last executing test programs: 21m30.831294411s ago: executing program 32 (id=37): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x9f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xffffffffffffffff) keyctl$chown(0x4, r4, 0x0, 0xee01) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x96, 0x5d, 0x6, 0x40, 0x133e, 0x815, 0x7e66, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x87, 0x28}}]}}]}}, 0x0) 15m0.780089857s ago: executing program 33 (id=1487): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000440)='./file0\x00', 0x1000a05, &(0x7f0000001740)=ANY=[@ANYBLOB="66696c657365743d3030303030303030303030313032352c726f6f746469723d30303030303030303030303030303030303030332c706172746974696f6e3d30303030303030303030303030303030303030302c6769643d69676e6f7265006e6f6164696e6963622cde6661736b3d30303030303030303030303030303030303030343732302c62733d30303230303030303030303230303030303030362c6769643d69676e6f72652c12e7090021b0d36853f83b3237931f7bf54d593a4b0e2a94b2208a0318c4095a29b12750ca47c7a60cd523accdee2710fd9dc6171d154f9426ce2b8e251b", @ANYRESHEX, @ANYRES32], 0x2, 0xc44, &(0x7f0000000740)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71033000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 11m10.735888171s ago: executing program 34 (id=2425): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f0000000200)={[{@errors_continue}, {@errors_continue}, {@utf8}, {@umask={'umask', 0x3d, 0x2396}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@discard}, {@errors_continue}, {@errors_remount}, {@discard}]}, 0x5, 0x1531, &(0x7f0000002f80)="$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") ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 10m36.678044878s ago: executing program 35 (id=2581): timer_create(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) syz_open_dev$usbmon(0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 10m7.529029383s ago: executing program 36 (id=2697): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@nomblk_io_submit}, {@jqfmt_vfsv1}, {@auto_da_alloc}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 9m28.064174867s ago: executing program 0 (id=2844): syz_mount_image$hfs(&(0x7f0000000a00), &(0x7f0000000880)='./file0\x00', 0xc10, &(0x7f0000000180)=ANY=[], 0x2, 0x308, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000980)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13d, 0x8}}, 0x20) 9m27.123100596s ago: executing program 0 (id=2849): prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 9m25.802642858s ago: executing program 0 (id=2853): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x60000000, 0xff79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000100)=0x6, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) 9m25.056097352s ago: executing program 0 (id=2858): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000f80)=ANY=[], 0x2e) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000340)={0xa0, 0x0, 0x0, {{0x6, 0x3, 0x8000000000000001, 0x0, 0xffff5310, 0x8001, {0x5, 0x4, 0x80000000, 0x286ad0f7, 0xdf, 0x4, 0xdf5, 0xae, 0x6, 0x5000, 0x0, 0x0, 0x0, 0x8, 0x6}}, {0x0, 0x4}}}, 0xa0) 9m24.170794355s ago: executing program 0 (id=2864): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 9m22.252114371s ago: executing program 0 (id=2872): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x2, 0x4f565559, 0x0, 0x101, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x4}}) 9m19.965933665s ago: executing program 37 (id=2872): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x2, 0x4f565559, 0x0, 0x101, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x4}}) 9m9.473125449s ago: executing program 6 (id=2918): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 9m8.899784152s ago: executing program 6 (id=2920): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) vmsplice(r0, &(0x7f0000001240)=[{&(0x7f0000000100)='p', 0x1}], 0x1, 0x4) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0xf0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x84}}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0x8, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getrlimit(0xd, &(0x7f0000000180)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r5 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x402c00, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32], 0x3c}}, 0x0) close(0xffffffffffffffff) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) 9m7.768141527s ago: executing program 6 (id=2923): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000021c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x1000008}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x21}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8002}, 0x2000400c) 9m6.340210868s ago: executing program 6 (id=2928): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 9m6.073321546s ago: executing program 6 (id=2930): socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000190c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, 0x0, 0x0) 9m4.849173774s ago: executing program 6 (id=2934): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54010000180001002bbd7000000000001d010300150004000900000000000000a67494fcd3a42289070000001e010600000008"], 0x154}}, 0x0) 8m49.303413794s ago: executing program 38 (id=2934): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54010000180001002bbd7000000000001d010300150004000900000000000000a67494fcd3a42289070000001e010600000008"], 0x154}}, 0x0) 8m23.75211901s ago: executing program 9 (id=3024): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40000103, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a000000"], 0x50) r4 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 8m22.684711852s ago: executing program 9 (id=3026): syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b79e6908402000d3b316010203010902120001000000000904"], 0x0) 8m20.343212077s ago: executing program 9 (id=3032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, 0xf, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x2bab9f2243a68f07}, 0x4000004) 8m20.103613798s ago: executing program 9 (id=3036): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000340)={0xa0, 0x0, 0x0, {{0x6, 0x3, 0x8000000000000001, 0x0, 0xffff5310, 0x8001, {0x5, 0x4, 0x80000000, 0x286ad0f7, 0xdf, 0x4, 0xdf5, 0xae, 0x6, 0x5000, 0x0, 0x0, 0x0, 0x8, 0x6}}, {0x0, 0x4}}}, 0xa0) 8m19.464651667s ago: executing program 9 (id=3040): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xb, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file1\x00', 0x1000c1d, &(0x7f000000a580)=ANY=[@ANYRES32=r4, @ANYRESHEX, @ANYBLOB="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", @ANYRES16=r0, @ANYRESOCT, @ANYRES32=r3, @ANYRESDEC=0x0, @ANYRES32], 0xff, 0x1fd, &(0x7f000000a380)="$eJzsmb+LE0EUx78zu5c9DxFsLGwsPPBEb39F5ZorThArQThFLYO3d0T3LpKscDkQ7rCxsRQRbP0HLCxS29nZaqGCYGFKwUIYmR/ZnfzYGDFiwPeBTL7z5s178ybJK7IgCOK/5dPHbx8eX1y5dhbAYSzCM/YvTuHDLf/3z+6febJ66fnLdy9e7xx50BmMNw9ACFQmzc+Afaw5yErWF+XwtN92HRynjb4BBl/LH0KhJwkYbhmfO5ZuHDIiTfzbjXRjs54moRwiOcRyqNq5XADdA4aNvDYhmLXeajMVrNlq792tpYWYE708Q0u/K8bdnzrfGseqmcvzyc/r5qOHB3Ju7gYhuL5LABE4IqOrYFg3egUefN8vrsSq/7hbxHf66v+z2qYu2Hf9NZCWo8tTT+HgXxc4q0J4M3GMCQQbtMifcG451u28Gd71+S+ex5tOHIaSjqMaF4Dcctn4vF1I0ysTp8C+DlNYel1+5K6iPzEXOGX1Jxdu3j+CbPte0GrvLde3a1vJVrITx9UL4bkwPB8Hm3UPYaDa0Zj+N6/604IVf67Et8Iq2K1lWTPaBbJmlM9jPVodd/1V46vaw1X/41g6qWPIS1Zle6NzMPPi6l2qJaf08ARBEARBEARBEARBEARBEL/E/jPyBBj0IxD1oEqUEF9V3j8DAAD//2JCZGU=") 8m14.923319632s ago: executing program 9 (id=3055): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) 8m14.056949682s ago: executing program 39 (id=3055): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) 4m24.683598709s ago: executing program 5 (id=3918): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r0 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d0c, 0x80, 0x3, 0x237}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket(0x2a, 0x2, 0xfffffffc) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x2f}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4m22.393000003s ago: executing program 5 (id=3928): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) futex(0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet(0x2, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4m19.314520731s ago: executing program 5 (id=3933): bpf$PROG_LOAD(0x5, 0x0, 0x0) 4m17.287194343s ago: executing program 5 (id=3937): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000140)={{0x0, 0x20}, 'port0\x00', 0x0, 0x440, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 4m15.78978876s ago: executing program 5 (id=3940): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x818}, 0x24000041) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32, @ANYBLOB="000000002000000014001a80100005800c000180"], 0x34}}, 0x0) 4m15.105359509s ago: executing program 5 (id=3943): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 3m59.320911873s ago: executing program 40 (id=3943): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 9.851703138s ago: executing program 8 (id=4982): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000440), 0x0, 0x4000004, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x14) 9.513848444s ago: executing program 4 (id=4983): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x1, 0x0, 0x7, 0x7fff0000}]}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 7.394801742s ago: executing program 8 (id=4987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe8}}, 0x0) 7.266518239s ago: executing program 1 (id=4988): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x240}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) 6.436914549s ago: executing program 7 (id=4989): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000180)={0x4000, r0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) landlock_restrict_self(r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x121101, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) truncate(&(0x7f0000000240)='./file0\x00', 0x1) 6.309314096s ago: executing program 2 (id=4990): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x2a8, 0x98, 0x2a8, 0x130, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640200000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x20000000) 6.308322044s ago: executing program 4 (id=4991): r0 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@sysvgroups}, {@nomblk_io_submit}, {}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x0, 0x5e0, &(0x7f0000000bc0)="$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") quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f0000000000)={0x8, 0x9, 0x0, 0x5}) 6.307160372s ago: executing program 8 (id=4992): pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000b80)) splice(r1, 0x0, r0, 0x0, 0x3, 0x4) 6.140083383s ago: executing program 1 (id=4993): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffe0, 0xa}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80015}, 0x4000) 5.503377286s ago: executing program 7 (id=4994): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x60) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x30) 5.433433243s ago: executing program 8 (id=4995): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000340)='sys_enter\x00', r1}, 0x18) gettid() 5.307573345s ago: executing program 4 (id=4996): socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040832}, 0xc094) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYRES16, @ANYRESDEC], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f00000004c0)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(r2, r2) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e652043617074557265272030303030"], 0xb8) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000"], 0x18}, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r5, r3, 0x0) syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x8000, &(0x7f0000000080)={[{@logbufs={'logbufs', 0x3d, 0x2}}, {@noalign}, {@sysvgroups}, {@inode64}, {@logbufs={'logbufs', 0x3d, 0x6}}]}, 0x1, 0xb99f, &(0x7f0000018700)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) 5.255010248s ago: executing program 1 (id=4997): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000240)=""/57, 0x39, 0x122, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) recvmmsg(r2, &(0x7f000000a400), 0x6fe, 0x10163, 0x0) 5.234036427s ago: executing program 2 (id=4998): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0xfa, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xf4f6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000140)={0x20, 0x10, 0x5, {0x5, 0x10, "945b1c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.116013556s ago: executing program 8 (id=4999): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000005200210900000000001cd2001c"], 0x14}}, 0x0) 4.87822951s ago: executing program 3 (id=5000): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000568000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073"], 0xf0}}, 0x0) 4.386697397s ago: executing program 7 (id=5001): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x0) 4.099368368s ago: executing program 3 (id=5002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 3.981905601s ago: executing program 2 (id=5003): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0xc080) 3.199971725s ago: executing program 1 (id=5004): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x1, 0x0, 0x7, 0x7fff0000}]}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 3.199368681s ago: executing program 4 (id=5005): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x240}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) 3.198046604s ago: executing program 7 (id=5006): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x62, 0x5, 0x1510, 0x0, 0x0, 0xffffffff, 0x10c8, 0x1288, 0x1478, 0x1478, 0xffffffff, 0x1478, 0x1478, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x10a0, 0x10c8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @rand_addr=0x64010102, @remote, @port=0x4e21, @gre_key}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'syzkaller1\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1570) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00004ad80bfdc09d9979000000000000c77600"/28], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000080)="4b97a4c480f2595209562d48ef71", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) times(&(0x7f0000000040)) sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x7) prlimit64(r1, 0x5, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)) ioctl$sock_SIOCSPGRP(r2, 0x8902, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(r6, &(0x7f0000000000)='1\x00', 0x2) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) 2.872099183s ago: executing program 2 (id=5007): unshare(0x20000400) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x29, 0x1a, 0x0, 0x0) 2.65564037s ago: executing program 3 (id=5008): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) 1.969578537s ago: executing program 4 (id=5009): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffe0, 0xa}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80015}, 0x4000) 1.831386562s ago: executing program 7 (id=5010): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x1, 0x1}}, 0xb8}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000000000000000000000000000bbfe"], 0x0) io_uring_setup(0x4094, 0x0) 1.703959948s ago: executing program 2 (id=5011): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000400)={0x0, 0x0, 0x9, 0x2, 0x5, 0x1, 0xb6, 0x6, {0x0, @in6={{0xa, 0x4e24, 0x8, @private0, 0x8001}}, 0x2, 0x7, 0x800, 0x5, 0xffffffff}}, &(0x7f00000004c0)=0xb0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xe, 0x11, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x81020000}, {0x65, 0x0, 0x0, 0xfaffff7f}}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r3 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r5 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r6, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r7}], 0x2c, 0xffffffffffbffff8) dup2(r6, r7) fcntl$setown(r6, 0x8, r5) timer_delete(r4) tkill(r5, 0x13) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000100)) 1.703023204s ago: executing program 1 (id=5012): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000080)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x0, 0x4f7, &(0x7f0000000540)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) unlinkat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) 1.559842376s ago: executing program 3 (id=5013): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140), 