Bluetooth: hci3: command tx timeout [ 340.017745][ T11] team0 (unregistering): Port device team_slave_1 removed [ 340.087854][ T11] team0 (unregistering): Port device team_slave_0 removed [ 340.813969][ T7115] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 340.876720][ T7115] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 340.905030][ T7115] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 341.907378][ T7357] chnl_net:caif_netlink_parms(): no params data found [ 341.935915][ T7115] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 342.694077][ T5232] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 342.745276][ T7357] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.752572][ T7357] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.801227][ T7357] bridge_slave_0: entered allmulticast mode [ 342.832776][ T7357] bridge_slave_0: entered promiscuous mode [ 342.897796][ T5232] usb 2-1: Using ep0 maxpacket: 32 [ 342.926266][ T5232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.951298][ T7357] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.974292][ T5232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.987602][ T4620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.989753][ T7357] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.006953][ T5232] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 343.007078][ T4620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 343.018399][ T7357] bridge_slave_1: entered allmulticast mode [ 343.038632][ T4620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 343.049639][ T4620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 343.057524][ T4620] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 343.073616][ T5232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.075952][ T4620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 343.096947][ T7357] bridge_slave_1: entered promiscuous mode [ 343.173565][ T5232] usb 2-1: config 0 descriptor?? [ 343.218027][ T5232] hub 2-1:0.0: USB hub found [ 343.326474][ T7357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.369849][ T7357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.444535][ T5232] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 343.529317][ T7357] team0: Port device team_slave_0 added [ 343.578046][ T7357] team0: Port device team_slave_1 added [ 343.896214][ T7357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.903512][ T7357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.904284][ T5232] usbhid 2-1:0.0: can't add hid device: -71 [ 343.984724][ T5232] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 343.984759][ T7357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.043692][ T5232] usb 2-1: USB disconnect, device number 7 [ 344.105197][ T7357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.142907][ T7357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.217299][ T7357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.349017][ T7115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.369338][ T7516] netlink: 24 bytes leftover after parsing attributes in process `syz.0.300'. [ 344.759763][ T7357] hsr_slave_0: entered promiscuous mode [ 344.979948][ T7357] hsr_slave_1: entered promiscuous mode [ 345.009300][ T7357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.031811][ T7357] Cannot create hsr debugfs directory [ 345.153553][ T4620] Bluetooth: hci1: command tx timeout [ 345.560630][ T7115] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.036499][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.043747][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.073193][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.080478][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.188963][ T11] bridge_slave_1: left allmulticast mode [ 346.197046][ T11] bridge_slave_1: left promiscuous mode [ 346.216369][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.246618][ T11] bridge_slave_0: left allmulticast mode [ 346.259591][ T11] bridge_slave_0: left promiscuous mode [ 346.280169][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.234333][ T4620] Bluetooth: hci1: command tx timeout [ 347.440951][ T7553] loop1: detected capacity change from 0 to 256 [ 347.537210][ T7553] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d) [ 347.770635][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.779557][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 347.779575][ T29] audit: type=1804 audit(1724087698.948:53): pid=7555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.304" name="/newroot/17/file0/file0" dev="loop1" ino=1048646 res=1 errno=0 [ 348.177633][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.380049][ T11] bond0 (unregistering): Released all slaves [ 348.654550][ T11] hsr_slave_0: left promiscuous mode [ 348.663149][ T11] hsr_slave_1: left promiscuous mode [ 348.679836][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.694946][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.179539][ T7562] o2cb: This node has not been configured. [ 349.196730][ T7562] o2cb: Cluster check failed. Fix errors before retrying. [ 349.213413][ T7562] (syz.0.305,7562,0):user_dlm_register:674 ERROR: status = -22 [ 349.236087][ T7562] (syz.0.305,7562,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 349.313568][ T4620] Bluetooth: hci1: command tx timeout [ 349.385840][ T11] team0 (unregistering): Port device team_slave_1 removed [ 349.535546][ T7561] loop1: detected capacity change from 0 to 32768 [ 349.563481][ T11] team0 (unregistering): Port device team_slave_0 removed [ 349.585944][ T7561] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 349.663620][ T7561] XFS (loop1): Ending clean mount [ 349.730279][ T7561] XFS (loop1): Quotacheck needed: Please wait. [ 349.929937][ T7561] XFS (loop1): Quotacheck: Done. [ 350.270565][ T7572] capability: warning: `syz.1.306' uses 32-bit capabilities (legacy support in use) [ 350.420235][ T7572] trusted_key: encrypted_key: insufficient parameters specified [ 351.042831][ T6692] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 351.072854][ T7115] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 351.092557][ T7115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 351.393554][ T4620] Bluetooth: hci1: command tx timeout [ 351.561746][ T7489] chnl_net:caif_netlink_parms(): no params data found [ 352.077932][ T7489] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.100729][ T7489] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.133428][ T7489] bridge_slave_0: entered allmulticast mode [ 352.157226][ T7489] bridge_slave_0: entered promiscuous mode [ 352.203856][ T7115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.253569][ T7583] loop1: detected capacity change from 0 to 64 [ 352.259984][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 352.277781][ T7489] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.338958][ T7489] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.368327][ T7489] bridge_slave_1: entered allmulticast mode [ 352.376722][ T7489] bridge_slave_1: entered promiscuous mode [ 352.511121][ T7489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.534049][ T7489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.758644][ T7489] team0: Port device team_slave_0 added [ 352.803148][ T7489] team0: Port device team_slave_1 added [ 352.860103][ T7575] delete_channel: no stack [ 352.865788][ T7575] delete_channel: no stack [ 352.962549][ T6692] Trying to free block not in datazone [ 352.971424][ T7489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.980790][ T6692] Trying to free block not in datazone [ 352.998677][ T7489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.025070][ T6692] Trying to free block not in datazone [ 353.036308][ T6692] Trying to free block not in datazone [ 353.041810][ T6692] Trying to free block not in datazone [ 353.059238][ T7489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.059269][ T6692] minix_free_block (loop1:6): bit already cleared [ 353.093409][ T6692] Trying to free block not in datazone [ 353.103603][ T6692] Trying to free block not in datazone [ 353.206572][ T7489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.223424][ T7489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.280383][ T7489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.380494][ T7489] hsr_slave_0: entered promiscuous mode [ 353.402059][ T7489] hsr_slave_1: entered promiscuous mode [ 353.442619][ T7357] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 353.501808][ T7605] loop1: detected capacity change from 0 to 512 [ 353.504262][ T7115] veth0_vlan: entered promiscuous mode [ 353.630136][ T7357] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 353.645667][ T7605] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 353.705251][ T7605] EXT4-fs (loop1): 1 truncate cleaned up [ 353.715373][ T7115] veth1_vlan: entered promiscuous mode [ 353.746967][ T7605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.755640][ T7357] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 353.854955][ T7357] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 353.892241][ T7605] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.309: Logical block already allocated [ 353.966136][ T7605] EXT4-fs (loop1): Remounting filesystem read-only [ 354.068952][ T7115] veth0_macvtap: entered