last executing test programs: 6.536597846s ago: executing program 3 (id=530): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x134}}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 5.888886789s ago: executing program 3 (id=534): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2) r5 = dup(r4) write$char_usb(r5, &(0x7f0000000240)="259772bd9402000000000000008c19f3da78ce7f427cb49491881fac78851681a78c8049cbb19337f4077f7ec86308", 0x2f) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x32, 0x8, &(0x7f0000000180)="e8299c21846ce1e07d462712a10ce502641dfa7605a21d86387ee7fb0d74d98f7515e8b75c4bbac90bd6819a28389ac5b8c6", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x50) socket$kcm(0x29, 0x2, 0x0) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703040000001f00000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 5.668981058s ago: executing program 4 (id=537): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) 5.381036218s ago: executing program 4 (id=540): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x81) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 5.203941985s ago: executing program 4 (id=542): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r3, 0x80080400) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0505405, &(0x7f0000000600)={0x1, 0x0, 0x0, 0x3}) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e15, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) r6 = openat$cgroup_ro(r2, &(0x7f0000000240)='hugetlb.1GB.usage_in_bytes\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000cc5000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000760000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000905000/0x2000)=nil, &(0x7f0000000340)="66478143a496e385866f054e0cfb5bd806000000a038d6f28024d80abdfb1b14fcc295cd892b9271491aa5474cf03f8285149c20f054aaf00da18a0a010845ff00b265bef62fcc2fc257a6c4b91b11555c77638c", 0x54, r4}, 0x64) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYRES8=r6, @ANYRES64=r2, @ANYRES64=r2, @ANYRES16=r1, @ANYRESDEC=r4, @ANYRESOCT=r0, @ANYRES8=0x0], 0x5b) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04000703b16509061f3600ff000005e77791ff0700fea31118b3c3fb69cfd6000800"/43], 0x3c) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x513800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040544cc85665a"], 0x7) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) 4.5545263s ago: executing program 4 (id=543): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0x6db6e559) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) 4.327768118s ago: executing program 0 (id=544): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x134}}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 4.303822119s ago: executing program 3 (id=545): epoll_create1(0x80000) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 3.99415592s ago: executing program 0 (id=547): r0 = socket$inet6(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) listen(r0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0\x00') 3.488863609s ago: executing program 2 (id=549): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=@delchain={0xb4, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_IIF={0x8}]}}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x4c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x38, 0x6, [@m_skbedit={0x34, 0x0, 0x0, 0x0, {{0xc}, {0x4}, {0x5, 0x6, "93"}, {0xc}, {0xc}}}]}]}}]}, 0xb4}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x604}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x1bc}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.46984408s ago: executing program 1 (id=550): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) 3.351455985s ago: executing program 0 (id=551): write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x4e22, @dev}, 0x10) poll(0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r1 = socket(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x12, 0x0, 0x20040003, 0x0, 0x0, 0x9c30}}) 3.245886468s ago: executing program 2 (id=552): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x1, 0x8, 0x8, 0x2008, 0xffffffffffffffff, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1a00000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=0xffffffffffffffff], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0xc, &(0x7f0000000a40)=ANY=[@ANYRESHEX=r4, @ANYRES32=r1, @ANYRES16=0x0, @ANYRESHEX=r3, @ANYRESDEC=r0, @ANYRES16, @ANYRESOCT=r1, @ANYRESHEX=r4, @ANYRESDEC=r3], &(0x7f0000000500)='syzkaller\x00', 0x13, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r5, 0x0, 0x53, 0x92, &(0x7f0000000440)="888c6e59fe492e21545c45ab4c546b49458e0233fb5867f3a3ae86b012b47f2914d815f4dd0bdbf5b41c4d8edb96e1753df731cd5b60fa2ecfc831154057009068cc62b0707a6f8b40a71c021806f57c6a4777", &(0x7f0000000200)=""/146, 0x1f, 0x0, 0xd, 0x70, &(0x7f00000002c0)="0f50ba7d7785106c9f48e1e510", &(0x7f0000000300)="7ddf022cbca39007d419f72b85113c9226b26e7c92e4c99b0ea6bff66edfbe5c1bf756d471f4793b401a93abe8fc8c74f2dc4582161a854f8316ef1953683662025ea5c94f4c4fc989eca47819e1cfc9790d4245fba52930e5290aae3d84a1079b246b16474e14da0526917f1184d5de", 0x3, 0x0, 0xff}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x3, &(0x7f00000004c0)=[{0x15, 0xfc, 0x0, 0x1}, {0x13}, {0x6, 0x0, 0x6}]}) r6 = inotify_init1(0x800) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) ftruncate(r6, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x6, 0xd, 0x0, 0x7fff0010}]}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x4, 0xd6, 0x5}, {0x4, 0x2, 0x0, 0x8}, {0x1, 0x1, 0x6, 0x2}, {0x1, 0x2f, 0x1f}, {0x4, 0x0, 0x3, 0xb}, {0x84, 0x6, 0x9, 0x3ff}, {0x6, 0x0, 0x2b, 0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000000100)={r8, 0x2, 0x1}) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') r11 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) fcntl$setstatus(r11, 0x4, 0x2000) read$nci(r10, &(0x7f0000000140)=""/127, 0x7f) read$nci(r9, &(0x7f0000001480)=""/4132, 0x1024) preadv(r9, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/44, 0x2c}], 0x1, 0x36, 0x0) socket(0x15, 0x80000, 0x0) epoll_create1(0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000080), 0xc) read(0xffffffffffffffff, &(0x7f0000000180)=""/40, 0x28) 2.884630372s ago: executing program 0 (id=553): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r3, 0x80080400) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0505405, &(0x7f0000000600)={0x1, 0x0, 0x0, 0x3}) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e15, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) r6 = openat$cgroup_ro(r2, &(0x7f0000000240)='hugetlb.1GB.usage_in_bytes\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000cc5000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000760000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000905000/0x2000)=nil, &(0x7f0000000340)="66478143a496e385866f054e0cfb5bd806000000a038d6f28024d80abdfb1b14fcc295cd892b9271491aa5474cf03f8285149c20f054aaf00da18a0a010845ff00b265bef62fcc2fc257a6c4b91b11555c77638c", 0x54, r4}, 0x64) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYRES8=r6, @ANYRES64=r2, @ANYRES64=r2, @ANYRES16=r1, @ANYRESDEC=r4, @ANYRESOCT=r0, @ANYRES8=0x0], 0x5b) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04000703b16509061f3600ff000005e77791ff0700fea31118b3c3fb69cfd6000800"/43], 0x3c) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x513800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040544cc85665a"], 0x7) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) 2.682518629s ago: executing program 1 (id=554): ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x5437, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2092) syz_fuse_handle_req(r0, &(0x7f0000002580)="5536182daefa2fc6ee10a1b2d4e27cff3c3e628d4656f7b27979e371b15b420c01ae674ddb8fff7b2bc41e7c5927065cd32f2ff7908ef7dd74cdc82f3799ab12edbbfd0b8f6d2194d7f72aec3a136e25c7bf733436bf6cbfc94431ad053a2ec4ccac5aaada8a41ac38c0e1849e599dce84e431ac501db105b4484146b338c0ae9124877ccb8273c7fbb32603251e2d66c71398a7a715bcbe5c9d87e41af55f837e2931c4c1b6b7bbc30dfedfe6e61a39e28f66bbe56496745fbe03f6035183257edac4b0fe3087e7f3e79c2152a07341f3ae9ec68e78875b6e12b5a2a1abbcca4d7963be818a7a31290cad5a025ccd05b609c7ac49ea85d49f354c1e76091a917966665e77471005a46a195b290c01bb7ddf4709e94543471d87a0a5047d3631b00862e1e9a00c60b83371cc16ba087463122a892a1b21786fe3d450c7ba97799d88126f09a698a421242e9c67c981ebc576f57ba3df22e0071db74fa22e97b0fbe589894931a4c4e0eda8bb9533c4ce503fba218d0ae43ab4b4d0c705e04442d093ca5299ae8499c6db904bda6c68105bc2a1cd8e16067215476e573745d1e99daa73400567a9978dd7bffb21429479ace30c95afdfaebd7faf74343cd58e14ce6d2fada5a1c665049eeaa717ee681666c8b63c6d54e66df86144f85d80dcaa3ae7a13b58d5f2b607029efbbf8593afc75e0ce0a875a5fbedecb425a22624a0bb8e2fd06212a1fdafb92430d309f8f68504484fb1246f3d7b0893d3dc9d0b6c8d7476b6aea871eb4f32c283e22435fccb221484409cc28a6609dd869b99547fc81b2e517809a5b77783f9fc11b5fe584b9f64c0fec35d3db21ae30d0b8b88d722dea4a376d2a610f0a9d08b311e2ed3ef5d72d0e040e41d3dc45e5a17d740c67db88d95b18c8610fed3302aef0c3c1871ff8a5ae1908bf9668f0bc8e5867f56cc59cd303bafabde6a4034a96ba66b98a910dfaaff712673dcbf84c5354f066126068de620f08be67e6034138dd9a312f9ff197fca56a77bad46e59edfd79dfa3aee4582bfe01ce2201f6569178be7a4bdd28e495114944e538ee7b8f11e0812d9f822cd9760316809eccb9b0bbc5f0630224a1534f88600bbb2af2882562e76d149b44780380b62241829e5734fdfff1a2b3a052f3504dffe04d4632e9fef82762fe1950fbaceeb961464dfe2699f0a898fc8783cfdde45ecc3a16f052c4777beb1fddb080fc802a8cc760d1a0d4606b669e78ee9ba1ac398914ed5096850dedc513e5c71eca19d51af9075151f4ca3d8a841b7b1d205f5f3d223f7e48685daa0836f93017935ad1d942c7392667145ccc1d4700f5d8fb2fc218fd6d70357667d339a28dba3360761857b19f9f91e56a0e0281af1042a409a4e2839f3d21b73a5c352b22e4ff06e563e92c00b48e7f8bcdbbbd398c65331298f779dafe875854e301394b0faac2126138908fa8598b4f5e58ed1ac451eb0187e20077099d12d745fcff0b7fb5e8b9fa65ac617ea6c953e8786229b67a604c46810876650f919e6bc6792db22ec0be29cff94e9c24eb6e1830f890bb4b6bcd74b39060506095b99b95f2a8addfb8dfe11f47479fd23cc7c0701ae00774c430b3b9f52ab2579d47a2c2095365aa569f55a1431f93e651c01f0d67ff9337708a72e352c0e699f14bf07f9b9c056897c78edcf34ade3dfd17a04446d565fb6e7c701a237fe1a3d932371654a43b56e7f5ccdadc0f506d746c3f0047b69c0c174cbbfe092f139c09c0e2e76d9a777142813cb78174630ea8d73301e3343b94856fe610777468a9fb4518a0cf68243a4bd715e38e3431a811f962edb1306d76d89e0aad9be5800e7bebb82ccaec2382c9c114c91aee013acca2d8ddf99465e760bd185453a9eb4e5a78383094603b749c6242ad227124ef4b7ec7506b8a76f714099c954f0b2f2d427af0451a7ea3d1dbfa8a3e644c3640d397de3ce942311deb73fad3a76cba773f416314e81e70bda715b342113a18a249300b43250cb3b3aa46ecabe42d0e8c1dc4be286e539c71f0d1c0b0e1795ae7428a3887f36b79e9c76401a5dd460f45b9d8277e04c7c1e615fb33d0fbc444421f3fd0bff4e045d790610aaa2b62945e4b398024c75680b5e12235c35f5b23ddd99454fe527acad6d08fb37c35d9ecc0a8b10e2c31fac786666eb2ad499ddb7d06c7526fb1c5412f6a0df003410e69b81fe523057b6b73cdecf0e5bc4d3b87757889fe49dbdb3ec79c7eb3a868480fc87528e80400de837cccd4a6345508386ada1833f57a20c56e973569bc7821088d343e80009b7b35390975323d24e764aa6c90d3dd5fdec08ed363dc9ab57de949282994cd3858f829c7e5e9a745261383db27c9c53e9e98e109fda6cbb88649ba40b5067470d73b7471d406e5ea8041f9fa25f5b6c919aef84f7595511141e9f090ee103b20a13b22c9a88348ed6d284c0d7a58326e0c4c9626d9a5390bae2be199b201ea136a9aac76e6125db9bf58f61e6a46f8145a9df1305415989435f51529da03f09a67e3629e6f6cb6b70407d9d848f554f1a7e63602e678e62d3b41b4bf4ddda713ed2c291536d8cc12a16bde144ef56acc17778b1aa8eeeeeb60c781365b615be4435c7158d926351cdb46b89fa82acb384c7318dcb2e51db8bdb223aff2c8f36d9e6b1135ad18f7e0b9d91a76972c3140f8e21dc71422de12a4f5d08624bdaeb983619a5ff82cf788c6b8a5fbf0f78e61ae4058d6e03a3d5130646dfc13686e356a1325434caac94ced659529181561fee7ce4f7e1e7945f119ad8474ea6b00257ceb7af2d9b3f9ad5782cd986f1b097d61bf26a6c48c3ab597e4678d609f3050eec9f3bbea1bc67314407521950526e6d71e34e35392067ac84b66badc82a54bb0dc8ed2f1050711ef2d47af5252075c0441aad6900539fcc649c1b1ffc70a1cc39e0c2136c764ba718d50f4800dc29769c4bc9a2fd0f43eb6ffb717a473ccb14ccd58bd506c4e4a0f4ea1158b59b3d6bf1a2d010c456c1f099bff69add46cc60fd2d9779f603ebb943ab8eb02627ac8aebdd52f25b069f64a61e90fa9ac979cb4c6cf0ebcd070099a1a6e6a747e8989e84afe090390953f988f2dcee405086ce51b1d2d8d249f45899b4e862008d28efad8aa5abd0912fa456aa9d3a918a0dd3420d7c4b04b9e3d65c41a1548b7caeef5fbcededf64697786a0bae73d2c5352658b871c806bd150c91bbf8f4735dddee9cfd3e152b5d44cbcce912a2809760e225b9018fa498c86ccb2359cb0834bcefab92c0468522648fbefbe25cf8d82b897371b5369e8f2972502574c0a3235066969c4d5d67fc312d6631702f66a113d22063ba2ac7d9ab387ad1e115e9c98275f3e0dacd2e8f0843f24687b297bf42bca11b89c6db2fc7026d364486ef2d614bc45d5cff0758d69fd48ea06b8a97667e4d7d30bf7f1c30b62287637f50468bf144fd177fdabcbd0d12b50c9cbd052dcd66993c72f48bd6086412ed5f9af3d44dffdf7c012aadd5cf7bd3b314f236660fa1c0e4773a4e9ccc36fd130ffda59a9bf41f7fbf79e5e3333365a3ed2e7714e50805bc70bc6fd20203cacbbeecb8e01a2ce626756cdbd01c53717c2e7b56b47e21f13209c2bf2b1b251e7a93f8a085dcc61d9ae82303a962441372ff7c0b8b8ba75bbf5b861ff7ddbc9781d40c90ae467bdeddfdf949e9a8b8c9fb7db3a9323d05d15bef19ce2e7634b84ac082d50e84b66f99f34b2f852fefe67faa403e848f3de110eb1d9faefa176c3cacd20c7f87d74e858a1a7bfc2c9e895541f691f99a2b8771c8755300ee74e3d6a048b30d02ca16202ecfc207a0b29302aabc1c5b57c7d0d31d43be5cb1f7230dc238fb701e7037aa00c9b57c6fc85baccaa56754d27b975872051566187b0983d93b9ec052edf3b33f7ddab343eac6f7aed97771e708e40a4cc6797f85d91a0debd5c6169895e895f67a10685af5e0b80b0e728731cbffbff8be603469d03bd47dbca4456108c79c029af16482c5c2590c1e0673c7e943699ea107d906a3e667fe7b2afaeb489548b6a11d9862e86a0b549a42b607ffeda6e3ba0f567b63b0be6edb9098cf3a44e6864c5e99fa5f475acb57e2b7343eb7fe3e8c139b515348b188defd2d3021fd27950d822f6df5f9c93584fd95f3f88c85231943ed4d511249f96447f7903779e4d8c4a680661fe5133d415b862e668441e8077bfb827293a9eb733e914f37a19e01ad4b014ef87ed5a5817ab8123af9fd863090b8e9a50ce29cf706b2182fd79660cbdbb53ba71b750e71a21d0ed01db3335cad91d5cb4d4648f46468b6e51f63e4088386913ae6b6cbf103947c32d25a8a825118cd6ce23f53ffe3c087114700e9a5932faf3d844fc6b323b3e722ed3ed75037bd9a7fd9d256b2b9a168e66802e284853a0d6b47d39675900f02f005050425731f9c2cb329f70d7a5ce2ee256212bf8b2ba9ece0df39c58f0fbac06c4da946787abf19dadb536bddbf7e51d89f22413575e064c6482d936a89d48be159aeb5055feb0577ced6c5334411d1d58a7e6d02eca6164d90fda39685fd619269fea7f21db51f6aa6961250e03c9e00788c178dabeb68f13dea29f8cdcf30478dbca15c4519bb342ba8b201019061bf8317022dbc5673fb4ed92ef1a1dea0a1a00cb3cbca291f7ebcbec27ea5e824f04b82f5644d4368cdf8026550bc2f86b83da6a265357eb548a9eec6622204b3dcd22440fec0e12819ade4ba53b53b1e6ab906fe0cacabb9c15e8b657475a0dad62dbcb1037aa8617787abce24a0aa4cf1b5c85c030a14277832a95d8b29a4ea86fb80148ece147ce4bf386995ac28e1ad1e2072f3f4fce5c05d9bdd0af118815d6ee89aabfa3f8173e6fa59dfa4a8c1ba7641291b3c18c6ccc4c3588d56d169d397facb4e67485610cc68197b3a43fe78b9458dc47e5057d5bc6b8e3b65bf414818b65d41ed7cfd7a35fe79c9851ef39c3e059fb3dffe331a791ce75728efcd58dd9b3ed1c93b128469afa648f4f91de6e39d5bef7a0e69bdf5b2202682d857847a64b33432ea0f33bbfd1948ad0b6c66d853fef1e6c0d712b86c40f79ff4d125baebf2a4b32dfc8bed2a697f745cfeb16303b4f8e866ee0bb6a5eb6c6ce513b5cb84e2b44854c72ed0cf2e838245be8d098a6943d845f5a8c07c1036da86cab0d5be4ce29545fade4323acf2085b7645107dd12d5b3af7bb37be1b291cbd6fe297c4b4a2a23280358711be91f21305c035bf1f57467a1853c999b3fb478b11c49cfac66429a76099633a54689047d66fd8bd6eebea94fc8007d9e2765e2969608a78d0b96d6b30360e81fb9df5262c8ff15f2fd7000756d8cda1db3847d6f793bf803b159344c57b480c87702cb3d1260692a19ebdceb2e05a2fe2eb5ac5cfa76551a04795915bfaba9849a623e46ac1832157d0ea5255b5cacd4efa844b0ce5f2f0e1a9dc4fb115fce2640ec6d03c5fe15b4837bd6e6127349f2b6b0fd61c82c96531714f5b623ce4e4978c4a0c86b3c17f50acdd67d283ec934ed36ba7360a10ffeeb7864113eeaa25cccc66613e0757782381614b8da3cd0a85cef7bc384969517c920e8454a5a0f112d1653b2828e895d0614e5bf4dec0ec863432cce9337ce7c29affa7f29fff97bd54a6947cc68df8fed17850209242c1c67d0d7aced2efec4b3c006678bcb8716e8e9e40d78781fd6cc5b5522b8ed2ec8cecb677849b778c0a2a17817a3dd2278080e109906dd4e99b772d5911893fa09ade4296876921d1e009e714df7e4973ab1d2e593d88ecf2151e97ec66176549d3af66652c8377e162454ce7cc8ab34397d31978e84aea92a3c0a8106a2a31e33a8dfe942819fa1f2c1272d0f3cbd7dae820642cbc00202455ab7fb81857ef050a1965a291001874b38397ed9a8e8106dcfcdfd80d0f5d0ef0d5775e53cc5aeb1d6bc13886f8f3491cd6af5dd77ace3689fa2bf56e9b4d1e4964f8fd8f0a4a8b5d7fb678f0f3adcb4a19b5168ac5aeee6f087af15af3bde52a9be0f550b21b10ce98da70445284d9db9416732e63b6efb3ced984c0df50c11aa677f822af7ad39b8b4c0d236e4b36a00ff73587b39f917d7effbb37b95a96e350a430d544d68623c80bf2cd2d689b4dc41e8ef374c393092a2619055f268fbdcb9de494e6582be90a4798bac801bcac8389c823759860e7c9d692f41ee2a6b9624da3c09a2c8e7cdeaa100ba8ca25a737046d8bb237b9546641cfbb2eac9bbee9e125b14dfabac642e634d32151c06ceb3ddbb3d3f038ab2efdd063152270449ed5eca2655cd0016147ebbd00003eb8cd25297350afbffae43cfd9867543b81da4510850b1afaa199d0477837017e9098bf5b3973efe218a88b3d2bb172fe77278088997758fdc1dbb0b1fb6af2ab9db1ddf3e3fbd8e8dd35f918779ccba75b3cdfa317fc6e3cbeaa8b11ce2a30cc53292bcb9dc2a18ca400c674360c041c97ee6aec1448a025c6b04ae9efb3a01d31e3f897cfd5dc94dac95c88b95a26676cc6153e203535891116a5f4ebf54c71cbbe3215a04c57c7ba874a1e203bc66d8161d5b556f661244d9d405a2e6baaedd0d0e4c7e093c2ac0e5ee83b7ddf91669dd59016f7cb53d19896fcc838dc008da4a5fdc0a4fac1a6d7f49b24bcc01467df04d8a3f3181cc4e811942a53daf784b59186a17756a8f3a41ad93035a893a4ff60dd8f54a533e94cf87864169287804df3aa38dc5ce6021a06c58d48985c562a0f51d8b32879f9fb7d4a1d3d442626810f151b161b7e35f9a0b3bec05979e381140f31c03ee6f5549e6e7f116be5e87e0a9ab71ee632f837e9a0f9ad1b4979304c26bad6e84eff0b5b79b667e3d74e354d04f5b2c237102e41a1a4dcac99cbb911d9484aebe6ab2cb539a1db3e3302fb833a44a2d725e858ea9a65d43bb7661842b655c51a1ff25207956e8c6c71667c79975d69f688dfa34c59771488028e3d7500ba0cb71ae5751a51b568e67bdf2abb63838aba5e5cfbbeaf02285f6cbe58428a92a6fc25abb01f8d55ecbd7cc0ea69cdfb188b79048dbea488493681b0e70234463ca3e425d24e2ae4d800ce3adb04ce69428b5f884f8dc83392c22e456a2e195b86d717ac45003a99ae9a59c94167eb04aba3612528f94dad3360b46bc456fbb78072eb7f96418c71bec09831b0a63e83816ffde0d9909c06e765a666c2c41b20c339e0d39107311830ae9ad912f0a85f2ec5ca66a79798a568dae14f76b6d59e6c0bc0f9ebdff29c0fce58367c9705bd4323d3c3e125cdb13da6e58f3fdb2751401014e393e3fc688f04080a90430e531767a7c4f3187ccb7b90880955e766aba6091c4e8fed36482bb5a63372350dd08fe84bf5afd1a30a0f8f4de7a640fa84b9c0447073a0b39bf875d0377c8a572adefec3e033fb3dad91b22bfe22c01f23f27ab0c6a1ce19d2f4f4235281cbca15dafe50f383ba89a8c46a666b106c1ac534955df71f4c560010934fd3eb68eebd55487defa1e024f75ac30139cd190bde1dc8684936bc23a1882ae469fc4af8730d29658f996f71c219526497