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f00000000c0)=0x8, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$unix(r1, &(0x7f0000000540)=@file={0x1, './cgroup\x00'}, 0x6e) 1.488461231s ago: executing program 7 (id=5014): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = add_key(&(0x7f0000000340)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r1, 0x1) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) syz_open_procfs(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0x2, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2, 0xb}, {0xfff2}, {0xffff, 0xa}}, ["", "", ""]}, 0x24}}, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f00000003c0)={'wlan1\x00', {0x2, 0x0, @broadcast}}) r7 = creat(&(0x7f0000000580)='./file0\x00', 0x0) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r7, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100001b, 0x12, r5, 0x100000000) 1.42946891s ago: executing program 4 (id=5015): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000440), 0x0, 0x4000004, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x14) 1.292117531s ago: executing program 3 (id=5016): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0xbfffffff, 0x38, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(r2, 0x0, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback, 0x8000000}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000000c0)=0xa4, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="8d", 0x1, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 1.291798956s ago: executing program 1 (id=5017): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a", 0xc2}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0x1c75}], 0x1) 1.264431571s ago: executing program 2 (id=5018): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x0) 1.190310607s ago: executing program 8 (id=5019): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb6e7, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40c1}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=5020): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x14444, &(0x7f0000000f40)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {@noadinicb}, {@adinicb}, {@volume={'volume', 0x3d, 0x7}}, {@uid_forget}, {@umask={'umask', 0x3d, 0x3}}, {@longad}, {@gid}, {@iocharset={'iocharset', 0x3d, 'utf8'}}]}, 0xfe, 0xc22, &(0x7f00000002c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x80046c40, 0x0) kernel console output (not intermixed with test programs): proto=fd [ 950.180582][ T5846] Bluetooth: hci2: command tx timeout [ 950.387660][T16030] veth0_vlan: entered promiscuous mode [ 951.825491][T16030] veth1_vlan: entered promiscuous mode [ 951.941198][ T37] bridge_slave_1: left allmulticast mode [ 951.946930][ T37] bridge_slave_1: left promiscuous mode [ 951.970613][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.983263][ T37] bridge_slave_0: left allmulticast mode [ 952.009504][ T37] bridge_slave_0: left promiscuous mode [ 952.019196][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.264032][ T5846] Bluetooth: hci2: command tx timeout [ 953.061906][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 953.087347][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 953.103434][ T37] bond0 (unregistering): Released all slaves [ 953.240812][T16392] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.257490][T16392] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.265672][T16392] bridge_slave_0: entered allmulticast mode [ 953.273919][T16392] bridge_slave_0: entered promiscuous mode [ 953.283643][T16392] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.291240][T16392] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.298644][T16392] bridge_slave_1: entered allmulticast mode [ 953.309405][T16392] bridge_slave_1: entered promiscuous mode [ 953.442490][T16089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.699807][T16392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.887422][T16030] veth0_macvtap: entered promiscuous mode [ 954.052502][T16502] ceph: No mds server is up or the cluster is laggy [ 954.173457][T16392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.391546][T16030] veth1_macvtap: entered promiscuous mode [ 954.655818][ T37] hsr_slave_0: left promiscuous mode [ 954.664479][ T37] hsr_slave_1: left promiscuous mode [ 954.859183][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.891672][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 957.002542][ T37] team0 (unregistering): Port device team_slave_1 removed [ 957.150908][ T37] team0 (unregistering): Port device team_slave_0 removed [ 959.143215][T16545] ceph: No mds server is up or the cluster is laggy [ 959.709892][T16392] team0: Port device team_slave_0 added [ 959.731086][T16392] team0: Port device team_slave_1 added [ 959.943570][T16392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.958409][T16392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 960.041372][T16392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 960.054716][T16392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 960.062214][T16392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 960.339142][T16392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 960.373455][T16030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 960.382272][T16567] ceph: No mds server is up or the cluster is laggy [ 960.444839][T16089] 8021q: adding VLAN 0 to HW filter on device team0 [ 960.601489][T16030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 961.359846][T12992] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.468297][T16392] hsr_slave_0: entered promiscuous mode [ 961.491548][T16392] hsr_slave_1: entered promiscuous mode [ 961.498108][T16392] debugfs: 'hsr0' already exists in 'hsr' [ 961.514087][T16392] Cannot create hsr debugfs directory [ 961.573114][ T6116] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.580369][ T6116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.605429][T12992] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.625292][T12992] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.662179][ T5952] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.836670][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.843920][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.200710][ T3871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.208589][ T3871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.583728][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.630933][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.758802][T16089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.034337][T16392] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 965.197819][T16392] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 965.822000][T16392] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 966.440405][T16644] netlink: 344 bytes leftover after parsing attributes in process `syz.3.3217'. [ 966.449531][T16644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3217'. [ 966.872713][T16392] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 969.338183][T16392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 969.534576][T16392] 8021q: adding VLAN 0 to HW filter on device team0 [ 969.645559][ T3871] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.652865][ T3871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 969.888883][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.896118][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 970.298891][T16392] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 970.609165][T16392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 971.667402][T16089] veth0_vlan: entered promiscuous mode [ 972.175473][T16089] veth1_vlan: entered promiscuous mode [ 972.465378][T16662] Set syz1 is full, maxelem 65536 reached [ 972.687379][T16089] veth0_macvtap: entered promiscuous mode [ 973.722665][T16089] veth1_macvtap: entered promiscuous mode [ 975.372812][T16089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 975.385665][T16089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 975.477731][ T5952] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.547765][ T5952] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.841759][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.885718][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.605481][T16392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 976.658624][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.690303][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 976.896651][ T5952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.943362][ T5952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.124073][T16392] veth0_vlan: entered promiscuous mode [ 977.754521][T16392] veth1_vlan: entered promiscuous mode [ 978.119949][T16392] veth0_macvtap: entered promiscuous mode [ 978.204960][T16392] veth1_macvtap: entered promiscuous mode [ 978.445332][T16392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 978.589220][T16392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 978.691039][ T3508] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.796593][ T3508] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.805834][ T3508] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.816703][T16755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3245'. [ 978.943856][ T3508] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.579547][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.610449][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.630557][ T5831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 979.663749][ T5831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 979.679312][ T5831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 979.693211][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 979.712154][ T5831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 979.831955][ T5952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.904620][ T5952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.516902][T16767] ip6gretap0 speed is unknown, defaulting to 1000 [ 980.854542][T16788] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 980.867309][T16788] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 981.553986][T16792] loop2: detected capacity change from 0 to 512 [ 981.610314][T16792] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 981.645331][T16790] bridge0: port 3(gretap0) entered blocking state [ 981.661415][T16792] EXT4-fs (loop2): Test dummy encryption mode enabled [ 981.680504][T16790] bridge0: port 3(gretap0) entered disabled state [ 981.698834][T16790] gretap0: entered allmulticast mode [ 981.712567][T16792] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.2963: inode has both inline data and extents flags [ 981.744073][T16790] gretap0: entered promiscuous mode [ 981.795909][T16790] bridge0: port 3(gretap0) entered blocking state [ 981.802603][T16790] bridge0: port 3(gretap0) entered forwarding state [ 981.810967][T16792] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.2963: couldn't read orphan inode 15 (err -117) [ 981.897029][T16792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 981.940237][ T5846] Bluetooth: hci6: command tx timeout [ 982.018569][T16797] vlan1: entered promiscuous mode [ 982.998415][T16392] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.353413][ T1082] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.808036][ T1082] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.122565][ T5846] Bluetooth: hci6: command tx timeout [ 984.346903][ T1082] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.180453][ T5846] Bluetooth: hci6: command tx timeout [ 986.539252][ C0] Unknown status report in ack skb [ 987.285819][T16861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3274'. [ 987.584555][ T1082] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.884488][T16881] Process accounting resumed [ 988.265021][ T5846] Bluetooth: hci6: command tx timeout [ 988.348625][T16767] chnl_net:caif_netlink_parms(): no params data found [ 989.497240][ T1082] bridge_slave_1: left allmulticast mode [ 989.513190][ T1082] bridge_slave_1: left promiscuous mode [ 989.533687][ T1082] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.591587][ T1082] bridge_slave_0: left allmulticast mode [ 989.597282][ T1082] bridge_slave_0: left promiscuous mode [ 989.654194][ T1082] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.774198][T15411] libceph: connect (1)[c::]:6789 error -101 [ 989.784720][T15411] libceph: mon0 (1)[c::]:6789 connect error [ 989.850340][T16922] ceph: No mds server is up or the cluster is laggy [ 990.634812][T16940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3296'. [ 992.166522][T16971] loop1: detected capacity change from 0 to 256 [ 992.641904][ T5846] Bluetooth: hci1: connection err: -111 [ 992.673109][ T1082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 992.736659][ T1082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 992.774996][ T1082] bond0 (unregistering): Released all slaves [ 994.466722][T16767] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.498932][T16767] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.549345][T16767] bridge_slave_0: entered allmulticast mode [ 994.568267][T16767] bridge_slave_0: entered promiscuous mode [ 994.613463][T16767] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.660692][T16767] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.668029][T16767] bridge_slave_1: entered allmulticast mode [ 994.705664][T16767] bridge_slave_1: entered promiscuous mode [ 994.763509][T16981] loop1: detected capacity change from 0 to 32768 [ 994.906267][T16981] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 995.203183][T16981] XFS (loop1): Ending clean mount [ 996.587863][T16761] kernel read not supported for file /input/mouse0 (pid: 16761 comm: kworker/1:4) [ 996.608867][T16030] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 996.815211][T16767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.916529][T16767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 997.029699][T17048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3324'. [ 997.202439][T17054] netlink: 'syz.5.3327': attribute type 1 has an invalid length. [ 997.223502][T17054] nbd: couldn't find device at index -404063977 [ 998.068970][T17063] loop1: detected capacity change from 0 to 8 [ 998.113064][T17048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3324'. [ 998.216454][T17063] SQUASHFS error: Unable to read directory block [629:26] [ 998.438948][T16767] team0: Port device team_slave_0 added [ 998.589747][ T1082] hsr_slave_0: left promiscuous mode [ 998.651633][ T1082] hsr_slave_1: left promiscuous mode [ 998.675533][ T1082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 998.708563][ T1082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 998.738326][ T1082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 998.783064][ T1082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 998.926498][ T1082] veth1_macvtap: left promiscuous mode [ 998.959525][ T1082] veth0_macvtap: left promiscuous mode [ 999.000805][ T1082] veth1_vlan: left promiscuous mode [ 999.016771][ T1082] veth0_vlan: left promiscuous mode [ 1001.086478][T17107] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3339'. [ 1001.095635][T17107] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3339'. [ 1001.104634][T17107] netlink: 'syz.5.3339': attribute type 18 has an invalid length. [ 1002.317583][ T1082] team0 (unregistering): Port device team_slave_1 removed [ 1002.456259][ T1082] team0 (unregistering): Port device team_slave_0 removed [ 1002.599887][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1002.607130][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1003.531596][T16767] team0: Port device team_slave_1 added [ 1003.626463][T17107] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3339'. [ 1003.636128][T17107] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3339'. [ 1003.645126][T17107] netlink: 'syz.5.3339': attribute type 18 has an invalid length. [ 1003.699571][ T3871] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1003.760248][T17127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3343'. [ 1003.930115][ T3871] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1003.984568][ T3871] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1004.014636][ T3871] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1004.120214][T17141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3345'. [ 