promiscuous mode [ 354.143880][ T7115] veth1_macvtap: entered promiscuous mode [ 354.302291][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.345904][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.370874][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.391882][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.421161][ T7115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.547235][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.595704][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.610196][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.638388][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.659469][ T7115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.790478][ T7115] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.808246][ T7115] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.843406][ T7115] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.869971][ T7115] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.166728][ T6692] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.238268][ T7632] netlink: 20 bytes leftover after parsing attributes in process `syz.0.311'. [ 355.987466][ T7357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.050326][ T7489] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 356.078319][ T7489] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 356.081042][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.093831][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.119008][ T7357] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.137694][ T7489] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 356.182203][ T7489] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 356.198924][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.206139][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.217511][ T5232] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 356.228857][ T2534] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.236011][ T2534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.259644][ T2534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.309472][ T2534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.443362][ T5232] usb 1-1: Using ep0 maxpacket: 8 [ 356.453117][ T5232] usb 1-1: unable to get BOS descriptor or descriptor too short [ 356.506976][ T5232] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 356.534877][ T5232] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.584978][ T5232] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 356.606464][ T7489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.623545][ T5232] usb 1-1: config 1 has no interface number 1 [ 356.639938][ T5232] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 356.678161][ T7489] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.693882][ T5232] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 356.734916][ T5232] usb 1-1: config 1 interface 2 has no altsetting 0 [ 356.745275][ T2499] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.752405][ T2499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.762611][ T5232] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 356.780728][ T7645] loop2: detected capacity change from 0 to 512 [ 356.797421][ T5232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.811769][ T5718] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.818987][ T5718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.827087][ T5232] usb 1-1: Product: syz [ 356.831309][ T5232] usb 1-1: Manufacturer: syz [ 356.853603][ T5232] usb 1-1: SerialNumber: syz [ 356.882905][ T7645] EXT4-fs (loop2): Test dummy encryption mode enabled [ 356.892737][ T7634] loop1: detected capacity change from 0 to 32768 [ 356.968216][ T7645] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #12: comm syz.2.251: corrupted in-inode xattr: invalid ea_ino [ 357.005442][ T7645] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.251: couldn't read orphan inode 12 (err -117) [ 357.042039][ T7645] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.044360][ T7634] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 357.103061][ T7357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.387421][ T7357] veth0_vlan: entered promiscuous mode [ 358.651257][ T7357] veth1_vlan: entered promiscuous mode [ 359.738739][ T7665] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 359.956093][ T7667] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.251: Directory hole found for htree leaf block 0 [ 359.969131][ T5232] usb 1-1: USB disconnect, device number 9 [ 360.104181][ T7357] veth0_macvtap: entered promiscuous mode [ 360.116275][ T7634] XFS (loop1): Ending clean mount [ 360.132281][ T7357] veth1_macvtap: entered promiscuous mode [ 360.136253][ T7276] udevd[7276]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 360.168966][ T7115] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 360.263789][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.325799][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.341346][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.352451][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.362982][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.374895][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.387667][ T6692] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 360.389110][ T7357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.428540][ T7489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.440635][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.453043][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.471773][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.731249][ T7688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.314'. [ 360.744706][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.801603][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.856041][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.897157][ T7357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.970570][ T7357] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.020340][ T7357] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.056652][ T7357] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.097901][ T7357] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.525708][ T2534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.573572][ T2534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.797003][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.867825][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.943059][ T7489] veth0_vlan: entered promiscuous mode [ 362.041075][ T7699] sd 0:0:1:0: device reset [ 362.619934][ T7489] veth1_vlan: entered promiscuous mode [ 362.780673][ T7489] veth0_macvtap: entered promiscuous mode [ 362.801545][ T7702] loop3: detected capacity change from 0 to 1024 [ 362.816482][ T7489] veth1_macvtap: entered promiscuous mode [ 362.838703][ T7702] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 362.844017][ T7705] loop2: detected capacity change from 0 to 1024 [ 362.977733][ T7707] netlink: 224 bytes leftover after parsing attributes in process `syz.1.315'. [ 363.195967][ T7705] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 363.238861][ T7707] bridge_slave_0: left allmulticast mode [ 363.245063][ T7707] bridge_slave_0: left promiscuous mode [ 363.251721][ T7707] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.798432][ T7489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.842086][ T7702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.856947][ T7489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.860786][ T7705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.868674][ T7489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.890970][ T7489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.900947][ T7489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.911613][ T7489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.921762][ T7489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.933023][ T7489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.945281][ T7489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.956966][ T7489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.967592][ T7489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.977542][ T7489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.988242][ T7489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.007138][ T7489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.031168][ T7489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.060092][ T7489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.071886][ T7489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.705255][ T7717] loop1: detected capacity change from 0 to 520 [ 364.765213][ T7717] EXT4-fs: Ignoring removed orlov option [ 364.896149][ T7489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.941653][ T7717] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6040e09c, mo2=0102] [ 365.949740][ T7717] System zones: 1-12 [ 365.962014][ T7489] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.971650][ T7717] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.319: couldn't read orphan inode 15 (err -116) [ 365.986524][ T7717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.122694][ T7715] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.319: Directory hole