918e359228b55849d952f4b2996fe5f45a6cfdf87da93bfada579479b18d05c4e964c85b88a7bfc6e4f2b5d6e98e00635e8bd2ebb9eb40b99a9e9db2f688b2d94b8cc8c5fb2a1928624fa5df1c228e6499d992453772084bcd33dda984d97e3857b6fee43c6666b3206ccfe3af52debe5659dc186edd194b90309213f5c4805f454c7e57bc759377aae9727e484391486be0849c5cdfa99c5a0d0687d6afdce97a32e01d45fef015e7c869ca190219a778b91d881a7b595313fb462e5bf78260c78285d6ccf5e4c50ed56ff28e3f49912773f0a58093f259b5cf4e7f607c51a81576fa95b97bf32d0e2e3511b5d784eba29a15246a97ccf608db456cd70adacc6c31913416f24f38dec3544ac2e88c409b5ff7771d873ea8d7a1868775c8b5502273c784cf945680fb14f143140b56462cd46874ffeacde7bf329fe8369df9c4b95a42535ea56ad6fa260f5c738eb9627f890f4a34f80bf3b8fe568d44c3895029b5f9557f17469a53fe4c0d581eb29029ff162ca906cd0e4bb81138be91a254752bf849232ed7042a82cda1e14dfbfdf74a09c17a9039749c789ab0242ed2d0249231c4ad70c23c805676968bdeb96c2d8886f784ecc3e42e6493e45aa20b6e8ede65c49136c9e9414a4371e3012bf596d55315be17ea9396b1df7f82db27f0d121f8aa66c40365fa686a46f430b4cd336da0d9937d5c26284bdcc6c4e0d5a6acc1be089e1a5d6ec422ad3961fb5c5c9836466c3366e6d3f2686b19b529549cacb6252b0d7a7f5df42ea2961ac59ba0b911311ccc4d83f8611f0c4b071544236037b2863d673303a4e3d428131b07f60eb2cd507dc43503456ce829aed8254bf0b51b38008d42e445acb0effc2ab7e4bc26ad76ffba1220f2e878fe9b5de39bf4f25a9ed468cdb100008ffac6bef401df4817b23463e771a3c834c32993274689c01004eb94b89bc44257b7d2b3936caab6d86937b5bb8f705d00fb6f091711222b6dc25eeaa0e350fe484337396162c86bf7d3a1ab82591ad35d393664617041142c0f8b528e947c092f28c3142493d056bd548910615e7300f041f5d01a2f00138ae5d7849244ef9215f5c9dd874e60ca4ad883f86e71690a510831e35c24de1e0d1261172bf4a8625af958febb7b109c5ca5bfffd4342c43ad02136c6eb117b4a6ea98c07a91279731c1228b01e6be755c1c1d095d3cdfe950ac32eee77327a0e7e342ccfc13c69ab6ab113b18c1abe72d39c03e351986cb3326b8b17ada5884aa7d0a553b0d35e32b8c09f1a4106f5d675a88a1508de4a0e9c598c082ae5b229b75579e39e297b225a852e3f6a7d0990a45fdf68771991acf9b7a5c04bc21a40c57817d500e8ebc6b5919219a4110395817c92bf9eb9c623606d4d98ed68dc0b51a0278b0addce8753f86316158bb4bd6a7a0c4c72b0d17b9545695e54826021a6ac44b4de1b4ea977b20af3c47b8860b0ed29a68c1a883777097d54b162cc58edc0f4de1afbbad7c340a5cd9f2f93133cb2a4babc2a688e2ddd580ef8d9d0846c269c265ce9d978aa233c73aa11eb78d3a67f4e7a3dd035ef5a1f832ada87c7dfa377b77215f8c23b1a78e4a7faa6d0c1a4a28a0ef7b32b36bd566d8c478d0133ab43f9c2a4829624eec535234eb89a177ca8d4e9d2d422f33a24d15044822e4a4c1bca5f470b8c8fde09fb69160297218398da27f4e80dbd480782ee75cecd20ad23fdbcc1d4a0acbc63241c1e2cf1a0b12949e42f707ba06b6fdbd8f336bd72d7f96ddf9ec2b5cfcc4c8da6e1ea573e97eeaea537511ac9fd2ae78eb18cb50c13b595f8b6d65ce8c08e9028fffff6b512080dbbd3fb5e5068538c05f73254969f9727db9bff0c6aeaaf83713812499308792a7fc8318e6b2996bcd1b072641be1eb8e028cbd6b0a5f1fa13bfe35b5cd0d2ca21d9cf8ed97f724ef73ab5a99d65befa38d636f2f827d229479377f25501f3a6ece12cb095549503b2299db7806d32751d4851d62b0c6a91e2e961d475d33a8874c96df52c75bb5a0569e892743937451f75345e0351bfa334d37aa43f01ad1ff984dec164faebc713de31470db5e536a0681a042ced0f9839d9ce89259349075961985171c27c410c99458d4c25614ea1d4252293c4f85b0d2ded9ac560cfd024c199d5f0f4bd47763690ba1bca88b8cc81059bb9fe82c955488523114db8c2caf8a63c0049e90ca524330b57edcf718f6a7aab0efe282079d198cc3c1294f35d1a1bf5f69a8838cfc5d4363f9ca9383f83e4f9576de3fac48866ddcde282e5e4ee3f852a063bd6423ac1fdc6201b1facd6c36609fa2faf96afc1c0b76fff27bce059ad6390fd1e3f735806ce654ed555a78ea8e59fb16ff5ac5ad183aab9de37c3d033b3018d591e7ff1a896de969f561260f797603df5fc232076ccdc2e1fe9fc789253a54af151dd50f89e777c2541591101720c893647bd4b3e6257de85251c9bcd700154e85db2a9e2c4d9d2e531a18bfaa05d16ce75f823e60416b3afebce16555536120d5f554fd13e861d74c4947a62d2d09473d8d75f03d354572b371b02e16f3976b1b0b235582ee38d938fe843b107c77c2acd88f34e1669816eb3867134b1c5fce5afad3c70f9bca972ed494577f2ba6362a6ee6b4720bd86938bb49490982a1b5ce6dd54b79f093ce27051530e1233f03d6641392d4fe7a1f7dcec8ba86d8f32f00f0ad50a29b1e17de07bd0205c0d893532c198f23656f7f5d1d9c0745b7e0b7e8afdd29c8fa1639a06039980d9a5fba11801db4e7868a9b77925a03a770aae3430b1ccbddb8bd766f51fef71ba25cf9184c9cfa6f9921d69066d09a656080f3c5fe475ccab94cdfccd76f3c7dada9236d1be861eb5fe6247ae9f97b7705bb71c375e8b98203c5bd224202c1aa714da47e0daf98fd3eca617f9a255df5dbe98a7520a1e6db9b88af893521f2ecf7fd2b08a7f3c5aeb77ebe6f52739b473840889c41315407477b82242d9a805f9aa200a129c4701d1c88ccd34871f356caf02da9937a88612a9755315914f4e8e1bf471a46c00650457cc06db168e5457fb3f9662994d901a1f58306156979aa795afacc1a7d6111cbea53e97fb71c7bbe44558fb06f8d78ee08e3678b5d218e13f79cf06f1da9f7e128647884589c487147b3edbdaffa16f9388568d3c8caa34a6b944e4f171842cdbb293474fcd5201b7440e05ddcf9e0b476773119516ef45077705e8bab5f877657205bf9eaaa7c86734b1b6c3661dfd4b9eb8590f962e17ad51b44058d558744e5b44cf9db280bff1062b2431d298064f11e7700ba4c8ece6f4df659d4880c4983db0152f1f903023672f6234620134bd5d1d888022da128a527d82e8fa1a562827a4f1592efe3b0bb78060626e8688ef3d5162afe9f1060123dbb1f93b7bdb6ad4ad6e1772bf8705cca424d9c42e4992eb5bef1ec7961bd4260d1e55e863fa9c8e0cb6d28b495fa37b5f59fd18cfcec6319288dd7363821e47ec46664e1994157319eb0d466b42fd9b5fac5ba979a9baf4f699dc539bf77852e18014074f88108b654219e4f9396696c94eb9fb9b360e59920f187029608bed76d09dd006f4033d384cd109726d51850202ba564599dbff7808591f834cc4084db29111de86a70217defa490e39c6e281650d15b1e44bb55164be0f6da58e838bf5f4d7cc2a23b818557ab1fad0fb2253c4da6af41591940b2608f6fa6bc25939ede95317ff96050bbc1f389235caa78adc0d801a56b2fb4cc41e73d5131552985b5af241722e0637f3b88e46b09ea875e5cf66f534666368ff8e46413e5ab557236134afa63478e18328d33b1a235deb2034955cdbb2bfd0e55fd885f380ae8efca1feea985a946519a712df1384f9e024efec61c30a6989aa3b5bd486366f3fccadc0add175c1cf0d2730ab97370eb47bcda4226ee140edbcd9b38b8ee913587125cb185adb4df18e80df2b0ea6e3e87dc8755fe6823ab5ee1feaebb1e6208cf3dd5ad5581f2388be92", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004e40)={0x50, 0x0, r1, {0x7, 0x9}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006ec0)="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", 0x2000, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004740)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004ec0)="608e00030b89436920150ad4a04be1edd90341f9c4a3ceb953b93e808063a5b976dd3f87a068d7f5471f70f2093dab6a6f94534e9ee5f426b0f2aaa4ab4023a4d91ec668a65ae19c0293de686ce4334ef28d7f83dd46c8eb5bf6a1000f5c44696e6fd24b3cfaaf7ae18acd9289a1600ebabe555871ea16d002c9de30b595c7ca6459d08e33763b135f9d7a18e9736e3ca9e87a6c9a77a4c1a1339fdb123dc039be56b63e867d9cb55b3c606984699e7108c00c58abdb78d669a981c1746f16e4a5846bdb6d40222102338ce53ac852750d4accb48e69ca379c3020863cc83198cc21d819e25d375b1a262599551d60b28d6368ef11f3eb21b5fbb1f204c1075c7a4102c25ae8ffe6a04f4c1f599cd4afebbd086e46e097eef9580837a454030abacdf49c8bfc5054a0bd9f18294afc8a59e7f901d0632b38f5b2a306dcabb5c62449aa0412b815d92c2c9b12a38fd4cc1bdfffb574f59c6512fbb3383aaaf62c84a290fab7e775da84837ec30cd39dbc0060cb2589db82597ac12acd2b9c293313f377c57d1728670a88f3b268b05f0ec987713f0ad3fb6224900d1d4b0878fd155113fa5e34d75a5f4bb21f3088e0169a70dca03881fa55e1858bf87110e124b54f06d53368736fbae12af859f5bdf65c0724563b7c98860bf1d2a864bbbf704fe319f7c362744ed93e451aaaa65dbf6f6ff913a850a24266b5ac4535ae43ed5dccb9d5fd5c53d4f3e01e00185b38ad662918c8d542403ecb4ced8d69bc384780cb16c6cafe57a2ccb7a5af9e2cb9b8f7bf39d25f6e44db2f50afa0df528c8b8d75fb5650a9c03264e22495183e412ebe3001a6a270f4bff3196e3d15ebc9345a1ce20a3eb85ebd7a1cd054841c97d030c69c559e86a1c994c203fe26b28c13993fe86c8e60d0c979ebb3330bd70799c8674115aa723ed85ab42c9ef28c54392c90f01899ec70fef503f97a017e576b8b94d5f04027203250004cc17c74f14e866dbc199ae7fcdbdfae171499d11e9ce20ba878c0493976389811e08d20bf22502c9557cd7790f724850abc1cd2f86958c950b46f68241682791957586adf1b1625ad80914506fe7fc71f31afd4204bad6a2564b17633bc7e75a293702f40dd32d1058609f863427258312856bc3146914c7fa42f9535f4d2ec3ee177cfc585d9cfd91c3096c95e0155e904be400419eef5650d493cca752e15d42956209bbc70c0f35c8ea157940f4039c7d9e99ab5f2628a29ebd6a65716825374a88726529d25622751eedb418633db2d49233ce6fa9240b8cfb999c57c1df190dec19d2be2726b54cec04c6a05f5c7cf2ec65870192c45640d355183faa93b3325f8abdc0e1c8f8cd7b502a4b5cfc458941930f2af529245f41d41769d0a7c43b0c30432905ad0268fe8b143fe2b4b7a90ed2f89a9c16ca02bc9d9b58832a355c595d00dba6cc3afe846c2836234984adf3881798cf3c5e6028b9ae7830abf904290f8d59bb43f58cd24e5ed9ea96dfb882e269de557284102a17f6f34440095e3162c812aab444307a4e30e321707e887d58f34f5d3e2816dd2d93014ae9a1fb2012d62e6a7cb63699d11bd564d16ed848ece01e68889c99ecfe022e0fccda28412311b81082854274278730fbb31f2a1623f1d12d7f7c29695c90a9235d4ba80d5aeca5cf6e990618fecfea8a0b20acf20ef5b5ce3180dc4c3803f837432dcbbf8fbb38cfb36841c6bf3cba0cafdc04fbdc8dba2aa712d13787e9666b9cdea0b212dca3197be20a6c5e7bb62513d871ab75ccc99d2707b98cdc10bf82bca3e06e5265b199ad9068c9bc8cfb881aca5d31d005ca28f5d03d609781384aef514bed18607e7480c60cefe677a969b1e5862602ddbe0432cffa2069a1d86af89fb1b485076ca7aaff6b99399a3f53e011d68dc7f854a7b5fb3ab2bba65874c6e605266f0a55aa35374c773d059f834df49f4d24cdbcc0c0c7cd99c598f32f8e0861cc46c00d2ec0e92c20211527a1225235eb558c26701ad58e95d364a604d9ca9c166e719ecebf3285960f4cb607c3992fa84ef9cbfc20333cd2c051b137cca082b6add5f1c4f40a6af1b588f7fbd3b0cc655adee151625225bc3c3094df43fa6477510660104d1c31beeba05ca42e7160e4708275d724f8dda3f8b63d853e21c48b7e23e3e05263e3ce438c701bffbf8055e553f875ffee73cde1fc278f4b5d29d7ef90e78311c34b9d8ad2ee248068a2eefc336597a8d017e1075058412decf1c6693bd35b169bce8534a9848d22919e94bd2fa38361bdabf934822d59893c7b238ea39f10e2a48f96eaf1c9920964e98d3e07d981f895500615a5463b7c522daeda7e8900c65daa0bf8af738a0f369b442615157fb2e1134417146977ba809398b37836dac45b5fccd6b68626735237f519bddeccf6d60fa32900979fa9ceb9328e6d6448b266dd0deea5b68296a4e97f96bc3e8a519de758f3e398c4d60c01ef7702ff73e6b4d64d436d3c47fe6e0088693223df9c76759e5f94d3a9efc67ecbc11641e4603b11dc73d33048b5eb13c38123f225712eb02bc24bc3b349cb6f00111e23bbee41b532fa9bf8d75b4048f665a9cb9ea5f2fad386f14e8af3311ab5bb9f4cd179b33c765cbd757c29af98678332c8fa52c028aaa5f42c4131030fe10a7ec94123ca876876200a4823d67e4b2948cc94e120151728133ca8f35551f1fdac8c5a580585367dcf1ef8210278207c9882bbd0c08e13bdc11a7c29b0fb105b92bcc06f1e7a4cde56685999810e5b91082fecd60f0e0b732f3b4d1c8878a70f6f5803f4334d3cb8c893e594490bee004b3e2500700092a6d1d5348b0871304f93db0f737dbe187e2b94cb171be7677bad830a49655aa9b1f96206029a847f09f7f0d312120c84db059c97430f7ebdb58d127217ad0dd22e351b0ce938a1b19982f8f62fec2075b4ca4797740630c9eef27f961e040de1638f7b3cd1cfb7a9fcc5ba18aad7b1d683d3a56cfc64159b38316661da4757352c8a42b3adee3b069b77231b5e468e7c2726002bf0b158f54502e4b93f97886954adbf55954dae6dec10dbee583ccdaffa1637cd1196345e255334253a7fe68c96d6003ce512c8e16c5fe3a9579f55c2bd325e3d1db855a83fff162e8e1b07aedf0bbff19604b49cff201902915595f8fd3cc144b1f605b6bed8f150a9443952e1fef40047b1f7e66c995bf482aa8bf9422a6bd47b165ca75555139de096c1c52ce7a34f4baaa4aadfb288575599222160481fe5684a8f9e2cd8c4f7a911b5358572a546560c420d2b29d5c4d8e4aaec77d4b7a1a1c2b8386dd81d4a84174524594d8f1d9375f5b7ccde66564ae451415e9fc779aad24820dc20a5468f2066117b578d85336b3fd6b18a15d69cec23db185cc2f8aeb1a1bc3a8dac944a0e7250b7eae949e75fc17a0368ced30ae4ca73055d751a95ee440417a7af71e15310549148913afe3c5bffed7234bdd876e6334a0c5229ec7d7a5c14254a46697049fbb6d9838f401da95016f93039f905738dded943d3c8044fdde5cbc50a32a67cce0c39e5b49a03e803533b3359563e8ab72200f72512cfe2747eef452cb500be39ba6ca685956636a83a122572ac6ae3902b95313cd04a0635a2ff9f6e5663a495509b852c7dd0f18f0d74ecb93ae65e7dfe2958398f61ea5258694ed644d98751ce5d1942aa2302f7cc48e780c8322fb34fee18a6298add61555fe8bfcb958e034ac0a5da142f414228dcf3b7688ba5411707fec094b228e563d40c2d739ace42002369ac3140734b4f2373cc807a84271b0f726d401829b06c82fedce708d63e02808a46da5d9840d9d1b05a499329943836b58daf03d7942153d40f053fac12cd9cbff008178415d34740a89cf7fc6121b6f57440a902fe530bb26fc1717ed82b8e2ed92176723bfeb1ba1d37004666d443f7075ade520d6697606dd94cbb119d223ddc37eba14ec462989ccc0ac37b7c0899b44deb1e76974040b38da409b2abdb86c74184d6f565cc0230b3ec5ca1d211d047227387b067fec595fd7449406cf229afeb874846eba45dd180c0c2d97c3a218468f6ca585cefd6c8278a075c9af33d5450de25ad23eda74e58fdc6ee4b6ab60e24a3bd7e2aedd4acd92db13ab3bc4e44cce6bf540f3998d5122e874626c7d51b7ee978d1235c7e07e3c59edd74aa1d05d345dfe69ed2e949b1385a24cdda0a2529128e74617f284f8abfa4a4fbb5cbf8f8deea891e373a70eb290ab47f80856eb1b9c3bea37feb9ab70f58a45c1b00ecd40213166711eecd549bf48425a098c4c7758a89d3ae239b604754e7bf757ee533a6de4f7f9b4538d4cf80051dff5c1a59b237c5641eb8f21d06067a44ff97e9d1f73b257fd78a39c90131d89befbf5edb9162bcc12ac634d730ba68ebc7c67a4b0a86eafb9b582bc4783b6b4154173c6fce0bc73630d112d24efa8d3612bfc6fa9faf047a825273330b2a32e1dc201d9e5713c8acc34bfdb20d831789d09723df1632bae307971f83379bbf541be5dda6a73917bd5e1fedbe99704593301a7f3e71e1452a0add363a0388eecb8d404690b0b725467782a4ef4f4ba4f563a41e547a64a751653680cb3ff0cbacea8650ab11c45e5d1a64ae1bb96b1ae7d93cc6af250502e2274c6c053b3673b3ce7850f4fdc27fa965eec5d62aca0704bff763125fc6546b94087d2e99eb8d2e64f32df90b3affa3539a4a6880d24d91ddef6421ddc81b1cb4b745fa097738314a63d882e4e59e3132475bbb37d95d66cac8e0c55dcd617e7b47fd352da79eacd2cf1158ad17ed725c0921688f89c89d8f304f28110cc039cedd9d1da5ba6695dfc70da209164654bb35e0273ccdc60e789371a2755c8984aef40fea1eaf65396a17b9a766d69ab9b89d9483dc77f8a18dbbd154fefe24bc0b2fa0ae8172ec7fc4b4737608da4e24f0d304c0415023d208d19124b66ddb12edc5eb92b63d970fab71c8b201e88f9526020fae8c7ab487eb3f43376a65d387f5ff76cc92ff81e2bce4abb02806386f502f30219408bb1dd0d45b96d4e4514282afa00e305f97d10ee5108590d427d383d3932cd33ee732ea5dfbfcd3944936ddc48573734551de273ca12df59c7b8af84f6e5552bdc343422747ea960b5ca01fff9be7afcc0efdff8f90564fe7910f9206b8449a1557142bc802c826fc9788c794ede0f894a7b7f9a989f15fe670eee2c0faa324100f562db9a904ed3e861ddee4fee1591559b5bdc77f0315221da44ae3cb3094779b2d0fe462b42e51c22611e4621cbf47c95cb8ca2b9f60c624658d2e01ef991ea8ff3f8bbf13250d54c08774060fea7441f002267fe8388f0a9e5edb77e925cdc76796cf40eef4ccdb873c3595374a3bdec07dc8e5fa70722331a7d3be104ce882b1fd3c232d916d30433c966933aa72d4386e17650c4dfa2ac8d5278eff59d5450b852d399aea48259d0a14aec32daeebd1b94b090dc131f163ab7bd03ede9e2d2b0afdebd623087e92d75444998bc66181bb932c35ad15a4b29ee5d5b6b1b6c0bef562a1f01ca44335081f3542301733cc0749c11df3269feb1311fd6ec3362675a75ddb67c96af3359628caf41a5c5159ca064c8dfa8b7fb8653a9036cab68c248eae8cccc0769088fc4818f8d833246dfc213d1fcc1bc41e3f335cf19687e5489d07e23cac20fff3332a3ba7aa0fa488c64d3dc8296b620ff667ab42cdb082ca9373c8e534b203b9825ec586988b07218f4066b7b58f869424d0c971bf32dd6c8c4f2dd4f8a52e3e6148824f832958577660b22c07ef9221264156ba93ce44dd1a0f4c2b7a191d089eb0ca353ce0e4e07d5def4b8369ed4b9f09b33b4dd226d7010c82637394c9f7631248732e6070da0fb6ae03ec6b67cec20775e8a236d432660739f129fe6827524ef406164987df9405e842c44477d7089b4c0881175a1e2a034694b24c5d6dbf988570b415045db2587bc0f434f5eb74f48e1db1dd9fa37101f0d289472b8fb7f1124ff2c9a47ba41ef4dca46176328fa49cb30e3f4740360ee9540c63949ba31d2445864e4fdef2170942232d1fd2b43dcd6fc7b955d2327f422af6bf8940f4f558f468276640820286de1752665e9d5d9f6a0e23b80705f204950987b5987896ed78b9789f9626a7ee8eab1d1abb5c63381b5e3c2897d33583d7396ca019a53c41412ee5be56f399e774aa84b76be406a9e002f4587bbfce4cd4085ef119812440fd671ca2949fe706f2d596c661cb2132855bb1227e1622e44f711caea4653b4b205b767f4259db1387fb44c73d5ee13e4ddb5b450cfcdda0d29ae9e171ebb76e69b76ce91369230107d6a3bff8e99fc7640ed1401f4b9e2eaed962d7dd4fc99e09d4236f5b36ad47adf83df9ca758db7d3f6c38899ee560f1170e7968e41b4f6ccca31fb5e99f71cdc7a9c4ea7ada08bf78bbcb3f73ccd8ec2bd1652a60b8f31e7bc29031fe87efd3ca66677ee7b952c13aae44bf4ef1ecf4744a7db62a6a646679d2291b4284301d0a0dd95e4dbc5888400aec12c9e18e49abf9b105dd5881ad21b02b4eee500fdbd329b6ca681408f1ef1b1a041cacc7f2c36be3e39caa99d427b0a25e7cc1675f2539ee315ea4a95f03044792ee3bdcbffa803c527aa4d60c5beb408a8dec85efc2f034dc4e5bbe5eeeea053994195f69d91085d55fe19267b3ec04bb26adc19243c7825708baee2ac4bde33fa2feb8684ac90ab231b3212f5c48fbb5fd5f9a20b0a413199d4c5a23040b865c552709e61ac50555c096993ce1d8e932cafd698c365f8beaf299dcd77e414501551d09bdf28d80a0e403321301c900a764fb89e7307a301d7aa999ce3b55bcc8421e9518683d1f63fdf9dd52eed5f6ff003e3fb73b8caea6b0733595496e472c7b311a70e3435694902001b0ec2408db343a75b07b7cf7dc48ba2f7d29b70e4f75e272be46cbbdc619bda44e74667f22254419a868ead1ccb975a13ab7633113bd9d0bb8f7a19376bacd7c35f68dfeaafd6c24c671cb2bf119ae268cf01d75bebde629f8858df1ce2f1370d14c4ad074723391aa1125874416ca809397f974bfb70a7a021732d91b6a4ccac59c8ee72d3d126ee6c1b62f266445db76eb6f6fdc182ba491317a8e596d51fe60da6cffacfa075f899b6738da43d47b77f29529b9ffa50a933ad476aaa6697f774d4dd27b94862e86272d8d0f39e179720115caf56147e5767e5ef7041913893710724a6f321698749b48d9c7bbd9761dbe265f94e4612f56c5b5f593c2ffe00238692330cbedfee21aa82ed16f98df796bb8647ba70c26a082e1a658943bd8aa3fb9e90cd765b63d25ae49a47f6c7edffdb825cd1411398ef3e5a1fb371ddb1a0ce07f7497eeba15c6d1ffe0321355bc3fe39fc88b8bb5cfc022d0094a9a5b483d1c6c630eccc1fd223c5759e337045fec674fec203a265515f50823efb09ea7443957f1811f69a03b066437bf13abcdc9e320d5681ad26866fe09aacb3b5137622cf9fdc89d1a66816657ddb52bafec4bdfa593c65a713999203c98bbd63c2f63f6514f67c0374e5abd2c7f6495944435318c757a4dee784f31dfbec25a10d6bbfccac755fb68961a9177955074368e4297cfa0973cfcb339a19d9a5e541658f5a8582a924eed66b651a0e82c9fd75f447e6a794ed5aaf06f9b4813d4a1ace0426c5fc87630f4571bb2fe20012e0914fffb812b2b6c7e1f7a4511479e5dbe6cb5f3b8260b53c8751ba28b516f6db22589540dfba5b15e9e591c66900034c341e148bed302013c314bb7ff18c4791884ff4b6be246818b08c8df037017878678c66b8a74313ae28e40e6c1c19890ea550b754c158e8cd76141ce7c1f053c49a25ac88e1d418ce1433492ef2358f2c84254d7eab7e4f296a0f3733487f025fdfc371b5418c75704825e206553623c69d328d7b50959e2c24f8033d896cb2e5a30d21c5eca87e833b02f7e5844039ed1fc452bd9e2f3f98c9a11a9ebe5e74fd411fa4243c9a8f6c5971a727be16fd9cb08ee1f6258cf9ce2283b2dfb4651ac1725ac17fafe007d5bd21efcaa82f44d14adf50c62c1105ca772b513b718348b651a864a6bb441c4e11a67540dcc20147b7c9314889c873baa8e2a11354d51506feb8ead84d9e8a493794688eed528e0ad2ffa45c366e029a1be13f21094549d24583ee8584247fdbeb1b6128482dc95678331ec399e866bc9d573e1e2f8df74abf7368ae9e40349a19d3341afaf325af88985fa9019a9f75ca166059c3abdb43a055ec03bf984a5efb8dd4acd17bef485e96386087552edad19786744540401e3ad0c80c83628c382fd56e56b98a976fc2414f2f1c7e45a519aae3929247f55d534283f29a27f0e5f0e006886a110973b1ff0a0d60923192f5eb8570a37b7ab082ffe3f6ec91807ea3ce567ac5fdbe5f04c56388c744beef5aa04fdbb6cdd0524cfaac0d4b7bc78f2c2042da8088c6a19a7b255ea03f03e771bbb04ef6b21366c7125ec3f1aeb75a160e0cbf962ed29afb369f926d3ae939503148f9bc276d4c0ef9b5a0e3a96d480bd71111311c25eb12454c01383afc61c39f7c75923e09b021c77e91245f14fe1e478ff335166929a344b43868f9662e8fbba99d1afe3f69cdad144cd921ae529a859661e61b4d6393a50c9a2827a10adb898e0bbe49f456d4b55edfa3aaf357bed003929dde4ef57ef23599657c3ff25c3ccd20471d4f31957eca2103354c59e852d9e5c