1005.360838][T16767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1005.373188][T16767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1006.164565][T16767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1006.178418][T16767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1006.185777][T16767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1006.213079][T16767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1006.602189][ T5846] Bluetooth: hci5: unexpected event for opcode 0x202a [ 1006.737051][T16767] hsr_slave_0: entered promiscuous mode [ 1006.763140][T16767] hsr_slave_1: entered promiscuous mode [ 1006.798518][T16767] debugfs: 'hsr0' already exists in 'hsr' [ 1006.825431][T16767] Cannot create hsr debugfs directory [ 1009.153990][T17195] bond1: ARP target 1.0.0.0 is already present [ 1009.200935][T17195] bond1: option arp_ip_target: invalid value (1) [ 1009.305210][T17195] bond1 (unregistering): Released all slaves [ 1009.433090][T17175] loop1: detected capacity change from 0 to 32768 [ 1009.527271][T17175] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1009.762090][T17175] XFS (loop1): Ending clean mount [ 1009.826369][T17175] XFS (loop1): Quotacheck needed: Please wait. [ 1009.849876][T17221] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3370'. [ 1010.751854][T17228] overlayfs: bad index found (index=index/00fb210001e96be03db7d04173a9ac40c84c0bf20c707d5188ae00000000000000, ftype=2000, origin ftype=a000). [ 1011.363238][T17175] XFS (loop1): Quotacheck: Done. [ 1011.455816][T16030] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1011.546082][T17236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3373'. [ 1013.480699][T17253] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1013.766045][T16767] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1013.821846][T16767] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1013.880711][T16767] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1013.925529][T16767] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1014.514875][T17285] loop1: detected capacity change from 0 to 164 [ 1014.569849][T16767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1014.724566][T16767] 8021q: adding VLAN 0 to HW filter on device team0 [ 1014.775088][ T6116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.782348][ T6116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1014.833034][ T6116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.840314][ T6116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1015.014006][T17247] loop2: detected capacity change from 0 to 32768 [ 1015.102721][T17247] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1015.823415][T17247] XFS (loop2): Ending clean mount [ 1016.110771][T16392] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1016.421617][T16767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1016.594098][T17333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3397'. [ 1017.373375][T17355] Bluetooth: hci0: unsupported parameter 5148 [ 1017.430200][T17355] Bluetooth: hci0: unsupported parameter 65024 [ 1017.443867][T17355] Bluetooth: hci0: unsupported parameter 5148 [ 1017.449961][T17355] Bluetooth: hci0: unsupported parameter 65024 [ 1019.408766][T16767] veth0_vlan: entered promiscuous mode [ 1020.431727][T16767] veth1_vlan: entered promiscuous mode [ 1022.177672][T17397] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3412'. [ 1023.722551][T17393] Set syz1 is full, maxelem 65536 reached [ 1024.023612][T16767] veth0_macvtap: entered promiscuous mode [ 1024.075197][T16767] veth1_macvtap: entered promiscuous mode [ 1024.251729][T16767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1024.333149][T16767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1024.483118][ T6116] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.568690][ T6116] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.670155][T17411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3417'. [ 1024.679217][T17411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3417'. [ 1024.740400][ T6116] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.781832][ T6116] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.322411][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.200745][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1026.518595][ T3871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.570392][ T3871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.103355][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1028.328452][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.369812][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1028.412458][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1028.453119][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1028.490194][ T10] usb 3-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1028.588614][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.637591][ T10] usb 3-1: config 0 descriptor?? [ 1028.705845][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1028.884220][ T10] usb 3-1: MIDIStreaming interface descriptor not found [ 1029.506560][ T10] usb 3-1: USB disconnect, device number 34 [ 1030.490902][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1030.507396][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1030.521846][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1030.530291][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1030.546546][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1031.502867][ T5952] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1031.550236][ T5952] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.584620][ T5952] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1031.747920][T17491] ip6gretap0 speed is unknown, defaulting to 1000 [ 1032.108783][ T5952] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1032.159965][ T5952] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.210090][ T5952] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1032.515406][ T5952] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1032.562827][ T5952] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.605260][ T5952] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1032.660550][ T5831] Bluetooth: hci4: command tx timeout [ 1033.078240][ T5952] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1033.115807][ T5952] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.137969][ T5952] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1033.241655][T17534] bridge0: port 3(gretap0) entered blocking state [ 1033.258538][T17534] bridge0: port 3(gretap0) entered disabled state [ 1033.287088][T17534] gretap0: entered allmulticast mode [ 1033.321398][T17534] gretap0: entered promiscuous mode [ 1033.348883][T17534] bridge0: port 3(gretap0) entered blocking state [ 1033.355484][T17534] bridge0: port 3(gretap0) entered forwarding state [ 1034.068406][ T5952] gretap0: left promiscuous mode [ 1034.091422][ T5952] bridge0: port 3(gretap0) entered disabled state [ 1034.111654][ T5952] bridge_slave_1: left promiscuous mode [ 1034.117544][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.970493][ T5846] Bluetooth: hci4: command tx timeout [ 1035.222361][ T5952] bridge_slave_0: left promiscuous mode [ 1035.381921][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 1035.390102][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.522011][T17577] loop1: detected capacity change from 0 to 32768 [ 1036.541112][T17577] btrfs: Unknown parameter 'noinode_cache' [ 1036.969679][T17594] ceph: No mds server is up or the cluster is laggy [ 1037.060250][ T5831] Bluetooth: hci4: command tx timeout [ 1039.031666][ T5952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1039.055406][ T5952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1039.085599][ T5952] bond0 (unregistering): Released all slaves [ 1039.142022][ T5831] Bluetooth: hci4: command tx timeout [ 1040.002686][T17613] loop2: detected capacity change from 0 to 32768 [ 1040.134557][T17613] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1040.197682][T17491] chnl_net:caif_netlink_parms(): no params data found [ 1040.266129][T17613] XFS (loop2): Ending clean mount [ 1040.284987][T17613] XFS (loop2): Quotacheck needed: Please wait. [ 1040.641511][T17613] XFS (loop2): Quotacheck: Done. [ 1041.586019][T16392] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1042.057668][T17664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3479'. [ 1042.998497][T17491] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.010246][T17491] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.036138][ T847] libceph: connect (1)[c::]:6789 error -101 [ 1043.046147][T17491] bridge_slave_0: entered allmulticast mode [ 1043.067999][ T847] libceph: mon0 (1)[c::]:6789 connect error [ 1043.084219][ T847] libceph: connect (1)[c::]:6789 error -101 [ 1043.106399][ T847] libceph: mon0 (1)[c::]:6789 connect error [ 1043.148350][T17491] bridge_slave_0: entered promiscuous mode [ 1043.195052][T17491] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.260583][T17692] ceph: No mds server is up or the cluster is laggy [ 1043.269828][T17491] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.344608][T17491] bridge_slave_1: entered allmulticast mode [ 1043.401204][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1043.409790][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1043.459210][T17491] bridge_slave_1: entered promiscuous mode [ 1044.436914][T17714] loop2: detected capacity change from 0 to 64 [ 1044.501682][T17714] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1044.588414][ T5952] hsr_slave_0: left promiscuous mode [ 1044.638701][ T5952] hsr_slave_1: left promiscuous mode [ 1044.671291][ T5952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1044.678738][ T5952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1044.723643][ T5952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1044.757746][ T5952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1044.899900][ T5952] veth1_macvtap: left promiscuous mode [ 1044.973676][ T5952] veth0_macvtap: left promiscuous mode [ 1048.870921][T17768] loop4: detected capacity change from 0 to 4096 [ 1049.096544][T17768] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1049.144658][T17768] ntfs3(loop4): Failed to load $Extend (-22). [ 1049.171440][T17768] ntfs3(loop4): Failed to initialize $Extend. [ 1050.201872][ T5952] team0 (unregistering): Port device team_slave_0 removed [ 1050.254481][T17798] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1050.261425][T17798] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1050.270368][T17798] vhci_hcd vhci_hcd.0: Device attached [ 1050.278054][T17799] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 1050.523447][ T5941] vhci_hcd: vhci_device speed not set [ 1050.568600][ T30] audit: type=1800 audit(1763425684.004:1948): pid=17803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3515" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1050.814584][ T5941] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 1050.840875][T17659] vhci_hcd: stop threads [ 1050.901625][T17659] vhci_hcd: release socket [ 1050.917334][T17659] vhci_hcd: disconnect device [ 1051.122048][T17789] loop2: detected capacity change from 0 to 32768 [ 1051.206129][T17789] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1051.346845][T17789] XFS (loop2): Ending clean mount [ 1051.368758][T17789] XFS (loop2): Quotacheck needed: Please wait. [ 1051.437419][T17789] XFS (loop2): Quotacheck: Done. [ 1051.586811][T16392] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1051.975264][T17491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1052.026469][T17801] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1052.135988][T17491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1052.444269][T17830] loop2: detected capacity change from 0 to 1024 [ 1052.478021][T17491] team0: Port device team_slave_0 added [ 1052.705282][T17830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1052.764511][T17491] team0: Port device team_slave_1 added [ 1052.808278][T17830] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1053.052703][T17830] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.3521: lblock 0 mapped to illegal pblock 0 (length 1) [ 1053.821057][T17855] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.3521: lblock 3 mapped to illegal pblock 3 (length 3) [ 1053.901488][T17855] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 1053.957297][T17855] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1053.957297][T17855] [ 1054.253025][T17659] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 1054.311380][T17491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.319419][T17491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.353318][T17491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.353416][T17659] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1054.366629][T17491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.383616][T17491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.459520][T17491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.490121][T17659] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1054.490121][T17659] [ 1054.518380][T16392] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1054.563775][ T5952] IPVS: stop unused estimator thread 0... [ 1054.755190][T17491] hsr_slave_0: entered promiscuous mode [ 1054.776754][T17491] hsr_slave_1: entered promiscuous mode [ 1054.790984][T17491] debugfs: 'hsr0' already exists in 'hsr' [ 1054.810338][T17491] Cannot create hsr debugfs directory [ 1055.408393][T17879] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1055.414973][T17879] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1055.426006][T17879] vhci_hcd vhci_hcd.0: Device attached [ 1055.436503][T17880] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 1055.649679][ T5817] vhci_hcd: vhci_device speed not set [ 1055.680456][ T30] audit: type=1800 audit(1763425689.144:1949): pid=17883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3533" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1055.754132][ T8835] vhci_hcd: stop threads [ 1055.869183][ T8835] vhci_hcd: release socket [ 1055.874018][ T5817] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 1056.054364][ T8835] vhci_hcd: disconnect device [ 1056.089342][T17882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1056.108568][ T5817] usb 37-1: enqueue for inactive port 0 [ 1056.110190][ T5941] vhci_hcd: vhci_device speed not set [ 1056.220183][ T5817] vhci_hcd: vhci_device speed not set [ 1056.373075][T17863] loop1: detected capacity change from 0 to 32768 [ 1056.444847][T17863] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1056.879091][T17863] XFS (loop1): Ending clean mount [ 1056.907313][T17863] XFS (loop1): Quotacheck needed: Please wait. [ 1057.070160][T17863] XFS (loop1): Quotacheck: Done. [ 1058.092858][T16030] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1058.257261][T17491] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1058.320437][T17491] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1058.422159][T17491] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1058.780184][T17932] loop2: detected capacity change from 0 to 40427 [ 1058.815346][T17932] F2FS-fs (loop2): invalid crc value [ 1058.826080][T17491] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1058.911444][T17932] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1058.940167][T17932] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1059.613512][T17491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1059.661680][T17951] af_packet: tpacket_rcv: packet too big, clamped from 16 to 4294967272. macoff=96 [ 1059.728527][T17491] 8021q: adding VLAN 0 to HW filter on device team0 [ 1059.773318][ T30] audit: type=1326 audit(1763425693.294:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17954 comm="syz.3.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730878f6c9 code=0x7ffc0000 [ 1059.845892][T17659] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.853135][T17659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1059.890292][ T30] audit: type=1326 audit(1763425693.294:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17954 comm="syz.3.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730878f6c9 code=0x7ffc0000 [ 1059.944731][T17659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.951917][T17659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1059.965953][ T30] audit: type=1326 audit(1763425693.364:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17954 comm="syz.3.