found for htree leaf block 0 [ 366.533444][ T7489] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.573521][ T7489] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.582413][ T7489] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.695891][ T7724] netlink: 200 bytes leftover after parsing attributes in process `syz.0.320'. [ 367.465361][ T6692] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.691810][ T7115] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.602225][ T7730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.322'. [ 368.615455][ T7730] xfrm1: entered promiscuous mode [ 368.620545][ T7730] xfrm1: entered allmulticast mode [ 368.651565][ T5327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.689899][ T5327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.868508][ T7729] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.321'. [ 368.879162][ T7729] netlink: get zone limit has 8 unknown bytes [ 369.103908][ T7357] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.743059][ T7741] netlink: 'syz.2.323': attribute type 12 has an invalid length. [ 369.751092][ T7741] netlink: 132 bytes leftover after parsing attributes in process `syz.2.323'. [ 369.825076][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.001917][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.326692][ T7749] devtmpfs: Unknown parameter 'posixacl' [ 371.416637][ T7748] netlink: 'syz.2.326': attribute type 4 has an invalid length. [ 371.645914][ T7755] netlink: 'syz.2.326': attribute type 4 has an invalid length. [ 371.981742][ T7758] hub 6-0:1.0: USB hub found [ 372.020715][ T7758] hub 6-0:1.0: 1 port detected [ 374.093322][ T5276] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 375.537135][ T5276] usb 5-1: device descriptor read/all, error -71 [ 375.883390][ T4620] Bluetooth: hci6: command 0x0406 tx timeout [ 376.003580][ T7791] rtc_cmos 00:00: Alarms can be up to one day in the future [ 376.487706][ T5282] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 376.646334][ T7793] warning: `syz.2.334' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 376.673996][ T7796] loop3: detected capacity change from 0 to 1024 [ 376.787628][ T7796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.835173][ T5282] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.857596][ T5282] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.911962][ T5282] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.171044][ T5276] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 378.140028][ T5282] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 378.171782][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.890370][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.890405][ T5282] usb 1-1: Product: syz [ 378.891247][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.891266][ T5282] usb 1-1: Manufacturer: syz [ 378.891287][ T5282] usb 1-1: SerialNumber: syz [ 379.913699][ T5282] usb 1-1: can't set config #1, error -71 [ 379.923365][ T5276] usb 5-1: Using ep0 maxpacket: 32 [ 379.929433][ T5276] usb 5-1: device descriptor read/all, error -71 [ 379.944145][ T5276] usb usb5-port1: attempt power cycle [ 379.951424][ T5282] usb 1-1: USB disconnect, device number 10 [ 380.052329][ T7820] loop2: detected capacity change from 0 to 1024 [ 380.100616][ T7820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.190970][ T7357] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.513658][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 380.515223][ T7834] tipc: Started in network mode [ 380.533216][ T7834] tipc: Node identity , cluster identity 4711 [ 380.546846][ T7834] tipc: Failed to set node id, please configure manually [ 380.580536][ T7834] tipc: Enabling of bearer rejected, failed to enable media [ 380.695942][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 380.717592][ T25] usb 3-1: New USB device found, idVendor=04e6, idProduct=0006, bcdDevice= 2.05 [ 380.728919][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.798093][ T25] usb 3-1: config 0 descriptor?? [ 380.877574][ T25] usb-storage 3-1:0.0: USB Mass Storage device detected [ 381.435531][ T25] usb-storage 3-1:0.0: Quirks match for vid 04e6 pid 0006: 1 [ 382.454649][ T7839] loop3: detected capacity change from 0 to 256 [ 382.717859][ T7802] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 382.755430][ T7839] exfat: Invalid uid '0x00000000ffffffff' [ 383.102115][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 383.898479][ T25] usb 3-1: USB disconnect, device number 3 [ 384.008460][ T7847] loop4: detected capacity change from 0 to 164 [ 384.015873][ T7115] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.088177][ T7847] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 384.589790][ T7863] netlink: 'syz.1.346': attribute type 3 has an invalid length. [ 384.598197][ T7863] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.346'. [ 385.453755][ T7871] loop2: detected capacity change from 0 to 128 [ 385.575054][ T7871] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 385.618822][ T7871] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 385.655492][ T5235] Bluetooth: min 3 > max 0 [ 385.944700][ T29] audit: type=1326 audit(1724087737.128:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7853 comm="syz.0.347" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1930b79e79 code=0x0 [ 385.957015][ T29] audit: type=1804 audit(1724087737.138:55): pid=7871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.345" name="/newroot/10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=12 res=1 errno=0 [ 386.047381][ T7880] loop3: detected capacity change from 0 to 16 [ 387.794212][ T30] INFO: task syz.1.203:6565 blocked for more than 143 seconds. [ 387.796419][ T30] Not tainted 6.11.0-rc3-next-20240816-syzkaller #0 [ 387.796443][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 387.796457][ T30] task:syz.1.203 state:D stack:24384 pid:6565 tgid:6565 ppid:5227 flags:0x00004004 [ 387.796529][ T30] Call Trace: [ 387.796539][ T30] [ 387.796556][ T30] __schedule+0x17ff/0x4ad0 [ 387.796616][ T30] ? __pfx___schedule+0x10/0x10 [ 387.796650][ T30] ? __pfx_lock_release+0x10/0x10 [ 387.796709][ T30] ? schedule+0x90/0x320 [ 387.796746][ T30] schedule+0x14b/0x320 [ 387.796778][ T30] schedule_timeout+0xb0/0x310 [ 387.796804][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 387.796829][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 387.796875][ T30] ? wait_for_completion+0x2fe/0x620 [ 387.796906][ T30] ? wait_for_completion+0x2fe/0x620 [ 387.796935][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 387.796973][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 387.797003][ T30] ? wait_for_completion+0x2fe/0x620 [ 387.797036][ T30] wait_for_completion+0x355/0x620 [ 387.797084][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 387.797123][ T30] ? __init_swait_queue_head+0xae/0x150 [ 387.797161][ T30] __vhost_worker_flush+0x1e6/0x280 [ 387.797201][ T30] ? __pfx___vhost_worker_flush+0x10/0x10 [ 387.797237][ T30] ? __pfx_vhost_flush_work+0x10/0x10 [ 387.797282][ T30] ? __mutex_unlock_slowpath+0x21d/0x750 [ 387.797327][ T30] vhost_dev_flush+0xc9/0x150 [ 387.797357][ T30] ? __pfx_vhost_dev_flush+0x10/0x10 [ 387.797387][ T30] ? __pfx_ima_file_free+0x10/0x10 [ 387.797429][ T30] vhost_net_flush+0x24/0x160 [ 387.797465][ T30] vhost_net_release+0x10c/0x470 [ 387.797501][ T30] ? __pfx_vhost_net_release+0x10/0x10 [ 387.797538][ T30] ? __pfx_call_rcu+0x10/0x10 [ 387.797562][ T30] ? evm_file_release+0x140/0x1d0 [ 387.797598][ T30] ? __pfx_vhost_net_release+0x10/0x10 [ 387.797633][ T30] __fput+0x24b/0x890 [ 387.797678][ T30] task_work_run+0x24f/0x310 [ 387.797713][ T30] ? __pfx_task_work_run+0x10/0x10 [ 387.797745][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 387.797780][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 387.797817][ T30] do_syscall_64+0x100/0x230 [ 387.797851][ T30] ? clear_bhb_loop+0x35/0x90 [ 387.797879][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.797916][ T30] RIP: 0033:0x7f91d1179e79 [ 387.797944][ T30] RSP: 002b:00007ffc25ff6348 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 387.797972][ T30] RAX: 0000000000000000 RBX: 00007f91d1317a80 RCX: 00007f91d1179e79 [ 387.797990][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 387.798007][ T30] RBP: 00007f91d1317a80 R08: 0000000000000006 R09: 00007ffc25ff662f [ 387.798024][ T30] R10: 00000000003ffbbc R11: 0000000000000246 R12: 000000000003b16a [ 387.798040][ T30] R13: 00007ffc25ff6440 R14: 00007ffc25ff6460 R15: ffffffffffffffff [ 387.798074][ T30] [ 387.798105][ T30] [ 387.798105][ T30] Showing all locks held in the system: [ 387.798121][ T30] 1 lock held by khungtaskd/30: [ 387.798137][ T30] #0: ffffffff8e939720 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 387.798251][ T30] 2 locks held by udevd/4681: [ 387.798268][ T30] 2 locks held by getty/4978: [ 387.798283][ T30] #0: ffff88802b2ee0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 387.798359][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 387.798440][ T30] 1 lock held by syz.4.344/7843: [ 387.798455][ T30] #0: ffff88807a8e9498 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x17c/0x3d0 [ 387.798523][ T30] 1 lock held by syz.4.344/7856: [ 387.798538][ T30] 1 lock held by syz.2.345/7859: [ 387.798553][ T30] 2 locks held by syz.0.347/7869: [ 387.798569][ T30] 6 locks held by syz.1.349/7870: [ 387.798584][ T30] 4 locks held by syz.3.350/7879: [ 387.798598][ T30] 1 lock held by syz.3.350/7880: [ 387.798613][ T30] #0: ffff888022f740e0 (&type->s_umount_key#63/1){+.