81174797290c12f70d9416ae538234ef76c60d93723b44b99d61279c8d7f1dab6d73217e3106b448c8abda566b70befd778d3615c368b503145c7f9e25295d41be0aae0169fb83a2c7b04912036bef128f57617b14eaf51f92f9b5d6918d37e65e45ed3f5a9087440eb7ce9ddc8ddb124a0f044e5bca64f826500966b300bf1190108a82b6fcfd1b1e963e4636d0292a479d2879386ebf74554891e0838d04947a375b189630ff869a809cde0cf5ad4d85a1d57e29e1d01d6f332adc2e84a86ff98f9125962094aaadbcbca43c9b69fa72fed82e7723a90cea7f39c263ca1d62987a06c89e378e8c81a5790beecfe23208528fe78e7a0c3e99a0659d58047b8236cbcd7c9f517cbbba2bb067048ac9d81a35524df5ea470b7bb283ce8b9e504cae6b4cf7f7f943ba0c8a0e4114f4c472af6f57ce8bb1ceeb708b2ed8ac50dc56a7ee8a5a2ab65a7de76eae194d5e5282c114dfe22aa9242522d51058126cf291232693816cb5c0ff43ac28148fe9986e9e0a4e1c3d9aff505c16a20a8244393bee300050a59457d8441546b46bb1bb2cee95345a2c76d1b5d79789014a637931b6b2b7d02b8e59c36494bfac9c887c70b6b1a4cc3d82701a720f22fcbed7ee103aae5089e72208a4cb02c82df1bd1f6be6ce5080c1f02ece41823c79154eae7bbdd0b0fc8238362dbcb19c72b92b244043337d223f874ad37ed0875d83ed0234989becc432d2009bd4fc886058f2d62b662c67a74de31f0fd69f5459c06aa92b8cf06e8c9dbf8dc9868b603c676b5935ecf3d8974ce4f47d6a4105fc414d1da1569fc647f1e54826ae70b1f1a57f544d2a9a07e146ccc68dd1ad0c3347ebbbd39908ac09ef3da032ba388463da475c685731ba06bcb16f5d606a48b594ac9406e2bf887f22f2e2c7fc376c0d7b4141b1c92446c3b95a976b35c3b46cddc8f27a369d979e56af18986521a98c6c3a760989182eccba21aeebbc1a6a5139d36fdbb5a3f0ff5dc4c67ed240acff8a99e9391f3efcac544c1b2ff5d5697b2db0cfaf7c7150067dbf0b4d657fc8724a3e78f618e549e96a42ac8c754d911f00bebf9f789e4c13533f0ee4541aae9353303b87d66e1916a503ef6fcffed8b7e40162cfbbf752fec7e18dcdcb924391f429651b29651fe6af47cc7749bf4dc40684cef2aff2bc77cfdb717523e34cf4cb248026f4e68654c1fe23e1c6130e0af620018b19f716a632c38881b8821411be11c4d509eb56a1f336491ce43e070f012b930ad3a328b1ff006b7be86fac5caa581f4475398e1431f1dd53532a10195e5897e89f537e707913d87fd9e3dd01cb2f4bb48e1680c1477ad53a6e7579bbf95ecb99301c999a817b20f198e42ef93ad2410de503c02e9a5c152395744b2f43c4d4d76a1f8ea140ab245f443b89d42ce8dcbd45b0cc7c7d4e74e3e4ee8013d6c4702fa9cfb57577c305112034f92da87c2f75501d6b8995c35a80f376176d6b4241753626f80138aea8ba72972cc975046c489e0b7814eff5b0ce4f080c59dfa3a422ecd961a11ee6748828e53207ef2bc411262c15fcff1aafef46aa40cfe2ce5819c1e0abb926c29af8de4f7466fccc4c68b8819f638a52d25e200ddcd57c673c51c67778f3618000cfa7447a6e7b5b607ffeac3b7596f37dd5bded6ceeaac8fa75e33b8080f979188cc4041cb598b2a5c283a734c53d40a0a92de51724ed8603e5bd3a206fffe8ac8f73f2d9540255c723caea23564bf1d9815ce09ac2a6ced824cc6d83e3207d23115b0282c67084759dfcb0e247fcd8165a23f8a8669d1f63135bdc4f222c95e7d9048d7bed4d4ccdfa48d79b6f9626afc12b8a8633011757e419401cc84e5c422cc0a075a106547c60b332d34c4d53dd9d90db13597a44b4e9b9ef12f5d3fa43164e187a5698589abd0736c2cbe3cb72ead5ba0532c6afca3db0723f693c0dfe0309f53e94001d562e88dbf750bc163169f6b60759685f9c075f0b7f6645171f9df0649ed0fee18265b6e55e283b2df84a8ff50880f24a4e0f72bb230b500769a1b809e237132beeee5c6990427e1d5bdea0d30e13d69a3ebfb9994e6788c5c1592c42f7d535b15c0cd013dc14a6480491cd7a02db7f96609bc7f29c2256b66dc1f0083c451bc5134d5d5a82b5d4fed0763c6c1be01e086d15f17a215b5bd457f03d00fa7396e9d3f12adb9e979d01d0554f7e49744c19e5fd16e1711deab71747a65a84c00543243ce8d96eb6256380d7a10bcfb965db2ce67f42d413f872b321d919b03f425602f99a856b8f4447de2704cf2b511a0888438cbdab3a8fe8dd931ecee8adaff5241a5a1cfbd52c968df27a2062a9d641928c5580dc2ffe64d1a30123807c5ed5a73a13d71f6e5cf6e66ea5fdbe7e74a3046f3f17867d0eb0b5212fc1fdf8abb75b753c88b7232500f6af4cf9d9c4066c44b0cf0722b70419153a2e153a0bdf2302f64058fdd8b95a23e1660817733d7103238449073e95a718acd647e87e37df165f4802673216d48c2aaf5df7e70d153bf689dedb7c2eec8a957a5821b493c4caf1bc253f5e9cfc7e85d65425e7fa9ace912c4a4b9d804a91434828d24cca143cb0e83a38bd0ec3387328401d2b8fdd67f1aa6cbc8f334875dcd923d2403ddb792896628ad1ec0fccd61a81804e5fa5695ed6e9a898252b21e2b480bd799de802d01a272c42603faa091ea501e9c506da3e5a77e54a316fc34e92f0c169fe52a146bf29cd2983dc02617f147cfac112be612926cdf2699f0c3586205356d60e600ca502e36a48819a8adc35f4c4a775f40ce77bf1f330230300a48a8dd9e15d9bcc8bc658", 0x2000, &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$UFFDIO_CONTINUE(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) 2.458378578s ago: executing program 0 (id=555): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2) r5 = dup(r4) write$char_usb(r5, &(0x7f0000000240)="259772bd9402000000000000008c19f3da78ce7f427cb49491881fac78851681a78c8049cbb19337f4077f7ec86308", 0x2f) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x32, 0x8, &(0x7f0000000180)="e8299c21846ce1e07d462712a10ce502641dfa7605a21d86387ee7fb0d74d98f7515e8b75c4bbac90bd6819a28389ac5b8c6", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x50) socket$kcm(0x29, 0x2, 0x0) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703040000001f00000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.12487086s ago: executing program 2 (id=556): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000140), 0x0) setitimer(0x0, 0x0, &(0x7f0000000040)) 1.650982068s ago: executing program 1 (id=557): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x134}}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 1.231491684s ago: executing program 3 (id=558): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x34}}, 0x0) 1.06098839s ago: executing program 2 (id=559): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5003, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='tlb_flush\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021020000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 907.269206ms ago: executing program 1 (id=560): socket$pppoe(0x18, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0, 0x40) pselect6(0xfd37, &(0x7f0000000380), &(0x7f0000000600), &(0x7f0000000400)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000440)={0x0, 0x989680}, &(0x7f00000004c0)={&(0x7f0000000480), 0x8}) 797.80492ms ago: executing program 4 (id=561): r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 619.269597ms ago: executing program 3 (id=562): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000003540), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/4068, 0xfe4) 593.862587ms ago: executing program 2 (id=563): write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x4e22, @dev}, 0x10) poll(0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r1 = socket(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x12, 0x0, 0x20040003, 0x0, 0x0, 0x9c30}}) 452.567523ms ago: executing program 1 (id=564): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) 189.758372ms ago: executing program 3 (id=565): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r3, 0x80080400) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0505405, &(0x7f0000000600)={0x1, 0x0, 0x0, 0x3}) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e15, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) r6 = openat$cgroup_ro(r2, &(0x7f0000000240)='hugetlb.1GB.usage_in_bytes\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000cc5000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000760000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000905000/0x2000)=nil, &(0x7f0000000340)="66478143a496e385866f054e0cfb5bd806000000a038d6f28024d80abdfb1b14fcc295cd892b9271491aa5474cf03f8285149c20f054aaf00da18a0a010845ff00b265bef62fcc2fc257a6c4b91b11555c77638c", 0x54, r4}, 0x64) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYRES8=r6, @ANYRES64=r2, @ANYRES64=r2, @ANYRES16=r1, @ANYRESDEC=r4, @ANYRESOCT=r0, @ANYRES8=0x0], 0x5b) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04000703b16509061f3600ff000005e77791ff0700fea31118b3c3fb69cfd6000800"/43], 0x3c) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x513800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040544cc85665a"], 0x7) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) 189.225912ms ago: executing program 2 (id=566): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x1, 0x8, 0x8, 0x2008, 0xffffffffffffffff, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1a00000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=0xffffffffffffffff], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0xc, &(0x7f0000000a40)=ANY=[@ANYRESHEX=r4, @ANYRES32=r1, @ANYRES16=0x0, @ANYRESHEX=r3, @ANYRESDEC=r0, @ANYRES16, @ANYRESOCT=r1, @ANYRESHEX=r4, @ANYRESDEC=r3], &(0x7f0000000500)='syzkaller\x00', 0x13, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r5, 0x0, 0x53, 0x92, &(0x7f0000000440)="888c6e59fe492e21545c45ab4c546b49458e0233fb5867f3a3ae86b012b47f2914d815f4dd0bdbf5b41c4d8edb96e1753df731cd5b60fa2ecfc831154057009068cc62b0707a6f8b40a71c021806f57c6a4777", &(0x7f0000000200)=""/146, 0x1f, 0x0, 0xd, 0x70, &(0x7f00000002c0)="0f50ba7d7785106c9f48e1e510", &(0x7f0000000300)="7ddf022cbca39007d419f72b85113c9226b26e7c92e4c99b0ea6bff66edfbe5c1bf756d471f4793b401a93abe8fc8c74f2dc4582161a854f8316ef1953683662025ea5c94f4c4fc989eca47819e1cfc9790d4245fba52930e5290aae3d84a1079b246b16474e14da0526917f1184d5de", 0x3, 0x0, 0xff}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x3, &(0x7f00000004c0)=[{0x15, 0xfc, 0x0, 0x1}, {0x13}, {0x6, 0x0, 0x6}]}) r6 = inotify_init1(0x800) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) ftruncate(r6, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x6, 0xd, 0x0, 0x7fff0010}]}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x4, 0xd6, 0x5}, {0x4, 0x2, 0x0, 0x8}, {0x1, 0x1, 0x6, 0x2}, {0x1, 0x2f, 0x1f}, {0x4, 0x0, 0x3, 0xb}, {0x84, 0x6, 0x9, 0x3ff}, {0x6, 0x0, 0x2b, 0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000000100)={r8, 0x2, 0x1}) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') r11 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) fcntl$setstatus(r11, 0x4, 0x2000) read$nci(r10, &(0x7f0000000140)=""/127, 0x7f) read$nci(r9, &(0x7f0000001480)=""/4132, 0x1024) preadv(r9, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/44, 0x2c}], 0x1, 0x36, 0x0) socket(0x15, 0x80000, 0x0) epoll_create1(0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000080), 0xc) read(0xffffffffffffffff, &(0x7f0000000180)=""/40, 0x28) 56.814077ms ago: executing program 4 (id=567): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$inet(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0xffffffffffffff7c, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) close(r5) 56.646247ms ago: executing program 1 (id=568): epoll_create1(0x80000) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 0s ago: executing program 0 (id=569): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) setitimer(0x0, 0x0, &(0x7f0000000040)) kernel console output (not intermixed with test programs): exists on: batadv_slave_0 [ 71.370950][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.384822][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.388372][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.391443][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.403733][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.426780][ T3552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.440533][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.451540][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.463457][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.474204][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.484350][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.495601][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.505829][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.516399][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.529039][ T3550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.550475][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.559120][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.567410][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.576890][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.585542][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.594526][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.603722][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.615136][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.625785][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.636615][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.646701][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.657377][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.667750][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.678419][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.690214][ T3552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.704495][ T3617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.715898][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.722478][ T3617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.738150][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.748603][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.761963][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.771981][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.783378][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.793602][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.804075][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.816824][ T3550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.826332][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.837133][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.846777][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.856791][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.865752][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.876461][ T3552] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.886327][ T3552] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.896008][ T3552] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.904970][ T3552] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.928606][ T3550] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.938786][ T3550] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.948450][ T3550] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.957309][ T3550] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.972816][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.989238][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.009864][ T3617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.019487][ T3617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.027497][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.040513][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.110268][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.128141][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.168219][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.392014][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.486445][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.597000][ T3644] netlink: 'syz.1.6': attribute type 1 has an invalid length. [ 72.605038][ T3644] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6'. [ 72.712961][ T3642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.736696][ T3642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.747141][ T3562] Bluetooth: hci3: command tx timeout [ 72.753040][ T3566] Bluetooth: hci0: command tx timeout [ 72.760026][ T3562] Bluetooth: hci2: command tx timeout [ 72.766010][ T3566] Bluetooth: hci4: command tx timeout [ 73.106740][ T3569] Bluetooth: hci1: command tx timeout [ 73.135216][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.165796][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.232583][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.240679][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.249941][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.274853][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.307960][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.368965][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.413906][ T3650] loop1: detected capacity change from 0 to 16 [ 73.463654][ T3650] erofs: (device loop1): mounted with root inode @ nid 36. [ 73.636238][ T3659] syz.1.7: attempt to access beyond end of device [ 73.636238][ T3659] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 73.825863][ T3663] loop4: detected capacity change from 0 to 1024 [ 73.951543][ T3663] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 74.135678][ T3673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'. [ 74.181764][ T3673] device ip6gretap0 entered promiscuous mode [ 74.191331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.218450][ T3675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'. [ 74.264978][ T3675] device ip6gretap0 left promiscuous mode [ 74.288059][ T3550] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 74.316921][ T3550] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 74.358457][ T3550] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 74.385921][ T3550] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 74.410747][ T3550] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 74.461169][ T3550] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 74.480880][ T3550] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 74.532692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.555812][ T3550] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 74.570325][ T3550] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 74.609194][ T3550] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 75.242721][ T3550] EXT4-fs (loop4): unmounting filesystem. [ 75.249285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.257712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.406468][ T3617] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.532906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.563617][ T3617] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.725316][ T3617] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.852942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.862355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 75.872307][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 75.882311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 75.890496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 76.072538][ T3684] netlink: 'syz.2.17': attribute type 1 has an invalid length. [ 76.080199][ T3684] netlink: 56 bytes leftover after parsing attributes in process `syz.2.17'. [ 76.629245][ T3617] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.699965][ T3641] syz.0.1 (3641) used greatest stack