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f730878f6c9 code=0x7ffc0000 [ 1060.048048][ T30] audit: type=1326 audit(1763425693.364:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17954 comm="syz.3.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f730878f703 code=0x7ffc0000 [ 1060.112186][ T30] audit: type=1326 audit(1763425693.364:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17954 comm="syz.3.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f730878e17f code=0x7ffc0000 [ 1060.218245][ T30] audit: type=1326 audit(1763425693.364:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17954 comm="syz.3.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f730878f757 code=0x7ffc0000 [ 1060.390451][ T30] audit: type=1326 audit(1763425693.364:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17954 comm="syz.3.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f730878df10 code=0x7ffc0000 [ 1060.491758][ T30] audit: type=1326 audit(1763425693.364:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17954 comm="syz.3.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f730878e32a code=0x7ffc0000 [ 1060.576079][ T30] audit: type=1326 audit(1763425693.404:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17954 comm="syz.3.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730878f6c9 code=0x7ffc0000 [ 1060.690195][ T30] audit: type=1326 audit(1763425693.464:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17954 comm="syz.3.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730878f6c9 code=0x7ffc0000 [ 1061.350250][ T30] audit: type=1326 audit(1763425693.474:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17954 comm="syz.3.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f730878f6c9 code=0x7ffc0000 [ 1061.399068][ T30] audit: type=1326 audit(1763425693.474:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17954 comm="syz.3.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730878f6c9 code=0x7ffc0000 [ 1061.422141][ T30] audit: type=1326 audit(1763425693.474:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17954 comm="syz.3.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730878f6c9 code=0x7ffc0000 [ 1061.445191][ T30] audit: type=1326 audit(1763425693.474:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17954 comm="syz.3.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f730878f6c9 code=0x7ffc0000 [ 1061.471788][ T30] audit: type=1326 audit(1763425693.474:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17954 comm="syz.3.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730878f6c9 code=0x7ffc0000 [ 1061.594716][ T30] audit: type=1326 audit(1763425693.474:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17954 comm="syz.3.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730878f6c9 code=0x7ffc0000 [ 1061.985807][T17491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.183354][T18000] syz_tun: entered allmulticast mode [ 1063.569833][T18018] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3567'. [ 1064.030322][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.036665][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1064.093788][T17491] veth0_vlan: entered promiscuous mode [ 1064.213480][T17491] veth1_vlan: entered promiscuous mode [ 1064.254465][T18031] loop2: detected capacity change from 0 to 8 [ 1064.331981][T18031] SQUASHFS error: Unable to read directory block [629:26] [ 1064.366175][T17491] veth0_macvtap: entered promiscuous mode [ 1064.393289][T18012] loop1: detected capacity change from 0 to 32768 [ 1064.400669][T18034] trusted_key: encrypted_key: hex blob is missing [ 1064.466810][T17491] veth1_macvtap: entered promiscuous mode [ 1064.499220][T18012] JBD2: Ignoring recovery information on journal [ 1064.511480][T17491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1064.629787][T17491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1064.738217][ T3508] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.771548][T18012] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1064.782875][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.083518][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.373278][T18045] loop4: detected capacity change from 0 to 40427 [ 1065.495931][T18045] F2FS-fs (loop4): invalid crc value [ 1065.951133][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.110230][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 1066.148460][T18045] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1066.162389][T18045] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1066.526324][T16030] ocfs2: Unmounting device (7,1) on (node local) [ 1066.842356][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1066.880327][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.062255][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.160454][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.734341][T18074] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3430'. [ 1068.897126][T18090] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3585'. [ 1069.375266][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1069.391123][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1069.399329][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1069.414366][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1069.428477][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1069.577578][T18095] ip6gretap0 speed is unknown, defaulting to 1000 [ 1071.582108][ T5831] Bluetooth: hci5: command tx timeout [ 1071.758941][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.835975][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1072.408486][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.460151][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1072.462226][T18105] loop5: detected capacity change from 0 to 32768 [ 1072.799706][T18105] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1073.533813][T18105] XFS (loop5): Ending clean mount [ 1073.650858][ T5831] Bluetooth: hci5: command tx timeout [ 1073.854172][T17491] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1073.904367][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.944455][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1074.736321][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 1075.376385][T18187] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 1075.463516][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.510202][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1075.640142][T15411] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1075.700455][ T5846] Bluetooth: hci5: command tx timeout [ 1075.874985][T15411] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1075.890187][T15411] usb 2-1: config 124 has an invalid interface number: 93 but max is 0 [ 1075.946674][T15411] usb 2-1: config 124 has no interface number 0 [ 1075.970891][T15411] usb 2-1: config 124 interface 93 has no altsetting 0 [ 1076.013648][T15411] usb 2-1: New USB device found, idVendor=13d3, idProduct=3323, bcdDevice=22.97 [ 1076.050117][T15411] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.070752][T15411] usb 2-1: Product: syz [ 1076.074956][T15411] usb 2-1: Manufacturer: syz [ 1076.079563][T15411] usb 2-1: SerialNumber: syz [ 1076.292631][T18095] chnl_net:caif_netlink_parms(): no params data found [ 1076.430278][T15411] usb 2-1: USB disconnect, device number 24 [ 1076.557924][ T36] gretap0: left allmulticast mode [ 1076.573432][ T36] gretap0: left promiscuous mode [ 1076.593135][ T36] bridge0: port 3(gretap0) entered disabled state [ 1076.654651][ T36] bridge_slave_1: left allmulticast mode [ 1076.679289][ T36] bridge_slave_1: left promiscuous mode [ 1076.698604][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.742049][ T36] bridge_slave_0: left allmulticast mode [ 1076.758031][ T36] bridge_slave_0: left promiscuous mode [ 1076.781191][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.789309][T18226] loop4: detected capacity change from 0 to 2048 [ 1076.810581][T18226] udf: Bad value for 'mode' [ 1076.972664][T18197] loop2: detected capacity change from 0 to 32768 [ 1077.022756][T18197] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1077.233115][T18197] XFS (loop2): Ending clean mount [ 1077.533290][T18240] loop1: detected capacity change from 0 to 32768 [ 1078.094798][ T5846] Bluetooth: hci5: command tx timeout [ 1078.192241][T18240] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1078.250154][T18240] XFS (loop1): Ending clean mount [ 1078.271485][T18240] XFS (loop1): Quotacheck needed: Please wait. [ 1078.658857][ T37] smc: removing ib device syz2 [ 1078.666323][T18240] XFS (loop1): Quotacheck: Done. [ 1078.676894][T16392] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1078.691197][T18240] XFS (loop1): syz.1.3627 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 1078.691648][ T36] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1078.773773][T16030] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1079.750741][ T36] bond1 (unregistering): (slave bridge3): Releasing active interface [ 1080.670707][T18273] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1080.677290][T18273] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1080.684851][T18273] vhci_hcd vhci_hcd.0: Device attached [ 1080.703116][T18274] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 1080.817306][ T30] audit: type=1800 audit(1763425714.314:1966): pid=18276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3634" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1081.393962][T15411] vhci_hcd: vhci_device speed not set [ 1081.410558][ T60] vhci_hcd: stop threads [ 1081.414857][ T60] vhci_hcd: release socket [ 1081.421196][ T60] vhci_hcd: disconnect device [ 1081.470144][T15411] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 1081.478695][T15411] usb 37-1: enqueue for inactive port 0 [ 1081.570188][T15411] vhci_hcd: vhci_device speed not set [ 1082.075012][T18278] loop1: detected capacity change from 0 to 32768 [ 1082.193411][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1082.200387][T18278] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1082.228760][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1082.239045][T18278] (syz.1.3636,18278,0):ocfs2_inode_is_valid_to_delete:947 ERROR: Skipping delete of system file 72 [ 1082.275676][T18278] ocfs2: Unmounting device (7,1) on (node local) [ 1082.305134][ T36] bond0 (unregistering): Released all slaves [ 1082.434210][ T36] bond1 (unregistering): Released all slaves [ 1083.702994][T18298] nbd: must specify a size in bytes for the device [ 1083.826905][ T5932] ip6gretap0 speed is unknown, defaulting to 1000 [ 1083.885845][ T5932] syz2: Port: 1 Link DOWN [ 1084.111115][ T847] ip6gretap0 speed is unknown, defaulting to 1000 [ 1085.095438][T18095] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.456249][T18095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.669763][T18095] bridge_slave_0: entered allmulticast mode [ 1085.678264][T18095] bridge_slave_0: entered promiscuous mode [ 1085.691237][T18095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.698455][T18095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.707842][T18095] bridge_slave_1: entered allmulticast mode [ 1085.882554][T18095] bridge_slave_1: entered promiscuous mode [ 1087.135857][T18342] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3658'. [ 1087.375695][T18095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1087.513811][T18095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.476487][T18356] loop2: detected capacity change from 0 to 32768 [ 1088.600466][T18356] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 1088.723219][T18356] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1088.826173][T18374] netlink: 'syz.5.3670': attribute type 1 has an invalid length. [ 1089.207458][T18375] vlan2: entered allmulticast mode [ 1089.220153][T18375] batadv0: entered allmulticast mode [ 1089.325364][T18095] team0: Port device team_slave_0 added [ 1089.358722][T16392] ocfs2: Unmounting device (7,2) on (node local) [ 1089.371859][T18095] team0: Port device team_slave_1 added [ 1090.451414][T18095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1090.657113][T18095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.684508][T18095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1090.867117][T18095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1090.895305][T18095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1091.024532][T18095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1091.424382][ T5932] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1091.610195][ T5932] usb 6-1: Using ep0 maxpacket: 32 [ 1091.629265][ T5932] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1091.661954][T18095] hsr_slave_0: entered promiscuous mode [ 1091.671384][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.782639][ T5932] usb 6-1: config 0 descriptor?? [ 1091.789983][T18095] hsr_slave_1: entered promiscuous mode [ 1091.820683][T18095] debugfs: 'hsr0' already exists in 'hsr' [ 1091.826435][T18095] Cannot create hsr debugfs directory [ 1091.901587][T18415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3683'. [ 1092.056227][ T5932] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1092.091968][ T5932] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1092.651896][ T5932] dib0700: firmware download failed at 7 with -22 [ 1092.897228][T18422] netlink: 'syz.4.3685': attribute type 1 has an invalid length. [ 1092.900659][ T5932] usb 6-1: USB disconnect, device number 41 [ 1092.999863][T18427] hfs: can't find a HFS filesystem on dev nullb0 [ 1093.815561][T18440] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3692'. [ 1093.836085][T18440] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3692'. [ 1093.962474][T18422] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1094.102012][T18435] vlan2: entered promiscuous mode [ 1094.157918][T18449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3695'. [ 1094.159011][T18435] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1094.185579][T18435] vlan2: entered allmulticast mode [ 1094.191933][T18435] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1094.194551][T18444] ceph: No mds server is up or the cluster is laggy [ 1094.503075][T18440] team0: entered promiscuous mode [ 1094.510608][T18440] team_slave_0: entered promiscuous mode [ 1094.519565][T18440] team_slave_1: entered promiscuous mode [ 1094.530360][T18440] gretap0: entered promiscuous mode [ 1094.784038][T18451] veth1: entered promiscuous mode [ 1094.806125][T18451] bridge2: entered promiscuous mode [ 1094.815791][T18451] debugfs: 'hsr1' already exists in 'hsr' [ 1094.822036][T18451] Cannot create hsr debugfs directory [ 1094.828905][T18451] hsr1: entered promiscuous mode [ 1095.359483][T18468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3700'. [ 1095.958479][T18476] hfs: can't find a HFS filesystem on dev nullb0 [ 1096.699331][ T36] hsr_slave_0: left promiscuous mode [ 1096.762268][ T36] hsr_slave_1: left promiscuous mode [ 1096.792676][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1096.820345][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1096.846838][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1096.860153][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1097.029073][ T36] veth1_macvtap: left promiscuous mode [ 1097.092225][ T36] veth0_macvtap: left promiscuous mode [ 1097.201912][T18490] loop5: detected capacity change from 0 to 8 [ 1097.974886][T18490] SQUASHFS error: Unable to read directory block [629:26] [ 1098.129106][T18493] ceph: No mds server is up or the cluster is laggy [ 1099.872048][T18505] loop1: detected capacity change from 0 to 32768 [ 1099.918162][T18505] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3713 (18505) [ 1099.974039][T18505] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1099.999966][T18505] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 1100.019429][T18505] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1100.244630][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1100.271117][T18505] BTRFS info (device loop1): rebuilding free space tree [ 1100.318307][T18505] BTRFS info (device loop1): disabling free space tree [ 1100.330260][T18505] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1100.352795][T18505] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1100.369974][T18505] BTRFS info (device loop1): enabling ssd optimizations [ 1100.393636][T18505] BTRFS info (device loop1): turning on async discard [ 1100.404369][T18505] BTRFS