+.}-{3:3}, at: alloc_super+0x221/0x9d0 [ 387.798704][ T30] [ 387.798712][ T30] ============================================= [ 387.798712][ T30] [ 387.798723][ T30] NMI backtrace for cpu 0 [ 387.798745][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-next-20240816-syzkaller #0 [ 387.798775][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 387.798790][ T30] Call Trace: [ 387.798799][ T30] [ 387.798809][ T30] dump_stack_lvl+0x241/0x360 [ 387.798845][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.798879][ T30] ? __pfx__printk+0x10/0x10 [ 387.798907][ T30] ? vprintk_emit+0x667/0x7c0 [ 387.798935][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 387.798969][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 387.799001][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 387.799023][ T30] ? _printk+0xd5/0x120 [ 387.799052][ T30] ? __pfx__printk+0x10/0x10 [ 387.799081][ T30] ? __wake_up_klogd+0xcc/0x110 [ 387.799111][ T30] ? __pfx__printk+0x10/0x10 [ 387.799147][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 387.799180][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 387.799209][ T30] watchdog+0xff4/0x1040 [ 387.799233][ T30] ? watchdog+0x1ea/0x1040 [ 387.799261][ T30] ? __pfx_watchdog+0x10/0x10 [ 387.799283][ T30] kthread+0x2f0/0x390 [ 387.799304][ T30] ? __pfx_watchdog+0x10/0x10 [ 387.799325][ T30] ? __pfx_kthread+0x10/0x10 [ 387.799349][ T30] ret_from_fork+0x4b/0x80 [ 387.799382][ T30] ? __pfx_kthread+0x10/0x10 [ 387.799404][ T30] ret_from_fork_asm+0x1a/0x30 [ 387.799453][ T30] [ 387.799463][ T30] Sending NMI from CPU 0 to CPUs 1: [ 387.799500][ C1] NMI backtrace for cpu 1 [ 387.799512][ C1] CPU: 1 UID: 0 PID: 7879 Comm: syz.3.350 Not tainted 6.11.0-rc3-next-20240816-syzkaller #0 [ 387.799533][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 387.799543][ C1] RIP: 0010:do_raw_spin_lock+0x155/0x370 [ 387.799570][ C1] Code: 00 00 c7 44 24 60 00 00 00 00 4c 89 e7 be 04 00 00 00 e8 ce fd 8a 00 4c 89 f7 be 04 00 00 00 e8 c1 fd 8a 00 41 0f b6 44 1d 00 <84> c0 48 89 da 0f 85 8d 01 00 00 8b 44 24 60 b9 01 00 00 00 f0 41 [ 387.799585][ C1] RSP: 0018:ffffc900030ceec0 EFLAGS: 00000097 [ 387.799600][ C1] RAX: 0000000000000004 RBX: dffffc0000000000 RCX: ffffffff81714e9f [ 387.799614][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc900030cef20 [ 387.799626][ C1] RBP: ffffc900030cef90 R08: 0000000000000003 R09: fffff52000619de4 [ 387.799639][ C1] R10: dffffc0000000000 R11: fffff52000619de4 R12: ffff88801d7671c8 [ 387.799652][ C1] R13: 1ffff92000619de4 R14: ffffc900030cef20 R15: 1ffff11003aece3a [ 387.799667][ C1] FS: 00007f3504ff56c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 387.799684][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 387.799697][ C1] CR2: 00007f74f0558d0e CR3: 00000000580e2000 CR4: 00000000003526f0 [ 387.799714][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 387.799725][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 387.799736][ C1] Call Trace: [ 387.799743][ C1] [ 387.799749][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 387.799767][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 387.799795][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 387.799812][ C1] ? nmi_handle+0x2a/0x5a0 [ 387.799838][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 387.799861][ C1] ? nmi_handle+0x14f/0x5a0 [ 387.799879][ C1] ? nmi_handle+0x2a/0x5a0 [ 387.799897][ C1] ? do_raw_spin_lock+0x155/0x370 [ 387.799919][ C1] ? default_do_nmi+0x63/0x160 [ 387.799938][ C1] ? exc_nmi+0x123/0x1f0 [ 387.799955][ C1] ? end_repeat_nmi+0xf/0x53 [ 387.799978][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 387.800000][ C1] ? do_raw_spin_lock+0x155/0x370 [ 387.800022][ C1] ? do_raw_spin_lock+0x155/0x370 [ 387.800046][ C1] ? do_raw_spin_lock+0x155/0x370 [ 387.800068][ C1] [ 387.800074][ C1] [ 387.800083][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 387.800105][ C1] ? __lock_acquire+0x137a/0x2040 [ 387.800136][ C1] _raw_spin_lock_irqsave+0xe1/0x120 [ 387.800158][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 387.800185][ C1] queue_stack_map_push_elem+0x1b2/0x660 [ 387.800214][ C1] ? __pfx_queue_stack_map_push_elem+0x10/0x10 [ 387.800238][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 387.800260][ C1] ? plist_check_list+0x477/0x4d0 [ 387.800299][ C1] ? bpf_trace_run4+0x244/0x590 [ 387.800323][ C1] bpf_prog_b0e2dcbfde9dbc23+0x43/0x47 [ 387.800339][ C1] bpf_trace_run4+0x334/0x590 [ 387.800363][ C1] ? rcu_read_lock_sched_held+0x8d/0x130 [ 387.800391][ C1] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 387.800424][ C1] ? __pfx_bpf_trace_run4+0x10/0x10 [ 387.800451][ C1] ? __pfx_probe_sched_switch+0x10/0x10 [ 387.800476][ C1] ? tracing_record_taskinfo_sched_switch+0x7b/0x390 [ 387.800500][ C1] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 387.800520][ C1] __traceiter_sched_switch+0x98/0xd0 [ 387.800542][ C1] __schedule+0x2591/0x4ad0 [ 387.800571][ C1] ? try_to_wake_up+0x8fb/0x1470 [ 387.800600][ C1] ? __pfx___schedule+0x10/0x10 [ 387.800624][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 387.800653][ C1] ? preempt_schedule+0xe1/0xf0 [ 387.800675][ C1] preempt_schedule_common+0x84/0xd0 [ 387.800698][ C1] preempt_schedule+0xe1/0xf0 [ 387.800720][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 387.800743][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 387.800770][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 387.800798][ C1] preempt_schedule_thunk+0x1a/0x30 [ 387.800819][ C1] _raw_spin_unlock_irqrestore+0x130/0x140 [ 387.800842][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 387.800867][ C1] ? autoremove_wake_function+0x37/0x110 [ 387.800894][ C1] __wake_up_common_lock+0x18c/0x1e0 [ 387.800924][ C1] __unix_dgram_recvmsg+0x5f4/0x12f0 [ 387.800953][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 387.800978][ C1] ? __pfx___might_resched+0x10/0x10 [ 387.801000][ C1] ? iovec_from_user+0x61/0x240 [ 387.801029][ C1] ? unix_dgram_recvmsg+0xb6/0xe0 [ 387.801052][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 387.801077][ C1] sock_recvmsg_nosec+0x18e/0x1d0 [ 387.801103][ C1] ____sys_recvmsg+0x3c0/0x470 [ 387.801127][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 387.801152][ C1] ? rcu_is_watching+0x15/0xb0 [ 387.801179][ C1] ? __might_fault+0xaa/0x120 [ 387.801199][ C1] do_recvmmsg+0x464/0xad0 [ 387.801224][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 387.801241][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 387.801279][ C1] ? futex_wait+0x285/0x360 [ 387.801297][ C1] ? __pfx_futex_wait+0x10/0x10 [ 387.801318][ C1] ? fd_install+0x9c/0x5d0 [ 387.801343][ C1] ? __pfx_lock_release+0x10/0x10 [ 387.801376][ C1] ? __pfx_do_futex+0x10/0x10 [ 387.801408][ C1] __x64_sys_recvmmsg+0x199/0x250 [ 387.801434][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 387.801454][ C1] ? do_syscall_64+0x100/0x230 [ 387.801480][ C1] ? do_syscall_64+0xb6/0x230 [ 387.801506][ C1] do_syscall_64+0xf3/0x230 [ 387.801529][ C1] ? clear_bhb_loop+0x35/0x90 [ 387.801548][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.801576][ C1] RIP: 0033:0x7f3504179e79 [ 387.801590][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.801606][ C1] RSP: 002b:00007f3504ff5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 387.801623][ C1] RAX: ffffffffffffffda RBX: 00007f3504316058 RCX: 00007f3504179e79 [ 387.801637][ C1] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 387.801649][ C1] RBP: 00007f35041e7916 R08: 0000000000000000 R09: 0000000000000000 [ 387.801660][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 387.801671][ C1] R13: 0000000000000000 R14: 00007f3504316058 R15: 00007ffd5a2d6d78 [ 387.801692][ C1] [ 387.802498][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 387.802512][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-next-20240816-syzkaller #0 [ 387.802538][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 387.802552][ T30] Call Trace: [ 387.802560][ T30] [ 387.802570][ T30] dump_stack_lvl+0x241/0x360 [ 387.802606][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.802639][ T30] ? __pfx__printk+0x10/0x10 [ 387.802671][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 387.802714][ T30] ? vscnprintf+0x5d/0x90 [ 387.802739][ T30] panic+0x349/0x870 [ 387.802770][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 387.802796][ T30] ? __pfx_panic+0x10/0x10 [ 387.802831][ T30] ? irq_work_queue+0xd1/0x150 [ 387.802865][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 387.802898][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 387.802930][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 387.802960][ T30] ? nmi_trigger_cpumask_backtrace+0x251/0x320 [ 387.802988][ T30] watchdog+0x1033/0x1040 [ 387.803012][ T30] ? watchdog+0x1ea/0x1040 [ 387.803039][ T30] ? __pfx_watchdog+0x10/0x10 [ 387.803061][ T30] kthread+0x2f0/0x390 [ 387.803082][ T30] ? __pfx_watchdog+0x10/0x10 [ 387.803103][ T30] ? __pfx_kthread+0x10/0x10 [ 387.803126][ T30] ret_from_fork+0x4b/0x80 [ 387.803158][ T30] ? __pfx_kthread+0x10/0x10 [ 387.803182][ T30] ret_from_fork_asm+0x1a/0x30 [ 387.803232][ T30] [ 387.803525][ T30] Kernel Offset: disabled