depth: 18864 bytes left [ 77.534630][ T3697] loop0: detected capacity change from 0 to 16 [ 77.603151][ T3697] erofs: (device loop0): mounted with root inode @ nid 36. [ 78.156736][ T3703] syz.0.18: attempt to access beyond end of device [ 78.156736][ T3703] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 78.181642][ T3566] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.200406][ T3562] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.209447][ T3562] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.217509][ T3562] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.225282][ T3562] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.237546][ T3562] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.341949][ T3705] loop1: detected capacity change from 0 to 16 [ 78.428690][ T3705] erofs: (device loop1): mounted with root inode @ nid 36. [ 78.495481][ T3708] loop2: detected capacity change from 0 to 1024 [ 78.573502][ T3711] Zero length message leads to an empty skb [ 78.631884][ T3711] syz.1.22: attempt to access beyond end of device [ 78.631884][ T3711] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 78.714971][ T3708] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 79.000188][ T3718] loop3: detected capacity change from 0 to 16 [ 79.183012][ T3718] erofs: (device loop3): mounted with root inode @ nid 36. [ 79.305932][ T3549] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 79.323850][ T3721] syz.3.23: attempt to access beyond end of device [ 79.323850][ T3721] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 79.426088][ T3549] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 79.479762][ T3549] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 79.564913][ T3700] chnl_net:caif_netlink_parms(): no params data found [ 79.627264][ T3549] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 79.771293][ T3549] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 79.842999][ T3549] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 79.861549][ T3617] device hsr_slave_0 left promiscuous mode [ 79.869352][ T3549] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 79.889045][ T3549] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 79.934366][ T3617] device hsr_slave_1 left promiscuous mode [ 79.947066][ T3617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.957638][ T3617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.964746][ T3549] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 79.977075][ T3617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.978250][ T3549] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 79.985046][ T3617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.003863][ T3617] device bridge_slave_1 left promiscuous mode [ 80.012964][ T3617] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.067516][ T3617] device bridge_slave_0 left promiscuous mode [ 80.073977][ T3617] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.119362][ T3617] device veth1_macvtap left promiscuous mode [ 80.131343][ T3617] device veth0_macvtap left promiscuous mode [ 80.138532][ T3617] device veth1_vlan left promiscuous mode [ 80.144934][ T3617] device veth0_vlan left promiscuous mode [ 80.334091][ T3562] Bluetooth: hci2: command tx timeout [ 80.729553][ T3617] team0 (unregistering): Port device team_slave_1 removed [ 80.771022][ T3617] team0 (unregistering): Port device team_slave_0 removed [ 80.808596][ T3617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.860300][ T3617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.178874][ T3617] bond0 (unregistering): Released all slaves [ 81.401206][ T3700] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.413137][ T3700] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.421378][ T3700] device bridge_slave_0 entered promiscuous mode [ 81.475433][ T3700] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.487784][ T3700] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.497280][ T3700] device bridge_slave_1 entered promiscuous mode [ 81.530193][ T3549] EXT4-fs (loop2): unmounting filesystem. [ 81.616774][ T153] cfg80211: failed to load regulatory.db [ 81.634881][ T3700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.669014][ T3700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.121874][ T3700] team0: Port device team_slave_0 added [ 82.159956][ T3700] team0: Port device team_slave_1 added [ 82.217850][ T3569] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.226734][ T3569] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.234669][ T3569] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.243314][ T3569] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.250935][ T3569] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.260331][ T3566] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.411032][ T3700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.422426][ T3569] Bluetooth: hci2: command tx timeout [ 82.444742][ T3700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.543173][ T3700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.618822][ T3700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.635624][ T3700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.762650][ T3700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.958165][ T3700] device hsr_slave_0 entered promiscuous mode [ 82.979744][ T3700] device hsr_slave_1 entered promiscuous mode [ 82.997957][ T3700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.016438][ T3700] Cannot create hsr debugfs directory [ 83.667246][ T3740] chnl_net:caif_netlink_parms(): no params data found [ 83.795980][ T3756] netlink: 'syz.0.28': attribute type 1 has an invalid length. [ 83.803729][ T3756] netlink: 56 bytes leftover after parsing attributes in process `syz.0.28'. [ 84.342532][ T3569] Bluetooth: hci1: command tx timeout [ 84.542491][ T3569] Bluetooth: hci2: command tx timeout [ 85.251102][ T3740] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.272428][ T3740] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.280770][ T3740] device bridge_slave_0 entered promiscuous mode [ 85.354617][ T3740] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.382233][ T3740] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.390941][ T3740] device bridge_slave_1 entered promiscuous mode [ 85.626951][ T3740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.820774][ T3740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.999184][ T3792] program syz.1.35 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.009440][ T3792] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 86.022680][ T3792] ubi0: attaching mtd0 [ 86.034056][ T3792] ubi0: scanning is finished [ 86.038752][ T3792] ubi0: empty MTD device detected [ 86.432982][ T3562] Bluetooth: hci1: command tx timeout [ 86.572587][ T3569] Bluetooth: hci2: command tx timeout [ 86.607529][ T3792] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 86.705835][ T3796] loop0: detected capacity change from 0 to 1024 [ 86.774018][ T3740] team0: Port device team_slave_0 added [ 86.808620][ T3740] team0: Port device team_slave_1 added [ 87.014765][ T3740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.043454][ T3740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.089759][ T3796] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 87.109560][ T3803] program syz.1.36 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.119302][ T3803] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 87.129958][ T3803] ubi0: attaching mtd0 [ 87.138634][ T3803] ubi0: scanning is finished [ 87.276423][ T3803] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 87.284241][ T3803] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 87.291680][ T3803] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 87.299692][ T3803] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 87.307533][ T3803] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 87.314523][ T3803] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 87.322678][ T3803] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 738222930 [ 87.332750][ T3803] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 87.371393][ T3804] ubi0: background thread "ubi_bgt0d" started, PID 3804 [ 87.664810][ T3740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.725191][ T3700] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.803755][ T3740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.822300][ T3740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.862013][ T3807] loop1: detected capacity change from 0 to 2048 [ 87.870863][ T3740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.898846][ T3700] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.908950][ T3551] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 87.933895][ T3700] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.956650][ T3807] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 88.013612][ T3551] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 88.083602][ T3700] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.151875][ T3551] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 88.191773][ T3740] device hsr_slave_0 entered promiscuous mode [ 88.200919][ T3551] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 88.263035][ T3740] device hsr_slave_1 entered promiscuous mode [ 88.285066][ T3551] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 88.297425][ T3740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.305273][ T3740] Cannot create hsr debugfs directory [ 88.502398][ T3569] Bluetooth: hci1: command tx timeout [ 88.544563][ T3551] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 88.762632][ T3597] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.780981][ T3551] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 89.006812][ T3551] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 89.052919][ T3551] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 89.083840][ T3551] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 89.232629][ T3597] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 89.422887][ T3597] usb 2-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.40 [ 89.437915][ T3597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.452984][ T3700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.477884][ T3597] usb 2-1: Product: syz [ 89.482114][ T3597] usb 2-1: Manufacturer: syz [ 89.498388][ T3597] usb 2-1: SerialNumber: syz [ 89.571908][ T3597] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 89.626125][ T3617] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.673967][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.681900][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.721494][ T3700] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.728075][ T3824] loop3: detected capacity change from 0 to 256 [ 89.754548][ T3551] EXT4-fs (loop0): unmounting filesystem. [ 89.762155][ T3824] FAT-fs (loop3): Unrecognized mount option "shortoame=mixed" or missing value [ 89.830424][ T3617] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.874025][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.904826][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.935078][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.942323][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.994431][ T3617] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.024202][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.035094][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.057248][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.078305][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.085527][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.138204][ T3617] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.225417][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.259100][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.278905][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.302661][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.304220][ T3834] loop3: detected capacity change from 0 to 256 [ 90.339380][ T3834] FAT-fs (loop3): Unrecognized mount option "shortoame=mixed" or missing value [ 90.345589][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.384288][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.404248][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.428883][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.463072][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.510014][ T3700] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.515557][ T3562] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.529650][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.538304][ T3562] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.546102][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.546549][ T3562] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.562039][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.571668][ T3562] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.578982][ T3566] Bluetooth: hci1: command tx timeout [ 90.585199][ T3562] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.598198][ T3562] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.887429][ T3597] usb 2-1: USB disconnect, device number 2 [ 90.966710][ T3548] EXT4-fs (loop1): unmounting filesystem. [ 91.177962][ T3856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.44'. [ 91.247675][ T3859] loop3: detected capacity change from 0 to 16 [ 91.294224][ T3859] erofs: (device loop3): mounted with root inode @ nid 36. [ 91.424326][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.431861][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.712141][ T3700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.335736][ T3861] syz.3.45: attempt to access beyond end of device [ 92.335736][ T3861] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 92.525695][ T3839] chnl_net:caif_netlink_parms(): no params data found [ 92.718906][ T3562] Bluetooth: hci3: command tx timeout [ 92.848587][ T3874] program syz.1.46 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.858262][ T3874] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 92.868970][ T3874] ubi: mtd0 is already attached to ubi0 [ 93.602169][ T3740] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.716069][ T3740] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.803656][ T3740] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.845299][ T3740] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.304198][ T3890] program syz.1.48 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.313844][ T3890] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 94.324121][ T3890] ubi: mtd0 is already attached to ubi0 [ 94.732388][ T3562] Bluetooth: hci3: command tx timeout [ 95.044964][ T3893] loop1: detected capacity change from 0 to 16 [ 95.090467][ T3839] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.104141][ T3893] erofs: (device loop1): mounted with root inode @ nid 36. [ 95.131477][ T3839] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.161969][ T3839] device bridge_slave_0 entered promiscuous mode [ 95.230348][ T3839] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.239356][ T3839] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.252558][ T3839] device bridge_slave_1 entered promiscuous mode [ 95.260327][ T3895] syz.1.49: attempt to access beyond end of device [ 95.260327][ T3895] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 95.446760][ T3740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.537905][ T3839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.592915][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.615134][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.657516][ T3740] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.678497][ T3839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.777012][ T3617] device hsr_slave_0 left promiscuous mode [ 95.810484][ T3617] device hsr_slave_1 left promiscuous mode [ 95.820872][ T3617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.847801][ T3617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.857371][ T3617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.865351][ T3617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.907046][ T3617] device bridge_slave_1 left promiscuous mode [ 95.941817][ T3617] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.949133][ T3903] loop3: detected capacity change from 0 to 512 [ 95.985089][ T3903] EXT4-fs: Ignoring removed orlov option [ 95.991168][ T3617] device bridge_slave_0 left promiscuous mode [ 96.040100][ T3617] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.140041][ T3617] device veth1_macvtap left promiscuous mode [ 96.153330][ T3617] device veth0_macvtap left promiscuous mode [ 96.179169][ T3617] device veth1_vlan left promiscuous mode [ 96.185763][ T3617] device veth0_vlan left promiscuous mode [ 96.343944][ T3903] EXT4-fs (loop3): Test dummy encryption mode enabled [ 96.375273][ T3903] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 96.390521][ T3903] System zones: 1-12 [ 96.424344][ T3903] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.50: casefold flag without casefold feature [ 96.443660][ T3903] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.50: missing EA_INODE flag [ 96.476416][ T3903] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.50: error while reading EA inode 12 err=-117 [ 96.491924][ T3903] EXT4-fs (loop3): 1 orphan inode deleted [ 96.498340][ T3903] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 96.620796][ T3552] EXT4-fs (loop3): unmounting filesystem. [ 96.812431][ T3562] Bluetooth: hci3: command tx timeout [ 97.256760][ T3617] team0 (unregistering): Port device team_slave_1 removed [ 97.290742][ T3617] team0 (unregistering): Port device team_slave_0 removed [ 97.321162][ T3617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.354715][ T3617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.639465][ T3617] bond0 (unregistering): Released all slaves [ 97.721578][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.730686][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.739677][ T3597] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.746852][ T3597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.756080][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.765314][ T3913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.51'. [ 97.776494][ T3913] device veth1_to_bond entered promiscuous mode [ 97.791340][ T3914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.51'. [ 97.812143][ T3914] device veth1_to_bond left promiscuous mode [ 97.849991][ T3839] team0: Port device team_slave_0 added [ 97.868482][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.878320][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.903258][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.918817][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.927813][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.934984][ T3597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.944225][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.973166][ T3839] team0: Port device team_slave_1 added [ 97.989234][ T3916] loop3: detected capacity change from 0 to 2048 [ 98.034367][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.075064][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.089591][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.119110][ T3916] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 98.143441][ T3700] device veth0_vlan entered promiscuous mode [ 98.175569][ T3921] loop1: detected capacity change from 0 to 512 [ 98.193792][ T3921] EXT4-fs: Ignoring removed orlov option [ 98.203282][ T3921] EXT4-fs (loop1): Test dummy encryption mode enabled [ 98.235459][ T3839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.251804][ T3839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.290886][ T3921] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 98.300287][ T3921] System zones: 1-12 [ 98.314450][ T3921] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.53: casefold flag without casefold feature [ 98.334813][ T3921] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.53: missing EA_INODE flag [ 98.355017][ T3839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.380172][ T3921] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.53: error while reading EA inode 12 err=-117 [ 98.393604][ T3740] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.410125][ T3740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.441052][ T3921] EXT4-fs (loop1): 1 orphan inode deleted [ 98.448084][ T3921] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 98.792685][ T3597] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.893463][ T3562] Bluetooth: hci3: command tx timeout [ 99.217732][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.226820][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.228106][ T3548] EXT4-fs (loop1): unmounting filesystem. [ 99.236066][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.254344][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.263336][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.271945][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.281603][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.290830][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.300239][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.308713][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.322735][ T3597] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 99.343511][ T3839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.350519][ T3839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.390962][ T3926] loop1: detected capacity change from 0 to 1024 [ 99.398855][ T3839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.421138][ T3700] device veth1_vlan entered promiscuous mode [ 99.431043][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.447058][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.471630][ T3926] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 99.544405][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.552780][ T3597] usb 4-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.40 [ 99.562021][ T3597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.587077][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.624105][ T3597] usb 4-1: Product: syz [ 99.639241][ T3700] device veth0_macvtap entered promiscuous mode [ 99.649241][ T3597] usb 4-1: Manufacturer: syz [ 99.684049][ T3597] usb 4-1: SerialNumber: syz [ 99.735874][ T3839] device hsr_slave_0 entered promiscuous mode [ 99.754824][ T3597] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 99.799066][ T3839] device hsr_slave_1 entered promiscuous mode [ 99.814463][ T3839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.832300][ T3839] Cannot create hsr debugfs directory [ 99.834875][ T3548] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 99.840606][ T3700] device veth1_macvtap entered promiscuous mode [ 99.859159][ T3548] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 99.878788][ T3548] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 99.913297][ T3548] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 99.944061][ T3548] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 99.969744][ T3548] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 99.983596][ T3700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.998768][ T3548] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 100.020434][ T3700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.021551][ T3548] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 100.035986][ T3700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.061774][ T3700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.070476][ T3548] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 100.082051][ T3700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.105073][ T3548] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 100.118372][ T3700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.148299][ T3700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.186884][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.197545][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.216801][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.225808][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.235940][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.243978][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.263323][ T3700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.299183][ T3700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.341835][ T3700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.359762][ T3700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.370001][ T3700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.387968][ T3700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.411582][ T3700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.427567][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.443997][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.541258][ T3700] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.551486][ T3700] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.560833][ T3700] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.570007][ T3700] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.586928][ T3740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.681331][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.691582][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.705114][ T3548] EXT4-fs (loop1): unmounting filesystem. [ 100.827116][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.838691][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.858077][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.874659][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.893859][ T3740] device veth0_vlan entered promiscuous mode [ 100.917567][ T3642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.928585][ T3740] device veth1_vlan entered promiscuous mode [ 100.943629][ T3642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.077648][ T41] usb 4-1: USB disconnect, device number 2 [ 101.091275][ T3552] EXT4-fs (loop3): unmounting filesystem. [ 101.185384][ T3839] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.239636][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.251369][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.274546][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.365173][ T3839] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.419963][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.430092][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.463038][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.475157][ T3740] device veth0_macvtap entered promiscuous mode [ 101.482379][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.544818][ T3839] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.586740][ T3937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.59'. [ 101.598216][ T3569] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.606991][ T3569] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.615811][ T3569] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.623829][ T3569] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.631406][ T3569] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 101.641273][ T3569] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.650063][ T3937] device bond_slave_0 entered promiscuous mode [ 101.656548][ T3937] device bond_slave_1 entered promiscuous mode [ 101.681583][ T3937] device macvtap1 entered promiscuous mode [ 101.687741][ T3937] device bond0 entered promiscuous mode [ 101.696410][ T3937] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 101.706453][ T3740] device veth1_macvtap entered promiscuous mode [ 101.719834][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.728046][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.737208][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.748321][ T3939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.59'. [ 101.844008][ T3839] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.931687][ T3740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.956513][ T3947] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.962307][ T3740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.015251][ T3740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.026162][ T3740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.036225][ T3740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.047364][ T3740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.057427][ T3740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.073565][ T3740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.098846][ T3740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.115188][ T3953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.61'. [ 102.132730][ T3953] netlink: 32 bytes leftover after parsing attributes in process `syz.4.61'. [ 102.149188][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.158695][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.170668][ T3740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.185237][ T3740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.195264][ T3740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.206609][ T3740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.216784][ T3740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.227609][ T3740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.237782][ T3740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.249305][ T3740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.261174][ T3740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.286092][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.307052][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.321554][ T3740] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.337590][ T3740] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.360599][ T3740] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.369780][ T3740] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.619567][ T3793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.644054][ T3793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.652184][ T3839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.679157][ T3958] mmap: syz.3.63 (3958) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.681749][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.731246][ T3839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.809653][ T3839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.827837][ T3839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.899764][ T3617] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.935041][ T3941] chnl_net:caif_netlink_parms(): no params data found [ 102.943877][ T3642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.951944][ T3642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.007280][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.082902][ T3617] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.224999][ T3617] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.320412][ T3839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.386265][ T3617] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.399759][ T3985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69'. [ 103.417655][ T3941] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.426846][ T3941] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.435742][ T3941] device bridge_slave_0 entered promiscuous mode [ 103.447121][ T3941] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.457920][ T3941] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.466844][ T3941] device bridge_slave_1 entered promiscuous mode [ 103.496126][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.504311][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.556086][ T3985] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.586778][ T3839] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.600751][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.610332][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.624064][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.631793][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.643062][ T3941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.688246][ T3985] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.703243][ T3569] Bluetooth: hci0: command tx timeout [ 103.714912][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.724133][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.736036][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.744998][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.752111][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.767447][ T3941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.848212][ T3985] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.894648][ T3941] team0: Port device team_slave_0 added [ 103.900899][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.954297][ T3941] team0: Port device team_slave_1 added [ 103.990254][ T3985] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.005691][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.016036][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.026700][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.039569][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.185410][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.204301][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.214097][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.223308][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.237844][ T3839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.263762][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.272981][ T3941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.279993][ T3941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.309559][ T3941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.385589][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.404743][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.491075][ T3941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.512681][ T3941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.565117][ T3941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.701498][ T3985] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.730833][ T3941] device hsr_slave_0 entered promiscuous mode [ 104.748659][ T3941] device hsr_slave_1 entered promiscuous mode [ 104.770772][ T3941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.778693][ T3941] Cannot create hsr debugfs directory [ 104.847211][ T3985] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.880079][ T3985] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.948706][ T3985] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.316414][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.327509][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.371375][ T3839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.610362][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.637152][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.772877][ T3569] Bluetooth: hci0: command tx timeout [ 105.926869][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.943262][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.977620][ T3839] device veth0_vlan entered promiscuous mode [ 106.011299][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.030653][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.143710][ T3839] device veth1_vlan entered promiscuous mode [ 106.351922][ T3617] device hsr_slave_0 left promiscuous mode [ 106.413237][ T3617] device hsr_slave_1 left promiscuous mode [ 106.446028][ T3617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.462999][ T3617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.489297][ T3617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.507554][ T3617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.528939][ T3617] device bridge_slave_1 left promiscuous mode [ 106.539222][ T3617] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.583506][ T3617] device bridge_slave_0 left promiscuous mode [ 106.589792][ T3617] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.633607][ T3617] device hsr_slave_0 left promiscuous mode [ 106.640491][ T3617] device hsr_slave_1 left promiscuous mode [ 106.654474][ T3617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.662036][ T3617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.681527][ T3617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.690199][ T3617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.699009][ T3617] device bridge_slave_1 left promiscuous mode [ 106.710430][ T3617] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.730039][ T3617] device bridge_slave_0 left promiscuous mode [ 106.740840][ T3617] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.788843][ T3617] device veth1_macvtap left promiscuous mode [ 106.795862][ T3617] device veth0_macvtap left promiscuous mode [ 106.801949][ T3617] device veth1_vlan left promiscuous mode [ 106.809502][ T3617] device veth0_vlan left promiscuous mode [ 106.818237][ T3617] device veth1_macvtap left promiscuous mode [ 106.826036][ T3617] device veth0_macvtap left promiscuous mode [ 106.833289][ T3617] device veth1_vlan left promiscuous mode [ 106.839337][ T3617] device veth0_vlan left promiscuous mode [ 107.388571][ T3617] team0 (unregistering): Port device team_slave_1 removed [ 107.419419][ T3617] team0 (unregistering): Port device team_slave_0 removed [ 107.467461][ T3617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.508707][ T3617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.852512][ T3569] Bluetooth: hci0: command tx timeout [ 107.940349][ T3617] bond0 (unregistering): Released all slaves [ 108.087890][ T4081] loop3: detected capacity change from 0 to 512 [ 109.483767][ T3617] team0 (unregistering): Port device team_slave_1 removed [ 109.608150][ T3617] team0 (unregistering): Port device team_slave_0 removed [ 109.759720][ T3617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.841357][ T4095] Bluetooth: MGMT ver 1.22 [ 109.912712][ T3617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.332255][ C1] sched: RT throttling activated [ 110.334655][ T3569] Bluetooth: hci0: command tx timeout [ 110.598323][ T4098] loop2: detected capacity change from 0 to 1024 [ 110.624045][ T4098] EXT4-fs: Ignoring removed nobh option [ 110.629729][ T4098] ext4: Unknown parameter 'smackfshat' [ 111.143024][ T3617] bond0 (unregistering): Released all slaves [ 111.605926][ T3941] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 111.658779][ T3941] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 111.717480][ T3941] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 111.783856][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 111.843512][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.555342][ T4095] netlink: 20 bytes leftover after parsing attributes in process `syz.3.96'. [ 112.635917][ T3839] device veth0_macvtap entered promiscuous mode [ 112.659694][ T3941] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 112.691852][ T3839] device veth1_macvtap entered promiscuous mode [ 112.814115][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.836208][ T3839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.900441][ T3839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.942507][ T3839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.961381][ T3839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.976443][ T3839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.987257][ T3839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.007592][ T3839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.049197][ T3839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.086203][ T3839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.113904][ T3839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.142283][ T3839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.162593][ T3839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.188651][ T3839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.215309][ T3839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.230797][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.242094][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.257541][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.295319][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.342004][ T3839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.360101][ T3839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.370665][ T3839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.379983][ T3839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.631800][ T3793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.655059][ T3793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.708531][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 113.780049][ T3793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.790264][ T3941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.809191][ T3793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.863712][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.939720][ T3941] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.983569][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.991655][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.046255][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.088739][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.131200][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.138420][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.192724][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.232071][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.272440][ T3554] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.279595][ T3554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.332740][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.371451][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.412494][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.446130][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.466505][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.528361][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.543498][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.577167][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.629422][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.645465][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.684803][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.710524][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.740039][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.369916][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.388047][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.439310][ T3941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.578276][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.601663][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.654216][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.679327][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.717781][ T3941] device veth0_vlan entered promiscuous mode [ 115.750167][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.766321][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.800268][ T3941] device veth1_vlan entered promiscuous mode [ 115.882862][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 115.896382][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 115.950141][ T3941] device veth0_macvtap entered promiscuous mode [ 115.977257][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.998777][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.021044][ T4214] ======================================================= [ 116.021044][ T4214] WARNING: The mand mount option has been deprecated and [ 116.021044][ T4214] and is ignored by this kernel. Remove the mand [ 116.021044][ T4214] option from the mount to silence this warning. [ 116.021044][ T4214] ======================================================= [ 116.077179][ T3941] device veth1_macvtap entered promiscuous mode [ 116.109434][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.135935][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.201113][ T3941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.242332][ T3941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.279531][ T3941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.320742][ T3941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.357355][ T3941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.398760][ T3941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.422520][ T3941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.482443][ T3941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.532730][ T3941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.567059][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.583211][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.634591][ T3941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.669868][ T3941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.710531][ T3941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.742544][ T3941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.771026][ T3941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.807183][ T3941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.858402][ T3941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.899581][ T3941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.939200][ T3941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.960330][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.987299][ T4246] loop2: detected capacity change from 0 to 1024 [ 116.989812][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.060665][ T3941] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.097148][ T3941] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.163104][ T3941] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.171961][ T3941] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.436888][ T3686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.461170][ T3686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.543982][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.559097][ T3683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.589483][ T3683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.641091][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.717740][ T4266] process 'syz.3.143' launched './file1' with NULL argv: empty string added [ 117.860418][ T4269] loop1: detected capacity change from 0 to 16 [ 117.900166][ T4269] erofs: (device loop1): mounted with root inode @ nid 36. [ 118.080805][ T4274] syz.1.57: attempt to access beyond end of device [ 118.080805][ T4274] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 119.368113][ T3617] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.583612][ T3617] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.751677][ T3617] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.823316][ T3562] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.850626][ T3562] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.859109][ T3562] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.873235][ T3562] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.883630][ T3562] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 119.890942][ T3562] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.036149][ T3617] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.167444][ T4326] netlink: 'syz.3.159': attribute type 1 has an invalid length. [ 121.030363][ T4317] chnl_net:caif_netlink_parms(): no params data found [ 121.108963][ T4350] team_slave_1: mtu greater than device maximum [ 121.132360][ T4350] team0: Device team_slave_1 failed to change mtu [ 121.345758][ T4361] netlink: 'syz.4.168': attribute type 1 has an invalid length. [ 121.719934][ T4375] team_slave_1: mtu greater than device maximum [ 121.732579][ T4375] team0: Device team_slave_1 failed to change mtu [ 121.886791][ T4381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.176'. [ 121.932530][ T3562] Bluetooth: hci1: command tx timeout [ 122.158071][ T4317] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.176767][ T4317] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.226109][ T4317] device bridge_slave_0 entered promiscuous mode [ 122.323639][ T4317] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.343267][ T4317] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.391117][ T4317] device bridge_slave_1 entered promiscuous mode [ 122.724281][ T4317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.769790][ T4317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.132807][ T3617] device hsr_slave_0 left promiscuous mode [ 123.155634][ T3617] device hsr_slave_1 left promiscuous mode [ 123.179895][ T3617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.242766][ T3617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.279598][ T3617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.302697][ T3617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.327730][ T3617] device bridge_slave_1 left promiscuous mode [ 123.348041][ T3617] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.408004][ T3617] device bridge_slave_0 left promiscuous mode [ 123.420601][ T3617] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.537339][ T3617] device veth1_macvtap left promiscuous mode [ 123.569729][ T3617] device veth0_macvtap left promiscuous mode [ 123.589710][ T3617] device veth1_vlan left promiscuous mode [ 123.621389][ T3617] device veth0_vlan left promiscuous mode [ 124.012559][ T3562] Bluetooth: hci1: command tx timeout [ 125.399424][ T3617] team0 (unregistering): Port device team_slave_1 removed [ 125.484484][ T4449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'. [ 125.524832][ T3617] team0 (unregistering): Port device team_slave_0 removed [ 125.614261][ T3617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.734196][ T3617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.831270][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 126.092372][ T3562] Bluetooth: hci1: command tx timeout [ 126.679517][ T3617] bond0 (unregistering): Released all slaves [ 126.815298][ T4317] team0: Port device team_slave_0 added [ 126.853368][ T4317] team0: Port device team_slave_1 added [ 127.013023][ T4317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.027729][ T4317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.138527][ T4317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.173376][ T4317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.180386][ T4317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.294796][ T26] audit: type=1800 audit(1719897670.193:2): pid=4467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.200" name="file0" dev="sda1" ino=1987 res=0 errno=0 [ 127.332644][ T4467] /dev/sg0: Can't open blockdev [ 127.345531][ T4317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.545752][ T4317] device hsr_slave_0 entered promiscuous mode [ 127.568001][ T4317] device hsr_slave_1 entered promiscuous mode [ 128.172528][ T3562] Bluetooth: hci1: command tx timeout [ 128.363796][ T4497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.208'. [ 128.478987][ T4502] fuse: Unknown parameter '0xffffffffffffffff' [ 130.289109][ T3562] Bluetooth: hci1: command tx timeout [ 130.637956][ T4317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 130.690941][ T4317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 130.736376][ T4317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 130.754739][ T4317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 131.836248][ T4317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.891332][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.908625][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.987155][ T4317] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.163676][ T4551] fuse: Unknown parameter '0xffffffffffffffff' [ 132.192140][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.218522][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.260529][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.267775][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.951987][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.958374][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.335363][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.424145][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.430323][ T4553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.222'. [ 133.453701][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.693029][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.700195][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.883033][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.911381][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.010125][ T4566] fuse: Bad value for 'fd' [ 134.132961][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.154189][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.183852][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.211163][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.241630][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 134.250469][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.260051][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.308565][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.355260][ T4569] tmpfs: Unknown parameter 'usrquota' [ 134.365759][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.401299][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.499683][ T7] kernel write not supported for file [eventfd] (pid: 7 comm: kworker/0:0) [ 135.272472][ T4592] tipc: Can't bind to reserved service type 0 [ 135.934471][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.960354][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.020182][ T4317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.155308][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.184365][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.250778][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.263267][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.284623][ T4317] device veth0_vlan entered promiscuous mode [ 136.318709][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.327622][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.356320][ T4317] device veth1_vlan entered promiscuous mode [ 136.443680][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 136.459587][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 136.494143][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.523425][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.574723][ T4317] device veth0_macvtap entered promiscuous