info (device loop1): enabling disk space caching [ 1100.412217][T18505] BTRFS info (device loop1): force clearing of disk cache [ 1100.419950][T18505] BTRFS info (device loop1): use zstd compression, level 3 [ 1100.456756][ T30] audit: type=1800 audit(1763425733.984:1967): pid=18505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3713" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 1100.482565][ T30] audit: type=1800 audit(1763425734.004:1968): pid=18505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3713" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 1100.743054][T16030] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1101.044700][T18544] fuse: Unknown parameter '0x0000000000000004' [ 1101.350603][ T5846] Bluetooth: hci2: unexpected event for opcode 0x682a [ 1101.812356][T18551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3723'. [ 1102.000620][T18560] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3726'. [ 1102.071775][T18560] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3726'. [ 1102.269037][T18566] loop5: detected capacity change from 0 to 2048 [ 1102.390029][T18566] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 1102.451367][T18566] UDF-fs: Scanning with blocksize 512 failed [ 1102.839766][T18566] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1103.616332][T18581] sch_tbf: burst 20480 is lower than device lo mtu (65550) ! [ 1104.398751][ T36] IPVS: stop unused estimator thread 0... [ 1104.506614][T18095] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1105.207607][T18095] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1105.925746][T18095] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1106.032049][T18095] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1106.452690][T18095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1106.561199][T18095] 8021q: adding VLAN 0 to HW filter on device team0 [ 1106.602766][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.609982][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1106.658635][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.665884][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1106.860308][T18604] loop5: detected capacity change from 0 to 32768 [ 1106.946415][T18604] OCFS2: ERROR (device loop5): ocfs2_validate_inode_block: Invalid dinode 72: suballoc slot 65532 [ 1106.982037][T18604] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1107.028974][T18604] OCFS2: File system is now read-only. [ 1107.035045][T18604] (syz.5.3740,18604,1):ocfs2_read_locked_inode:597 ERROR: status = -30 [ 1107.043953][T18604] (syz.5.3740,18604,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 1107.064672][ T5846] Bluetooth: hci6: command 0x0406 tx timeout [ 1107.074032][T18604] (syz.5.3740,18604,1):ocfs2_init_local_system_inodes:495 ERROR: status=-30, sysfile=7, slot=0 [ 1107.107761][T18604] (syz.5.3740,18604,1):ocfs2_init_local_system_inodes:505 ERROR: status = -30 [ 1107.181448][T18604] (syz.5.3740,18604,0):ocfs2_mount_volume:1758 ERROR: status = -30 [ 1107.223028][T18604] (syz.5.3740,18604,0):ocfs2_fill_super:1177 ERROR: status = -30 [ 1107.295391][T18600] loop4: detected capacity change from 0 to 32768 [ 1107.325725][T18600] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3739 (18600) [ 1107.410361][T18600] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1107.421470][T18646] loop1: detected capacity change from 0 to 512 [ 1107.463731][T18600] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1107.478469][T18646] EXT4-fs: inline encryption not supported [ 1107.546300][T18646] EXT4-fs warning (device loop1): read_mmp_block:114: Error -117 while reading MMP block 17 [ 1109.031665][T18600] BTRFS error (device loop4): open_ctree failed: -4 [ 1109.309813][T18095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1109.796389][T18095] veth0_vlan: entered promiscuous mode [ 1109.869389][T18095] veth1_vlan: entered promiscuous mode [ 1110.125283][T18095] veth0_macvtap: entered promiscuous mode [ 1110.176320][T18095] veth1_macvtap: entered promiscuous mode [ 1110.296994][T18095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1110.315260][T18694] loop1: detected capacity change from 0 to 8192 [ 1110.381029][T18095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1110.450231][ T8835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.496632][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.540309][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.594752][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.771282][T18694] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 1110.857055][T18694] FAT-fs (loop1): Filesystem has been set read-only [ 1110.893989][T18694] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 1110.938385][T18694] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 1110.973208][T18694] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 1111.137909][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.200102][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.266370][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.326405][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.329531][T18726] loop5: detected capacity change from 0 to 8 [ 1113.012648][T18747] loop4: detected capacity change from 0 to 65 [ 1113.077418][T18747] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1113.741183][T18768] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3781'. [ 1115.584312][T18800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3791'. [ 1117.360338][ T2148] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1117.547592][ T2148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1117.589131][ T2148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1117.661794][ T2148] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 1117.700255][ T2148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.748443][ T2148] usb 4-1: Product: syz [ 1117.783881][ T2148] usb 4-1: Manufacturer: syz [ 1117.818992][ T2148] usb 4-1: SerialNumber: syz [ 1117.878434][ T2148] usb 4-1: config 0 descriptor?? [ 1118.741461][ T2148] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 1118.947799][ T2148] usb 4-1: USB disconnect, device number 24 [ 1119.380492][ T847] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1119.528137][T18826] loop4: detected capacity change from 0 to 32768 [ 1119.534826][ T847] usb 2-1: device descriptor read/64, error -71 [ 1119.565308][T18826] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3799 (18826) [ 1119.624930][T18826] BTRFS info (device loop4): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 1119.678328][T18826] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1119.800216][ T847] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1120.084228][T18855] loop3: detected capacity change from 0 to 40427 [ 1120.122829][T18855] F2FS-fs (loop3): invalid crc value [ 1120.197917][T18855] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1120.218915][T18855] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1120.513122][T18826] BTRFS error (device loop4): open_ctree failed: -4 [ 1120.601226][ T847] usb 2-1: device descriptor read/64, error -71 [ 1121.419471][ T847] usb usb2-port1: attempt power cycle [ 1121.780153][ T847] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1121.850298][ T847] usb 2-1: device descriptor read/8, error -71 [ 1122.120167][ T847] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1122.243291][ T847] usb 2-1: device descriptor read/8, error -71 [ 1122.390290][ T847] usb usb2-port1: unable to enumerate USB device [ 1122.543806][T18908] veth1_to_bond: entered allmulticast mode [ 1122.566208][T18906] GUP no longer grows the stack in syz.1.3819 (18906): 200000004000-200000008000 (200000002000) [ 1122.578006][T18908] veth1_to_bond: left allmulticast mode [ 1122.622656][T18906] CPU: 1 UID: 0 PID: 18906 Comm: syz.1.3819 Not tainted syzkaller #0 PREEMPT(full) [ 1122.622701][T18906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1122.622724][T18906] Call Trace: [ 1122.622737][T18906] [ 1122.622751][T18906] dump_stack_lvl+0x16c/0x1f0 [ 1122.622804][T18906] gup_vma_lookup+0x1d2/0x220 [ 1122.622873][T18906] __get_user_pages+0x241/0x3530 [ 1122.622926][T18906] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1122.622972][T18906] ? find_held_lock+0x2b/0x80 [ 1122.623023][T18906] ? __pfx___get_user_pages+0x10/0x10 [ 1122.623066][T18906] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1122.623121][T18906] get_user_pages_remote+0x243/0xab0 [ 1122.623163][T18906] ? mast_spanning_rebalance.isra.0+0x2060/0x2060 [ 1122.623223][T18906] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1122.623270][T18906] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1122.623320][T18906] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1122.623374][T18906] __access_remote_vm+0x250/0xaa0 [ 1122.623444][T18906] ? do_raw_spin_lock+0x12c/0x2b0 [ 1122.623486][T18906] ? __pfx___access_remote_vm+0x10/0x10 [ 1122.623551][T18906] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1122.623603][T18906] proc_pid_cmdline_read+0x4de/0x8e0 [ 1122.623647][T18906] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1122.623690][T18906] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1122.623734][T18906] ? rw_verify_area+0xcf/0x6c0 [ 1122.623787][T18906] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1122.623824][T18906] vfs_readv+0x5c1/0x8b0 [ 1122.623889][T18906] ? __pfx_vfs_readv+0x10/0x10 [ 1122.623944][T18906] ? kmem_cache_free+0x2d4/0x6c0 [ 1122.624004][T18906] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1122.624072][T18906] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1122.624117][T18906] ? __fget_files+0x20e/0x3c0 [ 1122.624189][T18906] ? do_preadv+0x1a6/0x270 [ 1122.624237][T18906] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1122.624281][T18906] do_preadv+0x1a6/0x270 [ 1122.624333][T18906] ? __pfx_do_preadv+0x10/0x10 [ 1122.624386][T18906] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1122.624442][T18906] do_syscall_64+0xcd/0xfa0 [ 1122.624493][T18906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.624531][T18906] RIP: 0033:0x7f0aefd8f6c9 [ 1122.624560][T18906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1122.624596][T18906] RSP: 002b:00007f0af0c1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1122.624631][T18906] RAX: ffffffffffffffda RBX: 00007f0aeffe5fa0 RCX: 00007f0aefd8f6c9 [ 1122.624657][T18906] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000006 [ 1122.624681][T18906] RBP: 00007f0aefe11f91 R08: 0000000000000200 R09: 0000000000000000 [ 1122.624704][T18906] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1122.624728][T18906] R13: 00007f0aeffe6038 R14: 00007f0aeffe5fa0 R15: 00007ffe726e75b8 [ 1122.624781][T18906] [ 1123.802456][T18919] loop3: detected capacity change from 0 to 40427 [ 1123.854231][T18919] F2FS-fs (loop3): invalid crc value [ 1123.975243][T18919] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1123.995216][T18919] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1124.264271][T18928] @: renamed from vlan0 (while UP) [ 1125.467103][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1126.890170][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1127.070183][ T10] usb 2-1: device descriptor read/64, error -71 [ 1127.309394][T18967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3835'. [ 1127.340165][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1127.521611][ T10] usb 2-1: device descriptor read/64, error -71 [ 1127.632726][ T10] usb usb2-port1: attempt power cycle [ 1128.000137][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1128.032504][ T10] usb 2-1: device descriptor read/8, error -71 [ 1128.055642][T18949] loop5: detected capacity change from 0 to 32768 [ 1128.126689][T18949] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1128.254850][T18949] XFS (loop5): Ending clean mount [ 1128.290184][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1128.331784][T18949] XFS (loop5): Quotacheck needed: Please wait. [ 1128.370329][ T10] usb 2-1: device descriptor read/8, error -71 [ 1128.475098][T18949] XFS (loop5): Quotacheck: Done. [ 1128.480711][ T10] usb usb2-port1: unable to enumerate USB device [ 1130.228481][T17491] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1130.514923][T19023] loop4: detected capacity change from 0 to 256 [ 1130.961571][T19023] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1131.389768][T19023] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1131.564122][T19023] exFAT-fs (loop4): failed to load alloc-bitmap [ 1131.623479][T19023] exFAT-fs (loop4): failed to recognize exfat type [ 1133.577669][T19052] loop5: detected capacity change from 0 to 40427 [ 1133.677636][T19052] F2FS-fs (loop5): invalid crc value [ 1133.774680][T19052] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1133.801656][T19052] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1134.041576][ T5932] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1134.970139][ T5932] usb 4-1: device descriptor read/64, error -71 [ 1135.230564][ T5932] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1135.355836][T19085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3865'. [ 1135.410301][ T5932] usb 4-1: device descriptor read/64, error -71 [ 1135.550291][ T5932] usb usb4-port1: attempt power cycle [ 1135.920200][ T5932] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1135.970942][ T5932] usb 4-1: device descriptor read/8, error -71 [ 1136.513674][T19118] overlayfs: failed to clone upperpath [ 1136.903633][T19121] loop1: detected capacity change from 0 to 40427 [ 1137.016500][T19121] F2FS-fs (loop1): invalid crc value [ 1137.666053][T19121] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1137.679437][T19121] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1140.877257][T19172] sctp: [Deprecated]: syz.5.3890 (pid 19172) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1140.877257][T19172] Use struct sctp_sack_info instead [ 1143.560291][T19213] netlink: 'syz.2.3901': attribute type 30 has an invalid length. [ 1143.609415][T19213] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3901'. [ 1143.857394][T19213] bond2: option arp_missed_max: invalid value (0) [ 1143.897631][T19213] bond2: option arp_missed_max: allowed values 1 - 255 [ 1143.962545][T19213] bond2 (unregistering): Released all slaves [ 1144.512170][T19207] loop5: detected capacity change from 0 to 8 [ 1144.567122][T19207] squashfs: Unknown parameter 'sys_enter' [ 1146.720476][T19256] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3914'. [ 1147.353809][T19270] Invalid ELF header type: 3 != 1 [ 1148.414947][T19278] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3924'. [ 1148.478014][T19281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3924'. [ 1149.150205][ T847] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1149.353822][ T847] usb 4-1: device descriptor read/64, error -71 [ 1149.661472][ T847] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1149.893620][ T847] usb 4-1: device descriptor read/64, error -71 [ 1150.020555][ T847] usb usb4-port1: attempt power cycle [ 1152.199017][T19305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3930'. [ 1152.363124][ T847] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1153.150320][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 1153.820285][ T847] usb 4-1: device descriptor read/8, error -71 [ 1158.534288][T19357] loop1: detected capacity change from 0 to 65536 [ 1158.676873][T19357] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1158.724249][T19357] XFS (loop1): Ending clean mount [ 1158.730451][T19357] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1159.268779][T19394] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3957'. [ 1161.749469][T19425] hfs: can't find a HFS filesystem on dev nullb0 [ 1164.437206][T19450] loop4: detected capacity change from 0 to 65536 [ 1164.570363][T19450] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1164.656817][T19450] XFS (loop4): Ending clean mount [ 1164.666916][T19450] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1165.771272][T19484] ceph: No mds server is up or the cluster is laggy [ 1167.723519][T19513] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1168.701801][ T30] audit: type=1326 audit(1763426058.230:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19524 comm="syz.2.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8695d8f6c9 code=0x7ffc0000 [ 1168.850281][ T30] audit: type=1326 audit(1763426058.230:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19524 comm="syz.2.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8695d8f6c9 code=0x7ffc0000 [ 1168.988086][ T30] audit: type=1326 audit(1763426058.280:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19524 comm="syz.2.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f8695d8f6c9 code=0x7ffc0000 [ 1169.120419][ T30] audit: type=1326 audit(1763426058.280:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19524 comm="syz.2.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8695d8f6c9 code=0x7ffc0000 [ 1169.259882][ T30] audit: type=1326 audit(1763426058.290:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19524 comm="syz.2.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8695d8f6c9 code=0x7ffc0000 [ 1176.238969][ T30] audit: type=1800 audit(1763426065.710:1974): pid=19585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4002" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1176.583827][T19583] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1177.518830][T19594] hfs: can't find a HFS filesystem on dev nullb0 [ 1178.381497][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1178.398847][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1178.419427][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1178.450592][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1178.470599][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1180.827716][T19602] chnl_net:caif_netlink_parms(): no params data found [ 1180.840177][ T5831] Bluetooth: hci0: command tx timeout [ 1181.017196][T19637] loop1: detected capacity change from 0 to 128 [ 1181.138186][T19637] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1181.165215][T19637] ext4 filesystem being mounted at /143/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1181.315863][T19647] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4017'. [ 1181.353526][T16030] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1181.562048][T19602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.580523][T19602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.587786][T19602] bridge_slave_0: entered allmulticast mode [ 1181.627056][T19602] bridge_slave_0: entered promiscuous mode [ 1181.942003][T19602] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.949179][T19602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.987486][T19602] bridge_slave_1: entered allmulticast mode [ 1181.999420][T19602] bridge_slave_1: entered promiscuous mode [ 1182.349255][T19602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1182.407219][T19602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1182.947627][ T5831] Bluetooth: hci0: command tx timeout [ 1183.676622][T19602] team0: Port device team_slave_0 added [ 1183.747070][T19602] team0: Port device team_slave_1 added [ 1184.225087][T19602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1184.265627][T19602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1184.405943][T19602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1184.433377][T19602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1184.503354][T19602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1184.611582][T19602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1184.990239][ T5831] Bluetooth: hci0: command tx timeout [ 1185.048408][T19602] hsr_slave_0: entered promiscuous mode [ 1185.083526][T19602] hsr_slave_1: entered promiscuous mode [ 1185.422035][T19397] Set syz1 is full, maxelem 65536 reached [ 1185.890164][ T5941] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 1186.381555][ T5941] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 1186.401602][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.443313][ T5941] usb 2-1: Product: syz [ 1186.471683][ T5941] usb 2-1: Manufacturer: syz [ 1186.476311][ T5941] usb 2-1: SerialNumber: syz [ 1186.534483][ T5941] usb 2-1: config 0 descriptor?? [ 1186.556147][ T5941] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1186.854126][ T5941] usb 2-1: USB disconnect, device number 33 [ 1186.912264][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1187.073261][ T5831] Bluetooth: hci0: command tx timeout [ 1188.330949][T19717] team0: Port device team_slave_0 removed [ 1189.536554][T19741] loop4: detected capacity change from 0 to 64 [ 1190.455850][ T5952] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.795671][ T5817] IPVS: starting estimator thread 0... [ 1191.890162][T19769] IPVS: using max 28 ests per chain, 67200 per kthread [ 1193.545184][ T5952] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.298457][ T5952] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.855042][ T5952] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.410446][ T5952] bridge_slave_1: left allmulticast mode [ 1196.453919][ T5952] bridge_slave_1: left promiscuous mode [ 1196.483066][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.614143][ T5952] bridge_slave_0: left allmulticast mode [ 1196.619847][ T5952] bridge_slave_0: left promiscuous mode [ 1196.700481][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.716235][T19817] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4065'. [ 1198.160276][ T5952] gretap0 (unregistering): left promiscuous mode [ 1198.541066][ T10] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 1198.676242][ T5952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1198.711709][ T5952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1198.731261][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1198.742933][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1198.748137][ T5952] bond0 (unregistering): Released all slaves [ 1198.775017][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1198.799410][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1198.826050][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1198.845100][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1198.873231][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1198.949654][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1198.983101][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1199.017716][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1199.362178][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1199.379884][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1199.416860][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1199.471582][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1199.532566][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1199.578956][ T10] usb 2-1: string descriptor 0 read error: -22 [ 1199.586887][ T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1199.613361][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.618625][T19854] bond2: invalid ARP target 0.0.0.0 specified for addition [ 1199.631605][T19854] bond2: option arp_ip_target: invalid value (0) [ 1199.641186][T19854] bond2 (unregistering): Released all slaves [ 1199.675429][ T10] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1199.927809][ T5932] usb 2-1: USB disconnect, device number 34 [ 1200.672630][ T5952] team0: left promiscuous mode [ 1200.690606][ T5952] team_slave_0: left promiscuous mode [ 1200.696319][ T5952] team_slave_1: left promiscuous mode [ 1200.734140][ T5952] hsr_slave_0: left promiscuous mode [ 1200.754039][ T5952] hsr_slave_1: left promiscuous mode [ 1200.767547][ T5952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1200.775346][ T5952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1200.788373][ T5952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1200.814872][ T5952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1201.015225][ T5952] veth1_macvtap: left promiscuous mode [ 1201.021962][ T5952] veth0_macvtap: left promiscuous mode [ 1201.027638][ T5952] veth1_vlan: left promiscuous mode [ 1201.033694][ T5952] veth0_vlan: left promiscuous mode [ 1202.125834][T19889] loop1: detected capacity change from 0 to 4096 [ 1208.438351][ T5952] team0 (unregistering): Port device team_slave_1 removed [ 1208.457245][T19940] fuse: Bad value for 'fd' [ 1208.849083][ T30] audit: type=1326 audit(1763426354.377:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19947 comm="syz.7.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a92d8f6c9 code=0x7ffc0000 [ 1208.957497][ T30] audit: type=1326 audit(1763426354.377:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19947 comm="syz.7.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a92d8f6c9 code=0x7ffc0000 [ 1208.997216][ T5952] team0 (unregistering): Port device team_slave_0 removed [ 1209.049316][ T30] audit: type=1326 audit(1763426354.377:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19947 comm="syz.7.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f1a92d8f6c9 code=0x7ffc0000 [ 1209.084857][ T30] audit: type=1326 audit(1763426354.377:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19947 comm="syz.7.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a92d8f6c9 code=0x7ffc0000 [ 1209.161891][ T30] audit: type=1326 audit(1763426354.377:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19947 comm="syz.7.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a92d8f6c9 code=0x7ffc0000 [ 1209.196410][ T30] audit: type=1326 audit(1763426354.417:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19947 comm="syz.7.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f1a92d8f6c9 code=0x7ffc0000 [ 1209.219509][ T30] audit: type=1326 audit(1763426354.417:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19947 comm="syz.7.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a92d8f6c9 code=0x7ffc0000 [ 1209.259131][ T30] audit: type=1326 audit(1763426354.417:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19947 comm="syz.7.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a92d8f6c9 code=0x7ffc0000 [ 1209.417430][T19956] loop4: detected capacity change from 0 to 64 [ 1211.337077][T19897] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1211.349156][T19944] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4107'. [ 1211.510244][T19602] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1211.574187][T19602] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1211.651639][T19602] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1211.788508][T19602] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1212.964753][T19602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1213.054338][T19602] 8021q: adding VLAN 0 to HW filter on device team0 [ 1213.091044][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.098213][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1213.156471][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.163633][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1214.337163][T19602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1216.429146][T20045] bond1: invalid ARP target 0.0.0.0 specified for addition [ 1216.438632][T20045] bond1: option arp_ip_target: invalid value (0) [ 1216.603028][T20045] bond1 (unregistering): Released all slaves [ 1217.387413][T19602] veth0_vlan: entered promiscuous mode [ 1217.458633][T19602] veth1_vlan: entered promiscuous mode [ 1217.554818][T19602] veth0_macvtap: entered promiscuous mode [ 1217.585744][T19602] veth1_macvtap: entered promiscuous mode [ 1217.697482][T19602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1217.765027][T19602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1217.842335][ T3871] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.904318][ T3871] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.003720][ T3871] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.070261][ T3871] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.685451][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1219.757243][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1219.977071][ T1082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1220.108273][ T1082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.264830][T20102] bond1: invalid ARP target 0.0.0.0 specified for addition [ 1221.295006][T20102] bond1: option arp_ip_target: invalid value (0) [ 1221.327884][T20102] bond1 (unregistering): Released all slaves [ 1221.412050][T20114] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3999'. [ 1224.106026][T20145] loop8: detected capacity change from 0 to 4096 [ 1225.315238][T20145] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1225.315362][T20145] EXT4-fs: failed to create workqueue [ 1225.468466][T20145] EXT4-fs (loop8): mount failed [ 1225.544958][T20168] bond1: invalid ARP target 0.0.0.0 specified for addition [ 1225.603476][T20168] bond1: option arp_ip_target: invalid value (0) [ 1225.667111][T20168] bond1 (unregistering): Released all slaves [ 1225.958582][T20183] kAFS: No cell specified [ 1226.312656][T20193] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1226.374422][T20197] netlink: 'syz.8.4184': attribute type 1 has an invalid length. [ 1226.411282][T20201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4185'. [ 1226.523191][T20205] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4184'. [ 1226.626766][T20193] bond_slave_0: entered promiscuous mode [ 1226.632892][T20193] bond_slave_1: entered promiscuous mode [ 1226.660924][T20193] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1226.691405][T20193] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1226.910542][T20198] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1229.230110][T20222] loop4: detected capacity change from 0 to 65536 [ 1229.379756][T20222] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1229.403315][T20197] macvlan2: entered promiscuous mode [ 1229.456740][T20197] macvlan2: entered allmulticast mode [ 1229.498772][T20222] XFS (loop4): Ending clean mount [ 1229.509189][T20222] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1230.312505][T20249] bond2: invalid ARP target 0.0.0.0 specified for addition [ 1230.370170][T20249] bond2: option arp_ip_target: invalid value (0) [ 1230.428902][T20249] bond2 (unregistering): Released all slaves [ 1230.837947][T20267] hfs: can't find a HFS filesystem on dev nullb0 [ 1232.198812][ T5817] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1232.541677][ T5817] usb 2-1: Using ep0 maxpacket: 32 [ 1232.569306][ T5817] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1232.578417][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.605459][ T5817] usb 2-1: config 0 descriptor?? [ 1233.493379][ T5817] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1234.481566][ T5817] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1234.496314][ T5817] dib0700: firmware download failed at 7 with -22 [ 1234.508488][ T5817] usb 2-1: USB disconnect, device number 35 [ 1234.766507][T20305] loop4: detected capacity change from 0 to 1024 [ 1234.971704][T20309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4212'. [ 1236.016346][T20315] loop8: detected capacity change from 0 to 8192 [ 1236.040042][T20323] bond2: invalid ARP target 0.0.0.0 specified for addition [ 1236.066995][T20323] bond2: option arp_ip_target: invalid value (0) [ 1236.083593][T20323] bond2 (unregistering): Released all slaves [ 1236.374771][T20340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4220'. [ 1236.933995][T20344] loop1: detected capacity change from 0 to 512 [ 1237.035944][T20344] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1237.110358][T20344] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 1237.271120][T20344] EXT4-fs (loop1): 1 truncate cleaned up [ 1237.289045][T20344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1237.394929][T20344] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 4: comm syz.1.4221: lblock 0 mapped to illegal pblock 4 (length 1) [ 1237.455614][T20344] EXT4-fs (loop1): Remounting filesystem read-only [ 1237.628293][T16030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1238.001080][T20319] loop4: detected capacity change from 0 to 40427 [ 1238.084851][T20319] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1238.880146][T20319] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1239.904193][T20373] loop1: detected capacity change from 0 to 1024 [ 1240.241129][T20319] F2FS-fs (loop4): invalid crc value [ 1240.260907][T20319] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 1240.766432][T20393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4236'. [ 1240.960835][T20397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4237'. [ 1241.509682][ T5831] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 1243.202604][T20423] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4246'. [ 1243.791377][T20400] loop8: detected capacity change from 0 to 32768 [ 1243.970566][T20400] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1244.033281][T20400] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop8": -EINTR [ 1244.033712][T20400] XFS (loop8): log mount failed [ 1245.057551][T20446] loop4: detected capacity change from 0 to 1024 [ 1245.975589][T20453] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4251'. [ 1246.878066][T20462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4254'. [ 1247.394523][T20474] fuse: Bad value for 'fd' [ 1248.080249][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1248.354261][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.877055][T20510] loop4: detected capacity change from 0 to 65536 [ 1250.150148][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1250.173040][T20510] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1250.244600][ T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1250.299603][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.335912][ T10] usb 2-1: config 0 descriptor?? [ 1250.374985][T20510] XFS (loop4): Ending clean mount [ 1250.381738][T20510] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1250.563390][ T10] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1250.572904][T20529] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4274'. [ 1250.606799][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1250.676217][ T10] dib0700: firmware download failed at 7 with -22 [ 1250.780481][ T10] usb 2-1: USB disconnect, device number 36 [ 1253.828334][T20590] fuse: Bad value for 'fd' [ 1255.954600][ T30] audit: type=1326 audit(1763426401.477:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20619 comm="syz.3.4303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f44f9786567 code=0x7ffc0000 [ 1256.133046][ T30] audit: type=1326 audit(1763426401.477:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20619 comm="syz.3.4303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44f972b789 code=0x7ffc0000 [ 1256.330326][ T30] audit: type=1326 audit(1763426401.477:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20619 comm="syz.3.4303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f44f9786567 code=0x7ffc0000 [ 1256.428993][ T30] audit: type=1326 audit(1763426401.477:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20619 comm="syz.3.4303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44f972b789 code=0x7ffc0000 [ 1256.540138][ T30] audit: type=1326 audit(1763426401.477:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20619 comm="syz.3.4303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f44f9786567 code=0x7ffc0000 [ 1256.635415][ T30] audit: type=1326 audit(1763426401.477:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20619 comm="syz.3.4303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44f972b789 code=0x7ffc0000 [ 1256.700143][ T30] audit: type=1326 audit(1763426401.477:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20619 comm="syz.3.4303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f44f9786567 code=0x7ffc0000 [ 1256.722981][ T30] audit: type=1326 audit(1763426401.477:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20619 comm="syz.3.4303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44f972b789 code=0x7ffc0000 [ 1256.748947][ T30] audit: type=1326 audit(1763426401.477:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20619 comm="syz.3.4303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f44f9786567 code=0x7ffc0000 [ 1256.772767][ T30] audit: type=1326 audit(1763426401.477:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20619 comm="syz.3.4303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44f972b789 code=0x7ffc0000 [ 1257.142953][T20661] overlayfs: missing 'lowerdir' [ 1259.291587][T20709] overlayfs: missing 'lowerdir' [ 1259.631768][T20720] netlink: 180 bytes leftover after parsing attributes in process `syz.8.4336'. [ 1259.892543][ T2148] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1260.101663][ T2148] usb 2-1: Using ep0 maxpacket: 32 [ 1260.127981][ T2148] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1260.169752][ T2148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.244218][ T2148] usb 2-1: config 0 descriptor?? [ 1260.924280][ T2148] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1260.991896][ T2148] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1261.066715][ T2148] dib0700: firmware download failed at 7 with -22 [ 1261.135753][ T2148] usb 2-1: USB disconnect, device number 37 [ 1267.722246][T20810] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1267.736370][T20799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4359'. [ 1267.800224][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 1267.800247][ T30] audit: type=1800 audit(1763426413.227:2049): pid=20809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4358" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1268.752719][T20817] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1271.326058][T20891] loop1: detected capacity change from 0 to 4096 [ 1271.410261][T20891] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1271.432314][T20891] NILFS (loop1): mounting unchecked fs [ 1271.458289][T20891] NILFS (loop1): recovery required for readonly filesystem [ 1271.466778][T20891] NILFS (loop1): write access will be enabled during recovery [ 1271.512246][T20891] NILFS (loop1): invalid segment: Checksum error in super root [ 1271.531139][T20891] NILFS (loop1): error -22 while loading super root [ 1272.978957][T20911] loop1: detected capacity change from 0 to 1024 [ 1274.774612][T20953] netlink: 256 bytes leftover after parsing attributes in process `syz.7.4404'. [ 1274.786291][T20953] unsupported nlmsg_type 40 [ 1275.830408][T20967] loop1: detected capacity change from 0 to 1024 [ 1277.529631][T20992] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 1280.747519][T21056] loop1: detected capacity change from 0 to 2048 [ 1280.885362][T21056] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1281.443691][T21070] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4441'. [ 1283.306916][T21092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4446'. [ 1283.488510][T21095] overlayfs: failed to clone upperpath [ 1283.678055][T21097] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1283.684614][T21097] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1283.693548][T21097] vhci_hcd vhci_hcd.0: Device attached [ 1283.703062][T21104] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 1283.725959][ T5952] vhci_hcd: stop threads [ 1283.736802][ T5952] vhci_hcd: release socket [ 1283.746885][ T5952] vhci_hcd: disconnect device [ 1283.799433][T21102] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1283.825729][ T30] audit: type=1800 audit(1763426429.347:2050): pid=21102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4447" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1285.487207][T21145] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4463'. [ 1288.154976][T21182] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1288.167762][ T30] audit: type=1800 audit(1763426433.697:2051): pid=21182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4475" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1290.910781][T21209] netlink: 180 bytes leftover after parsing attributes in process `syz.8.4485'. [ 1291.424561][T21221] 9pnet_fd: Insufficient options for proto=fd [ 1292.675549][T21252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4500'. [ 1297.663632][T21313] overlayfs: missing 'lowerdir' [ 1298.876488][T21332] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1298.897406][T21332] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1298.906380][T21332] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1298.917996][T21335] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4519'. [ 1298.938024][T21332] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1298.953637][T21332] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1299.650825][T21352] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4524'. [ 1300.243907][T21360] blktrace: Concurrent blktraces are not allowed on loop8 [ 1300.986997][T21348] Bluetooth: hci4: command tx timeout [ 1301.013353][ T37] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.128551][ T37] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1301.542444][ T37] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.625207][T21348] Bluetooth: hci5: command 0x0406 tx timeout [ 1301.631418][T21348] Bluetooth: hci0: command 0x0406 tx timeout [ 1301.641709][ T37] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1301.790917][T21370] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4528'. [ 1302.099838][ T37] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.151373][ T37] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1302.221178][T21377] overlayfs: missing 'lowerdir' [ 1302.551041][T21388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4532'. [ 1302.754111][ T37] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.785924][ T37] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1302.843303][T21394] tipc: Started in network mode [ 1302.851171][T21394] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 1302.916770][T21394] tipc: Enabled bearer , priority 10 [ 1303.065981][T21332] Bluetooth: hci4: command tx timeout [ 1303.410211][T21402] loop1: detected capacity change from 0 to 512 [ 1303.421955][T21331] chnl_net:caif_netlink_parms(): no params data found [ 1303.508878][T21402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1303.571436][T21402] ext4 filesystem being mounted at /218/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1303.861268][T21402] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.4539: corrupted inode contents [ 1304.525509][T21402] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.4539: mark_inode_dirty error [ 1304.577085][T21402] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.4539: corrupted inode contents [ 1304.826591][T21402] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.4539: mark_inode_dirty error [ 1305.005270][ T5941] tipc: Node number set to 4269801491 [ 1305.078016][T16030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1305.153960][T21332] Bluetooth: hci4: command tx timeout [ 1305.186430][T21331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.232464][T21331] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.270333][T21331] bridge_slave_0: entered allmulticast mode [ 1305.338678][T21331] bridge_slave_0: entered promiscuous mode [ 1305.450543][T21331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.474673][T21331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.730698][T21331] bridge_slave_1: entered allmulticast mode [ 1305.739939][T21331] bridge_slave_1: entered promiscuous mode [ 1305.823999][ T37] gretap0: left allmulticast mode [ 1305.829046][ T37] gretap0: left promiscuous mode [ 1305.869814][ T37] bridge0: port 3(gretap0) entered disabled state [ 1305.920603][ T37] bridge_slave_1: left allmulticast mode [ 1305.926320][ T37] bridge_slave_1: left promiscuous mode [ 1305.954388][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.003530][ T37] bridge_slave_0: left allmulticast mode [ 1306.024023][ T37] bridge_slave_0: left promiscuous mode [ 1306.046042][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.222608][T21332] Bluetooth: hci4: command tx timeout [ 1307.382700][T21454] overlayfs: missing 'lowerdir' [ 1308.821269][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1308.833244][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1308.843827][ T37] bond0 (unregistering): Released all slaves [ 1309.035667][ T37] bond1 (unregistering): Released all slaves [ 1309.441808][ T37] bond2 (unregistering): Released all slaves [ 1309.502428][T21331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1309.562422][T21331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1309.677224][T21448] syz_tun: entered allmulticast mode [ 1309.787217][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1309.871770][T21493] capability: warning: `syz.3.4560' uses 32-bit capabilities (legacy support in use) [ 1310.005031][T20928] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1310.119396][T21502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4563'. [ 1310.162170][T21331] team0: Port device team_slave_0 added [ 1310.170445][T20928] usb 2-1: Using ep0 maxpacket: 16 [ 1310.199306][T21331] team0: Port device team_slave_1 added [ 1310.219184][T20928] usb 2-1: config 50 has an invalid interface number: 87 but max is 1 [ 1310.240303][T20928] usb 2-1: config 50 has an invalid interface number: 71 but max is 1 [ 1310.272795][T20928] usb 2-1: config 50 has no interface number 0 [ 1310.289250][T20928] usb 2-1: config 50 has no interface number 1 [ 1310.295718][T20928] usb 2-1: config 50 interface 87 has no altsetting 0 [ 1310.340192][T20928] usb 2-1: config 50 interface 71 has no altsetting 0 [ 1310.389159][T20928] usb 2-1: New USB device found, idVendor=0602, idProduct=1001, bcdDevice=40.6d [ 1310.439653][T20928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.480117][T20928] usb 2-1: Product: syz [ 1310.484290][T20928] usb 2-1: Manufacturer: syz [ 1310.488902][T20928] usb 2-1: SerialNumber: syz [ 1310.808477][T20928] usb 2-1: bad CDC descriptors [ 1310.867183][T20928] usb 2-1: USB disconnect, device number 38 [ 1310.966088][T21331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1310.995093][T21331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1311.401939][T21331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1311.440355][T21331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1311.458407][T21331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1311.546945][T21331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1311.659544][T21529] loop1: detected capacity change from 0 to 1024 [ 1311.680236][ T37] hsr_slave_0: left promiscuous mode [ 1311.686816][T21529] hfsplus: Unknown parameter './file1' [ 1311.696317][ T37] hsr_slave_1: left promiscuous mode [ 1311.712550][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1311.736005][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1311.757056][T21332] Bluetooth: hci1: Unable to find connection for big 0x75 [ 1311.787396][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1311.836558][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1311.951232][ T37] veth1_macvtap: left promiscuous mode [ 1311.978593][ T37] veth0_macvtap: left promiscuous mode [ 1312.118071][T21536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4573'. [ 1312.342715][T21332] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 1312.359854][T21523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4568'. [ 1312.808931][T21547] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1312.815497][T21547] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1312.825677][T21547] vhci_hcd vhci_hcd.0: Device attached [ 1312.835678][T21548] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 1312.851761][ T3871] vhci_hcd: stop threads [ 1312.856581][ T3871] vhci_hcd: release socket [ 1312.870758][ T3871] vhci_hcd: disconnect device [ 1312.905885][ T30] audit: type=1800 audit(1763426458.437:2052): pid=21551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4577" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1313.332873][T21523] geneve2: entered promiscuous mode [ 1313.338122][T21523] geneve2: entered allmulticast mode [ 1313.397992][T21547] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1313.635659][T21331] hsr_slave_0: entered promiscuous mode [ 1313.661627][T21331] hsr_slave_1: entered promiscuous mode [ 1313.673525][T21331] debugfs: 'hsr0' already exists in 'hsr' [ 1313.699120][T21331] Cannot create hsr debugfs directory [ 1316.498215][T21332] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1316.508307][T21332] Bluetooth: hci1: Injecting HCI hardware error event [ 1316.517243][ T5831] Bluetooth: hci1: hardware error 0x00 [ 1316.559781][ T37] IPVS: stop unused estimator thread 0... [ 1317.814077][T21619] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4595'. [ 1318.164418][T21618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1318.187408][ T30] audit: type=1800 audit(1763426463.677:2053): pid=21621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4596" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1318.810614][ T5831] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1318.881684][T21331] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1318.910885][T21640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4601'. [ 