mode [ 136.624310][ T4317] device veth1_macvtap entered promiscuous mode [ 136.678201][ T4609] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 136.678201][ T4609] program syz.3.230 not setting count and/or reply_len properly [ 137.022492][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.070634][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.088135][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.110387][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.132621][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.143577][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.153945][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.169294][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.183842][ T4317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.194710][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 137.255996][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 137.273116][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 137.281930][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 137.321424][ T4609] netlink: 'syz.3.230': attribute type 10 has an invalid length. [ 137.342072][ T4609] netlink: 40 bytes leftover after parsing attributes in process `syz.3.230'. [ 137.380164][ T4609] bridge0: port 3(gretap0) entered blocking state [ 137.385759][ T4619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.235'. [ 137.445591][ T4609] bridge0: port 3(gretap0) entered disabled state [ 137.479811][ T4609] device gretap0 entered promiscuous mode [ 137.513671][ T4609] bridge0: port 3(gretap0) entered blocking state [ 137.520496][ T4609] bridge0: port 3(gretap0) entered forwarding state [ 137.553950][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.570845][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.589962][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.601038][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.632353][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.654287][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.665797][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.676758][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.691039][ T4317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.715730][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 137.725798][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.738022][ T4317] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.747927][ T4317] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.761632][ T4317] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.842337][ T4317] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.997124][ T3683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.052643][ T3683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.115332][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 139.137230][ T26] audit: type=1804 audit(1719897682.033:3): pid=4647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.244" name="/root/syzkaller.R5Iq6X/21/bus" dev="sda1" ino=1985 res=1 errno=0 [ 139.161332][ T3793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.188608][ T3793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.225850][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 139.252378][ T26] audit: type=1804 audit(1719897682.113:4): pid=4647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.244" name="/root/syzkaller.R5Iq6X/21/bus" dev="sda1" ino=1985 res=1 errno=0 [ 139.365170][ T26] audit: type=1804 audit(1719897682.133:5): pid=4647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.244" name="/root/syzkaller.R5Iq6X/21/bus" dev="sda1" ino=1985 res=1 errno=0 [ 140.721430][ T26] audit: type=1804 audit(1719897683.613:6): pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.256" name="/root/syzkaller.otrUS1/39/bus" dev="sda1" ino=1987 res=1 errno=0 [ 140.822068][ T26] audit: type=1804 audit(1719897683.663:7): pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.256" name="/root/syzkaller.otrUS1/39/bus" dev="sda1" ino=1987 res=1 errno=0 [ 140.856568][ T26] audit: type=1804 audit(1719897683.693:8): pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.256" name="/root/syzkaller.otrUS1/39/bus" dev="sda1" ino=1987 res=1 errno=0 [ 142.465924][ T4715] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 142.465924][ T4715] program syz.4.259 not setting count and/or reply_len properly [ 142.800901][ T4715] netlink: 'syz.4.259': attribute type 10 has an invalid length. [ 142.842347][ T4715] netlink: 40 bytes leftover after parsing attributes in process `syz.4.259'. [ 142.851946][ T4715] bridge0: port 3(gretap0) entered blocking state [ 142.875870][ T4715] bridge0: port 3(gretap0) entered disabled state [ 142.947206][ T4715] device gretap0 entered promiscuous mode [ 143.032777][ T4715] bridge0: port 3(gretap0) entered blocking state [ 143.039464][ T4715] bridge0: port 3(gretap0) entered forwarding state [ 146.759339][ T3562] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 149.515106][ T4809] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 149.515106][ T4809] program syz.1.294 not setting count and/or reply_len properly [ 149.599119][ T4811] netlink: 'syz.1.294': attribute type 10 has an invalid length. [ 149.678957][ T4811] netlink: 40 bytes leftover after parsing attributes in process `syz.1.294'. [ 149.737690][ T3562] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 149.800147][ T4811] bridge0: port 3(gretap0) entered blocking state [ 149.832397][ T4811] bridge0: port 3(gretap0) entered disabled state [ 149.879236][ T4811] device gretap0 entered promiscuous mode [ 149.904806][ T4811] bridge0: port 3(gretap0) entered blocking state [ 149.911431][ T4811] bridge0: port 3(gretap0) entered forwarding state [ 151.759429][ T3562] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 153.126102][ T3562] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 153.739888][ T4919] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 153.739888][ T4919] program syz.0.323 not setting count and/or reply_len properly [ 153.829466][ T4923] netlink: 'syz.0.323': attribute type 10 has an invalid length. [ 153.894639][ T4923] netlink: 40 bytes leftover after parsing attributes in process `syz.0.323'. [ 154.047752][ T4923] bridge0: port 3(gretap0) entered blocking state [ 154.158707][ T4923] bridge0: port 3(gretap0) entered disabled state [ 154.199294][ T4923] device gretap0 entered promiscuous mode [ 154.274322][ T4923] bridge0: port 3(gretap0) entered blocking state [ 154.280888][ T4923] bridge0: port 3(gretap0) entered forwarding state [ 155.102995][ T3562] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 156.146469][ T4948] loop3: detected capacity change from 0 to 32768 [ 156.248587][ T4948] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.339 (4948) [ 156.328372][ T4948] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 156.344935][ T4948] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 156.362392][ T4948] BTRFS info (device loop3): disabling free space tree [ 156.369329][ T4948] BTRFS info (device loop3): turning off barriers [ 156.397234][ T4969] loop2: detected capacity change from 0 to 1024 [ 156.402384][ T4948] BTRFS info (device loop3): use no compression [ 156.410093][ T4948] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 156.431341][ T4969] hfsplus: bad catalog entry type [ 156.442416][ T4948] BTRFS info (device loop3): trying to use backup root at mount time [ 156.450838][ T4948] BTRFS error (device loop3): cannot disable free space tree [ 156.475052][ T4948] BTRFS error (device loop3): open_ctree failed [ 156.594205][ T3570] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (3570) [ 156.909959][ T4977] loop0: detected capacity change from 0 to 16 [ 156.951438][ T4982] capability: warning: `syz.2.352' uses deprecated v2 capabilities in a way that may be insecure [ 156.968497][ T4977] erofs: (device loop0): mounted with root inode @ nid 36. [ 157.059743][ T3562] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 157.099999][ T4984] loop1: detected capacity change from 0 to 1764 [ 157.280458][ T4977] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 157.366999][ T3562] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 157.689429][ T26] audit: type=1800 audit(1719897700.583:9): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.349" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 157.815626][ T4977] syz.0.349 (4977) used greatest stack depth: 18584 bytes left [ 158.243354][ T4967] loop4: detected capacity change from 0 to 32768 [ 158.278400][ T4967] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 158.307650][ T4967] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 158.433546][ T4967] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 3ms [ 158.488214][ T3606] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 158.499941][ T3606] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 158.730265][ T5015] loop3: detected capacity change from 0 to 128 [ 158.769541][ T3606] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 269ms [ 158.827812][ T5015] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 158.840454][ T3606] gfs2: fsid=syz:syz.0: jid=0: Done [ 158.848558][ T4967] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 158.870577][ T5015] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 158.882809][ T5015] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 158.904354][ T5015] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 158.919337][ T5015] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 158.959813][ T5015] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 159.024290][ T5015] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 159.074956][ T5015] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 159.104151][ T5015] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 159.122910][ T5015] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 159.279087][ T5022] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 159.279087][ T5022] program syz.0.359 not setting count and/or reply_len properly [ 159.428029][ T5025] netlink: 'syz.0.359': attribute type 10 has an invalid length. [ 159.519990][ T5025] netlink: 40 bytes leftover after parsing attributes in process `syz.0.359'. [ 159.833784][ T5030] loop2: detected capacity change from 0 to 16 [ 159.887860][ T5030] erofs: (device loop2): mounted with root inode @ nid 36. [ 160.065178][ T3562] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 160.096456][ T5030] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 160.516223][ T26] audit: type=1800 audit(1719897703.413:10): pid=5030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.369" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 160.843058][ T3562] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 160.891579][ T5027] loop3: detected capacity change from 0 to 40427 [ 160.972854][ T5027] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 161.009238][ T5027] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 161.087357][ T5027] F2FS-fs (loop3): Found nat_bits in checkpoint [ 161.264459][ T5027] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 161.330814][ T5032] loop1: detected capacity change from 0 to 40427 [ 161.332661][ T5027] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 161.368356][ T5032] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 161.398811][ T5032] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 161.578611][ T5032] F2FS-fs (loop1): Found nat_bits in checkpoint [ 162.097726][ T5032] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 162.112371][ T5032] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 162.328917][ T5040] loop2: detected capacity change from 0 to 32768 [ 162.363212][ T5059] CIFS: VFS: Malformed UNC in devname [ 162.397220][ T5059] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 162.454961][ T5059] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 162.481474][ T5040] XFS (loop2): Mounting V5 Filesystem [ 162.771837][ T5040] XFS (loop2): Ending clean mount [ 162.818784][ T5040] XFS (loop2): Quotacheck needed: Please wait. [ 162.932801][ T5040] XFS (loop2): Quotacheck: Done. [ 163.143867][ T4317] XFS (loop2): Unmounting Filesystem [ 163.181234][ T5050] loop4: detected capacity change from 0 to 32768 [ 163.234442][ T5050] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.375 (5050) [ 163.371182][ T5050] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 163.422795][ T5050] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 163.469047][ T5050] BTRFS info (device loop4): using free space tree [ 163.661901][ T5050] BTRFS info (device loop4): enabling ssd optimizations [ 164.031572][ T5075] loop0: detected capacity change from 0 to 32768 [ 164.048519][ T3700] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 164.138204][ T5075] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 164.175410][ T5075] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 164.212620][ T5075] BTRFS info (device loop0): setting nodatacow, compression disabled [ 164.240003][ T5075] BTRFS info (device loop0): enabling auto defrag [ 164.264982][ T5075] BTRFS info (device loop0): max_inline at 0 [ 164.273905][ T5075] BTRFS info (device loop0): using free space tree [ 164.948078][ T3562] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 165.104063][ T3839] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 165.362554][ T5121] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 165.576420][ T5149] loop1: detected capacity change from 0 to 16 [ 165.646564][ T5149] erofs: (device loop1): mounted with root inode @ nid 36. [ 165.752731][ T5121] usb 5-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 165.761857][ T3562] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 165.791711][ T5121] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 165.801212][ T5121] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 165.810228][ T5149] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 165.821549][ T5121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.874137][ T5121] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 166.093075][ T5121] gspca_sn9c2028: read1 error -32 [ 166.132439][ T5121] gspca_sn9c2028: read1 error -32 [ 166.290202][ T26] audit: type=1800 audit(1719897709.183:11): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.383" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 166.377450][ T5121] usb 5-1: USB disconnect, device number 2 [ 166.855228][ T5161] loop1: detected capacity change from 0 to 64 [ 167.032313][ T3598] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 167.069291][ T5153] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 167.069291][ T5153] program syz.0.386 not setting count and/or reply_len properly [ 167.079757][ T5154] loop2: detected capacity change from 0 to 32768 [ 167.118255][ T5153] netlink: 'syz.0.386': attribute type 10 has an invalid length. [ 167.185468][ T5153] netlink: 40 bytes leftover after parsing attributes in process `syz.0.386'. [ 167.209949][ T5154] ERROR: (device loop2): diAllocAG: nfreeinos = 0, but iag on freelist [ 167.209949][ T5154] [ 167.240591][ T5154] ialloc: diAlloc returned -5! [ 167.302376][ T3598] usb 4-1: Using ep0 maxpacket: 32 [ 167.436999][ T3598] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.473412][ T3598] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.505546][ T3598] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 167.532365][ T3598] usb 4-1: config 128 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 167.565972][ T3598] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 167.596290][ T3598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.949882][ T5164] loop4: detected capacity change from 0 to 32768 [ 167.962377][ T3598] usbhid 4-1:128.0: can't add hid device: -71 [ 167.967083][ T5123] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 167.978790][ T3598] usbhid: probe of 4-1:128.0 failed with error -71 [ 167.995230][ T3598] usb 4-1: USB disconnect, device number 3 [ 168.097669][ T5164] XFS (loop4): Mounting V5 Filesystem [ 168.127193][ T5168] loop1: detected capacity change from 0 to 40427 [ 168.158001][ T5168] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 168.166167][ T5168] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 168.197069][ T5164] XFS (loop4): Ending clean mount [ 168.217910][ T5168] F2FS-fs (loop1): Found nat_bits in checkpoint [ 168.219905][ T5164] XFS (loop4): Quotacheck needed: Please wait. [ 168.224545][ T5123] usb 3-1: Using ep0 maxpacket: 8 [ 168.289272][ T5164] XFS (loop4): Quotacheck: Done. [ 168.379152][ T5123] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFB, skipping [ 168.435646][ T5168] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 168.446235][ T5182] qrtr: Invalid version 48 [ 168.450870][ T5168] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 168.495176][ T5182] qrtr: Invalid version 110 [ 168.672577][ T5123] usb 3-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice= f.71 [ 168.785534][ T5188] loop3: detected capacity change from 0 to 512 [ 168.853042][ T5188] EXT4-fs (sda1): re-mounted. Quota mode: journalled. [ 169.568306][ T5123] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.585402][ T5123] usb 3-1: Product: syz [ 169.590130][ T5123] usb 3-1: Manufacturer: syz [ 169.594841][ T5123] usb 3-1: SerialNumber: syz [ 169.744372][ T5192] CIFS: VFS: Malformed UNC in devname [ 169.750349][ T5123] usb 3-1: config 0 descriptor?? [ 169.865180][ T5192] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 170.004441][ T3986] usb 3-1: USB disconnect, device number 2 [ 170.089409][ T3562] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 171.095061][ T3700] XFS (loop4): Unmounting Filesystem [ 171.108397][ T5213] loop0: detected capacity change from 0 to 16 [ 171.222037][ T5213] erofs: (device loop0): mounted with root inode @ nid 36. [ 171.416509][ T3562] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 172.343913][ T5213] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 172.704666][ T26] audit: type=1800 audit(1719897715.603:12): pid=5213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.399" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 174.081815][ T5230] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 174.081815][ T5230] program syz.0.406 not setting count and/or reply_len properly [ 