1319.194702][T21331] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1319.561620][T21331] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1319.718461][T21331] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1320.093710][ T5831] Bluetooth: hci0: unexpected event for opcode 0x0026 [ 1320.319261][T21331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1320.408429][T21676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4611'. [ 1320.417747][T21331] 8021q: adding VLAN 0 to HW filter on device team0 [ 1320.450087][T20518] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.457252][T20518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1320.597117][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.604323][ T5952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1322.714400][T21331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1322.880301][T21743] dns_resolver: Unsupported server list version (0) [ 1326.156339][T21781] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1326.210175][ T30] audit: type=1800 audit(1763426471.697:2054): pid=21781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4644" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 1326.680551][T21790] tipc: Started in network mode [ 1326.687234][T21790] tipc: Node identity 00000000000040000000000000000001, cluster identity 4711 [ 1326.776437][T21790] tipc: Enabling of bearer rejected, failed to enable media [ 1326.899525][T21331] veth0_vlan: entered promiscuous mode [ 1326.995717][T21331] veth1_vlan: entered promiscuous mode [ 1327.148473][T21331] veth0_macvtap: entered promiscuous mode [ 1327.200030][T21331] veth1_macvtap: entered promiscuous mode [ 1327.295142][T21331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1327.344813][T21331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1327.407972][T20518] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.456998][T20518] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.505371][T20518] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.753342][T20518] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.496200][T21829] input: syz1 as /devices/virtual/input/input20 [ 1329.582406][ T6116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.621868][ T6116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1329.753527][T10345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.790665][T10345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1330.320437][ T2148] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1330.512529][ T2148] usb 8-1: config index 0 descriptor too short (expected 69, got 36) [ 1330.540343][ T2148] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1330.912290][ T2148] usb 8-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 1331.178527][ T2148] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.216792][ T2148] usb 8-1: Product: syz [ 1331.262043][ T2148] usb 8-1: Manufacturer: syz [ 1331.298327][ T2148] usb 8-1: SerialNumber: syz [ 1332.056713][ T2148] usb 8-1: config 0 descriptor?? [ 1332.078685][ T2148] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1332.504002][ T2148] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 1332.532242][ T2148] gspca_pac7302 8-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1332.593699][ T2148] usb 8-1: USB disconnect, device number 6 [ 1333.431646][T21898] overlayfs: failed to clone upperpath [ 1334.901634][T21921] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4683'. [ 1335.047433][T21933] tc_dump_action: action bad kind [ 1336.723209][T21966] overlayfs: failed to clone upperpath [ 1337.472255][ T1219] IPVS: starting estimator thread 0... [ 1337.600435][T21979] IPVS: using max 22 ests per chain, 52800 per kthread [ 1337.833535][ T30] audit: type=1326 audit(1763426483.357:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21982 comm="syz.8.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038338f6c9 code=0x7ffc0000 [ 1337.912520][ T30] audit: type=1326 audit(1763426483.357:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21982 comm="syz.8.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038338f6c9 code=0x7ffc0000 [ 1338.017867][ T30] audit: type=1326 audit(1763426483.377:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21982 comm="syz.8.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f038338f6c9 code=0x7ffc0000 [ 1338.369965][ T30] audit: type=1326 audit(1763426483.377:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21982 comm="syz.8.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038338f6c9 code=0x7ffc0000 [ 1338.816604][ T30] audit: type=1326 audit(1763426483.377:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21982 comm="syz.8.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038338f6c9 code=0x7ffc0000 [ 1341.643409][T22049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4716'. [ 1343.063864][T22060] netlink: 'syz.2.4720': attribute type 4 has an invalid length. [ 1343.126171][T22066] netlink: 'syz.2.4720': attribute type 4 has an invalid length. [ 1344.029235][T22073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4723'. [ 1346.650994][T22109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4733'. [ 1347.031420][ T5831] Bluetooth: hci5: Unable to find connection for big 0x00 [ 1347.415318][T22132] cgroup2: Unknown parameter 'obj_user' [ 1348.487897][T22158] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4749'. [ 1349.731627][T22163] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4751'. [ 1350.155050][ T30] audit: type=1326 audit(1763426495.677:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22168 comm="syz.1.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aefd8f6c9 code=0x7ffc0000 [ 1350.220043][ T30] audit: type=1326 audit(1763426495.687:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22168 comm="syz.1.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aefd8f6c9 code=0x7ffc0000 [ 1350.294674][ T30] audit: type=1326 audit(1763426495.717:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22168 comm="syz.1.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f0aefd8f6c9 code=0x7ffc0000 [ 1350.405924][ T30] audit: type=1326 audit(1763426495.717:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22168 comm="syz.1.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aefd8f6c9 code=0x7ffc0000 [ 1350.435257][T22179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4754'. [ 1350.459262][ T30] audit: type=1326 audit(1763426495.717:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22168 comm="syz.1.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aefd8f6c9 code=0x7ffc0000 [ 1350.603921][T22179] bridge_slave_1: left allmulticast mode [ 1350.619981][T22179] bridge_slave_1: left promiscuous mode [ 1350.647039][T22179] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.139097][T22179] bridge_slave_0: left allmulticast mode [ 1351.148114][T22179] bridge_slave_0: left promiscuous mode [ 1351.188020][T22179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.516834][T22208] syz_tun (unregistering): left allmulticast mode [ 1352.568632][T22211] fuse: Invalid rootmode [ 1352.993149][ T5831] Bluetooth: hci0: Unable to find connection for big 0x00 [ 1354.473368][T22229] loop7: detected capacity change from 0 to 65536 [ 1354.500144][T22246] xt_connbytes: Forcing CT accounting to be enabled [ 1354.506926][T22246] set match dimension is over the limit! [ 1354.526136][T22229] XFS (loop7): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1354.592577][T22229] XFS (loop7): Ending clean mount [ 1354.598600][T22229] XFS (loop7): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1358.890233][ T5831] Bluetooth: hci4: Unable to find connection for big 0x00 [ 1362.927599][ T5831] Bluetooth: hci4: Unable to find connection for big 0x00 [ 1363.296322][T22351] netlink: 'syz.7.4804': attribute type 1 has an invalid length. [ 1366.615450][ T5831] Bluetooth: hci4: Unable to find connection for big 0x00 [ 1366.762082][T22397] overlayfs: failed to clone upperpath [ 1370.115695][ T5831] Bluetooth: hci2: Unable to find connection for big 0x00 [ 1371.380730][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1371.467436][T22454] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4842'. [ 1371.650568][T22459] devpts: Bad value for 'uid' [ 1371.656763][T22459] devpts: Bad value for 'uid' [ 1372.100278][ T5831] Bluetooth: hci4: Unable to find connection for big 0x00 [ 1374.530181][ T44] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1375.003519][ T44] usb 8-1: Using ep0 maxpacket: 16 [ 1375.026727][ T44] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1375.078220][ T44] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1375.135836][ T44] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1375.169767][ T44] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1375.197737][ T44] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.250177][ T44] usb 8-1: Product: syz [ 1375.261001][ T44] usb 8-1: Manufacturer: syz [ 1375.270747][ T44] usb 8-1: SerialNumber: syz [ 1375.356758][ T5831] Bluetooth: hci6: Unable to find connection for big 0x00 [ 1375.575446][ T44] usb 8-1: USB disconnect, device number 7 [ 1375.993080][T22541] netlink: 'syz.2.4871': attribute type 1 has an invalid length. [ 1376.143195][T22541] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1376.850634][T22549] veth3: entered promiscuous mode [ 1376.866952][T22549] bond4: (slave veth3): Enslaving as an active interface with a down link [ 1377.115155][T22541] erspan0: entered allmulticast mode [ 1377.691786][T22541] bond4: (slave erspan0): making interface the new active one [ 1377.754423][T22541] erspan0: entered promiscuous mode [ 1377.803606][T22541] bond4: (slave erspan0): Enslaving as an active interface with an up link [ 1382.176862][T22627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4894'. [ 1382.690788][T22634] nbd: couldn't find a device at index 67108864 [ 1384.240025][T22649] loop7: detected capacity change from 0 to 128 [ 1384.755512][T22649] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1384.866563][T22649] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1385.469278][T21331] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1385.960228][ T2148] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1386.135233][ T2148] usb 8-1: config 0 has an invalid interface number: 235 but max is 0 [ 1386.177736][ T2148] usb 8-1: config 0 has no interface number 0 [ 1386.195231][ T2148] usb 8-1: config 0 interface 235 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 1386.239414][ T2148] usb 8-1: New USB device found, idVendor=eb1a, idProduct=2800, bcdDevice=8c.f6 [ 1386.525393][ T2148] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.539228][ T2148] usb 8-1: Product: syz [ 1386.544237][ T2148] usb 8-1: Manufacturer: syz [ 1386.548849][ T2148] usb 8-1: SerialNumber: syz [ 1386.556753][ T2148] usb 8-1: config 0 descriptor?? [ 1386.562792][T22679] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1387.030222][ T2148] usb 8-1: USB disconnect, device number 8 [ 1389.580349][ T5941] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1389.783478][ T5941] usb 8-1: config 0 has an invalid interface number: 168 but max is 0 [ 1389.822316][ T5941] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.886402][ T5941] usb 8-1: config 0 has no interface number 0 [ 1389.903803][ T5941] usb 8-1: config 0 interface 168 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1389.953622][ T5941] usb 8-1: config 0 interface 168 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 1389.990135][ T5941] usb 8-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 1389.999183][ T5941] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.088570][ T5941] usb 8-1: config 0 descriptor?? [ 1390.123009][ T5941] HFC-S_USB 8-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 1390.360417][T20928] usb 8-1: USB disconnect, device number 9 [ 1395.333554][T22806] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4950'. [ 1399.931065][ T5831] Bluetooth: hci2: Unable to find connection for big 0x00 [ 1401.008692][ T3871] erspan0: left promiscuous mode [ 1401.380152][ T30] audit: type=1804 audit(1763426546.897:2065): pid=22899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.4978" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=58763 res=1 errno=0 [ 1401.530515][ T30] audit: type=1804 audit(1763426546.907:2066): pid=22899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.4978" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=58763 res=1 errno=0 [ 1403.081791][ T5831] Bluetooth: Unexpected continuation frame (len 16) [ 1405.937240][T22946] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1408.861081][ T5831] Bluetooth: hci6: Unable to find connection for big 0x00 [ 1409.008167][T23002] xt_nat: multiple ranges no longer supported [ 1409.055826][T23002] Bluetooth: MGMT ver 1.23 [ 1410.387834][T23030] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5014'. [ 1411.613384][ T6116] [ 1411.615749][ T6116] ============================================ [ 1411.621881][ T6116] WARNING: possible recursive locking detected [ 1411.628016][ T6116] syzkaller #0 Not tainted [ 1411.632439][ T6116] -------------------------------------------- [ 1411.638574][ T6116] kworker/u8:9/6116 is trying to acquire lock: [ 1411.644710][ T6116] ffffe8ffffd56f68 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x7d7/0xda0 [ 1411.653946][ T6116] [ 1411.653946][ T6116] but task is already holding lock: [ 1411.661290][ T6116] ffffe8ffffc5a338 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x6b0/0xda0 [ 1411.670525][ T6116] [ 1411.670525][ T6116] other info that might help us debug this: [ 1411.678572][ T6116] Possible unsafe locking scenario: [ 1411.678572][ T6116] [ 1411.686004][ T6116] CPU0 [ 1411.689272][ T6116] ---- [ 1411.692534][ T6116] lock(&pd_list->lock); [ 1411.696856][ T6116] lock(&pd_list->lock); [ 1411.701178][ T6116] [ 1411.701178][ T6116] *** DEADLOCK *** [ 1411.701178][ T6116] [ 1411.709301][ T6116] May be due to missing lock nesting notation [ 1411.709301][ T6116] [ 1411.717603][ T6116] 3 locks held by kworker/u8:9/6116: [ 1411.722876][ T6116] #0: ffff88814729a948 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1411.734335][ T6116] #1: ffffc9000ad3fd00 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1411.745589][ T6116] #2: ffffe8ffffc5a338 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x6b0/0xda0 [ 1411.755307][ T6116] [ 1411.755307][ T6116] stack backtrace: [ 1411.761187][ T6116] CPU: 1 UID: 0 PID: 6116 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 1411.761221][ T6116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1411.761241][ T6116] Workqueue: pencrypt_parallel padata_parallel_worker [ 1411.761271][ T6116] Call Trace: [ 1411.761282][ T6116] [ 1411.761294][ T6116] dump_stack_lvl+0x116/0x1f0 [ 1411.761331][ T6116] print_deadlock_bug+0x1e9/0x240 [ 1411.761374][ T6116] __lock_acquire+0x1106/0x1c90 [ 1411.761425][ T6116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1411.761463][ T6116] lock_acquire+0x179/0x350 [ 1411.761487][ T6116] ? padata_do_serial+0x7d7/0xda0 [ 1411.761513][ T6116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1411.761545][ T6116] ? mark_held_locks+0x49/0x80 [ 1411.761587][ T6116] ? queue_work_on+0x12a/0x1f0 [ 1411.761620][ T6116] _raw_spin_lock+0x2e/0x40 [ 1411.761652][ T6116] ? padata_do_serial+0x7d7/0xda0 [ 1411.761677][ T6116] padata_do_serial+0x7d7/0xda0 [ 1411.761710][ T6116] pcrypt_aead_enc+0x5b/0x70 [ 1411.761751][ T6116] padata_parallel_worker+0x65/0xb0 [ 1411.761778][ T6116] process_one_work+0x9cf/0x1b70 [ 1411.761813][ T6116] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 1411.761852][ T6116] ? __pfx_process_one_work+0x10/0x10 [ 1411.761882][ T6116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1411.761919][ T6116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1411.761951][ T6116] ? assign_work+0x1a0/0x250 [ 1411.761979][ T6116] worker_thread+0x6c8/0xf10 [ 1411.762017][ T6116] ? __pfx_worker_thread+0x10/0x10 [ 1411.762052][ T6116] kthread+0x3c5/0x780 [ 1411.762078][ T6116] ? __pfx_kthread+0x10/0x10 [ 1411.762105][ T6116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1411.762137][ T6116] ? rcu_is_watching+0x12/0xc0 [ 1411.762173][ T6116] ? __pfx_kthread+0x10/0x10 [ 1411.762199][ T6116] ret_from_fork+0x675/0x7d0 [ 1411.762224][ T6116] ? __pfx_kthread+0x10/0x10 [ 1411.762250][ T6116] ret_from_fork_asm+0x1a/0x30 [ 1411.762298][ T6116]