174.102356][ T5230] netlink: 'syz.0.406': attribute type 10 has an invalid length. [ 174.110135][ T5230] netlink: 40 bytes leftover after parsing attributes in process `syz.0.406'. [ 175.072118][ T5220] loop3: detected capacity change from 0 to 40427 [ 175.150028][ T5226] loop1: detected capacity change from 0 to 32768 [ 175.183414][ T5220] F2FS-fs (loop3): invalid crc value [ 175.216618][ T5237] loop2: detected capacity change from 0 to 256 [ 175.260651][ T5220] F2FS-fs (loop3): Found nat_bits in checkpoint [ 175.304923][ T5237] FAT-fs (loop2): Directory bread(block 64) failed [ 175.342677][ T5237] FAT-fs (loop2): Directory bread(block 65) failed [ 175.357878][ T5237] FAT-fs (loop2): Directory bread(block 66) failed [ 175.383624][ T5237] FAT-fs (loop2): Directory bread(block 67) failed [ 175.395334][ T5237] FAT-fs (loop2): Directory bread(block 68) failed [ 175.419099][ T5237] FAT-fs (loop2): Directory bread(block 69) failed [ 175.442108][ T5237] FAT-fs (loop2): Directory bread(block 70) failed [ 175.457444][ T5220] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 175.492583][ T5237] FAT-fs (loop2): Directory bread(block 71) failed [ 175.513860][ T5237] FAT-fs (loop2): Directory bread(block 72) failed [ 175.520446][ T5237] FAT-fs (loop2): Directory bread(block 73) failed [ 175.550724][ T3562] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 177.090511][ T5258] loop3: detected capacity change from 0 to 512 [ 177.140507][ T5258] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 177.148528][ T5258] UDF-fs: Scanning with blocksize 512 failed [ 177.158067][ T5258] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 177.167919][ T5258] UDF-fs: Scanning with blocksize 1024 failed [ 177.186635][ T5258] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 177.210193][ T5258] UDF-fs: Scanning with blocksize 2048 failed [ 177.277924][ T5266] loop2: detected capacity change from 0 to 512 [ 177.287253][ T5258] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 177.309972][ T5266] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 177.318194][ T5266] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c01c, mo2=0002] [ 177.326360][ T5266] System zones: 1-12 [ 177.331405][ T5266] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 177.341003][ T5266] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 177.349863][ T5266] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 177.362075][ T5266] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 3: comm syz.2.417: lblock 0 mapped to illegal pblock 3 (length 1) [ 177.383897][ T5266] EXT4-fs warning (device loop2): dx_probe:822: inode #2: lblock 0: comm syz.2.417: error -117 reading directory block [ 177.397748][ T5266] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 3: comm syz.2.417: lblock 0 mapped to illegal pblock 3 (length 1) [ 177.426517][ T5266] EXT4-fs warning (device loop2): dx_probe:822: inode #2: lblock 0: comm syz.2.417: error -117 reading directory block [ 177.428681][ T5258] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.448689][ T5266] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 3: comm syz.2.417: lblock 0 mapped to illegal pblock 3 (length 1) [ 177.464227][ T5266] EXT4-fs warning (device loop2): dx_probe:822: inode #2: lblock 0: comm syz.2.417: error -117 reading directory block [ 177.465137][ T5271] loop4: detected capacity change from 0 to 256 [ 177.519539][ T5273] loop1: detected capacity change from 0 to 512 [ 177.562459][ T5123] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 177.636051][ T5273] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2810: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 177.721635][ T5273] EXT4-fs (loop1): 1 truncate cleaned up [ 177.759776][ T5273] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 177.923431][ T5123] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 177.966726][ T5123] usb 1-1: config 1 has an invalid descriptor of length 105, skipping remainder of the config [ 177.983936][ T5123] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 177.993979][ T5123] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 178.064859][ T3941] EXT4-fs (loop1): unmounting filesystem. [ 178.086519][ T4317] EXT4-fs (loop2): unmounting filesystem. [ 178.162702][ T5123] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 178.183826][ T5123] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 178.198366][ T5123] usb 1-1: Product: syz [ 178.205123][ T5123] usb 1-1: Manufacturer: syz [ 178.265013][ T5123] cdc_wdm 1-1:1.0: skipping garbage [ 178.270291][ T5123] cdc_wdm 1-1:1.0: skipping garbage [ 178.305932][ T5265] netlink: 32 bytes leftover after parsing attributes in process `syz.4.416'. [ 178.321075][ T5123] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 178.387045][ T5284] loop3: detected capacity change from 0 to 512 [ 178.415701][ T5284] EXT4-fs: Ignoring removed i_version option [ 178.433122][ T5284] EXT4-fs error (device loop3): __ext4_iget:5044: inode #11: block 1: comm syz.3.424: invalid block [ 178.450139][ T5284] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.424: couldn't read orphan inode 11 (err -117) [ 178.485202][ T5123] usb 1-1: USB disconnect, device number 2 [ 178.495168][ T5284] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 178.652535][ T3597] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 178.912334][ T3597] usb 3-1: Using ep0 maxpacket: 16 [ 179.062495][ T3597] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 179.107815][ T3597] usb 3-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 179.143858][ T3597] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.186316][ T3597] usb 3-1: config 0 descriptor?? [ 179.235019][ T3597] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 179.439566][ T3597] usb 3-1: USB disconnect, device number 3 [ 179.590050][ T3562] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 179.598685][ T5283] loop1: detected capacity change from 0 to 32768 [ 180.353718][ T5304] loop0: detected capacity change from 0 to 16 [ 180.446420][ T5304] erofs: (device loop0): mounted with root inode @ nid 36. [ 180.544008][ T3552] EXT4-fs (loop3): unmounting filesystem. [ 180.808977][ T5308] loop3: detected capacity change from 0 to 512 [ 180.841113][ T5308] ext4: Unknown parameter 'fowner' [ 180.911959][ T3562] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 180.959708][ T5304] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 181.351917][ T5313] loop3: detected capacity change from 0 to 512 [ 181.584296][ T5313] EXT4-fs (loop3): 1 truncate cleaned up [ 181.590020][ T5313] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 181.757340][ T3552] EXT4-fs (loop3): unmounting filesystem. [ 182.156466][ T5326] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 182.156466][ T5326] program syz.1.428 not setting count and/or reply_len properly [ 182.177039][ T5326] netlink: 'syz.1.428': attribute type 10 has an invalid length. [ 182.184996][ T5326] netlink: 40 bytes leftover after parsing attributes in process `syz.1.428'. [ 182.847956][ T26] audit: type=1800 audit(1719897725.743:13): pid=5304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.429" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 183.527276][ T3562] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 183.800988][ T5324] loop3: detected capacity change from 0 to 32768 [ 183.876985][ T5329] loop2: detected capacity change from 0 to 32768 [ 183.896918][ T5330] loop1: detected capacity change from 0 to 32768 [ 183.913267][ T5324] XFS (loop3): Mounting V5 Filesystem [ 183.925901][ T5329] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.437 (5329) [ 183.975371][ T5329] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 184.005869][ T5329] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 184.064462][ T5329] BTRFS info (device loop2): setting nodatacow, compression disabled [ 184.074235][ T5329] BTRFS info (device loop2): enabling auto defrag [ 184.080913][ T5329] BTRFS info (device loop2): max_inline at 0 [ 184.088437][ T5329] BTRFS info (device loop2): using free space tree [ 184.204010][ T5324] XFS (loop3): Ending clean mount [ 184.239977][ T5324] XFS (loop3): Quotacheck needed: Please wait. [ 184.269783][ T5324] XFS (loop3): Quotacheck: Done. [ 184.440710][ T5365] qrtr: Invalid version 48 [ 184.462399][ T5365] qrtr: Invalid version 110 [ 184.619229][ T5329] BTRFS warning (device loop2): failed to trim 1 device(s), last error -512 [ 184.800600][ T4317] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 184.877687][ T5370] loop0: detected capacity change from 0 to 2048 [ 184.931064][ T5370] EXT4-fs: Ignoring removed orlov option [ 185.083432][ T5370] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 185.118893][ T5370] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 185.154855][ T5370] EXT4-fs (loop0): Remounting filesystem read-only [ 185.280553][ T3839] EXT4-fs (loop0): unmounting filesystem. [ 185.540055][ T5383] loop1: detected capacity change from 0 to 256 [ 185.712411][ T5138] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 185.985151][ T5385] netlink: 32 bytes leftover after parsing attributes in process `syz.1.440'. [ 186.132897][ T5138] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.160088][ T5138] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.189526][ T5138] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 186.205091][ T5138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.249314][ T5138] usb 3-1: config 0 descriptor?? [ 186.558896][ T3552] XFS (loop3): Unmounting Filesystem [ 187.172709][ T5138] usb 3-1: language id specifier not provided by device, defaulting to English [ 187.642585][ T5138] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 187.676524][ T5138] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 187.697421][ T5138] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 187.707111][ T5138] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 187.723181][ T5138] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 187.839227][ T5138] usb 3-1: USB disconnect, device number 4 [ 187.878652][ T5387] loop4: detected capacity change from 0 to 40427 [ 187.992411][ T5387] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 188.015525][ T5387] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 188.049332][ T5400] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 188.049332][ T5400] program syz.3.448 not setting count and/or reply_len properly [ 188.070876][ T5400] netlink: 'syz.3.448': attribute type 10 has an invalid length. [ 188.078824][ T5400] netlink: 40 bytes leftover after parsing attributes in process `syz.3.448'. [ 188.188515][ T5387] F2FS-fs (loop4): Found nat_bits in checkpoint [ 188.454912][ T3562] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 188.603709][ T5387] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 188.632445][ T5387] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 188.911082][ T5413] CIFS: VFS: Malformed UNC in devname [ 188.953880][ T5413] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 188.987653][ T5398] loop1: detected capacity change from 0 to 32768 [ 190.020551][ T5426] loop1: detected capacity change from 0 to 16 [ 191.256411][ T3562] Bluetooth: hci4: command 0x0406 tx timeout [ 191.282767][ T5426] erofs: (device loop1): mounted with root inode @ nid 36. [ 191.299279][ T5421] loop2: detected capacity change from 0 to 32768 [ 191.456646][ T5421] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.455 (5421) [ 191.662612][ T5421] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 191.740623][ T5421] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 191.952485][ T5421] BTRFS info (device loop2): setting nodatacow, compression disabled [ 192.037170][ T5421] BTRFS info (device loop2): enabling auto defrag [ 192.387398][ T5421] BTRFS info (device loop2): max_inline at 0 [ 192.871537][ T5421] BTRFS info (device loop2): using free space tree [ 193.163030][ T5421] BTRFS error (device loop2): open_ctree failed [ 193.502420][ T5114] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 193.630134][ T3562] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 193.752402][ T5114] usb 4-1: Using ep0 maxpacket: 16 [ 193.872714][ T5114] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 193.910877][ T5114] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 193.961129][ T5114] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.991951][ T5114] usb 4-1: config 0 descriptor?? [ 194.273333][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.289609][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.278897][ T5454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.329316][ T5454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.369950][ T5114] hid-generic 0003:0158:0100.0002: unknown main item tag 0x1 [ 195.388287][ T5114] hid-generic 0003:0158:0100.0002: unexpected long global item [ 195.414846][ T5114] hid-generic: probe of 0003:0158:0100.0002 failed with error -22 [ 195.615978][ T5139] usb 4-1: USB disconnect, device number 4 [ 198.043470][ T26] audit: type=1800 audit(1719897740.943:14): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.472" name="file1" dev="sda1" ino=1978 res=0 errno=0 [ 198.342930][ T5501] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 198.342930][ T5501] program syz.1.468 not setting count and/or reply_len properly [ 198.746718][ T5503] netlink: 'syz.1.468': attribute type 10 has an invalid length. [ 198.754734][ T5503] netlink: 40 bytes leftover after parsing attributes in process `syz.1.468'. [ 199.227992][ T5140] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 199.310456][ T3562] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 199.410515][ T5494] loop0: detected capacity change from 0 to 32768 [ 199.473181][ T5494] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.471 (5494) [ 199.498267][ T5140] usb 4-1: Using ep0 maxpacket: 16 [ 199.577618][ T5494] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 199.608683][ T5494] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 199.642691][ T5494] BTRFS info (device loop0): setting nodatacow, compression disabled [ 199.667107][ T5140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 199.678621][ T5494] BTRFS info (device loop0): enabling auto defrag [ 199.689249][ T5140] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 199.700262][ T5494] BTRFS info (device loop0): max_inline at 0 [ 199.791103][ T5494] BTRFS info (device loop0): using free space tree [ 199.957590][ T5140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.396742][ T5140] usb 4-1: config 0 descriptor?? [ 200.679440][ T5494] BTRFS error (device loop0): open_ctree failed [ 201.121309][ T5504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.164634][ T5504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.210612][ T5140] hid-generic 0003:0158:0100.0003: unknown main item tag 0x1 [ 201.246511][ T5140] hid-generic 0003:0158:0100.0003: unexpected long global item [ 201.273585][ T5140] hid-generic: probe of 0003:0158:0100.0003 failed with error -22 [ 201.407677][ T3601] usb 4-1: USB disconnect, device number 5 [ 201.472406][ T3562] Bluetooth: hci2: command 0x0406 tx timeout [ 202.792912][ T3569] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 202.810336][ T26] audit: type=1800 audit(1719897745.703:15): pid=5559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.484" name="file1" dev="sda1" ino=1996 res=0 errno=0 [ 203.389197][ T5553] loop1: detected capacity change from 0 to 32768 [ 203.524144][ T5553] XFS (loop1): Mounting V5 Filesystem [ 203.648340][ T5553] XFS (loop1): Ending clean mount [ 203.669143][ T5553] XFS (loop1): Quotacheck needed: Please wait. [ 203.768239][ T5553] XFS (loop1): Quotacheck: Done. [ 203.823455][ T5578] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 203.941190][ T3941] XFS (loop1): Unmounting Filesystem [ 204.086845][ T5580] syz.3.490 uses obsolete (PF_INET,SOCK_PACKET) [ 204.127937][ T26] audit: type=1326 audit(1719897747.023:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5579 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f1d75b99 code=0x7ffc0000 [ 204.155958][ T26] audit: type=1326 audit(1719897747.053:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5579 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f90f1d75b99 code=0x7ffc0000 [ 204.197701][ T26] audit: type=1326 audit(1719897747.083:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5579 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f1d75b99 code=0x7ffc0000 [ 204.322371][ T5587] syz.4.493 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 205.002458][ T3598] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 205.221922][ T5598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.496'. [ 205.282506][ T3598] usb 4-1: Using ep0 maxpacket: 16 [ 205.402998][ T3598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 205.717352][ T3598] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 205.727511][ T3598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.748058][ T3598] usb 4-1: config 0 descriptor?? [ 205.821664][ T5600] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 205.821664][ T5600] program syz.0.492 not setting count and/or reply_len properly [ 205.841764][ T5600] netlink: 'syz.0.492': attribute type 10 has an invalid length. [ 205.849764][ T5600] netlink: 40 bytes leftover after parsing attributes in process `syz.0.492'. [ 206.352725][ T5592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.365925][ T3569] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 206.426266][ T5592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.485038][ T3598] hid-generic 0003:0158:0100.0004: unknown main item tag 0x1 [ 206.503794][ T3598] hid-generic 0003:0158:0100.0004: unexpected long global item [ 206.515888][ T3598] hid-generic: probe of 0003:0158:0100.0004 failed with error -22 [ 206.587486][ T26] audit: type=1800 audit(1719897749.483:19): pid=5614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.500" name="file1" dev="sda1" ino=1961 res=0 errno=0 [ 206.702382][ T5114] usb 4-1: USB disconnect, device number 6 [ 208.017407][ T26] audit: type=1800 audit(1719897750.913:20): pid=5627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.505" name="file0" dev="sda1" ino=1991 res=0 errno=0 [ 209.483006][ T5619] loop1: detected capacity change from 0 to 32768 [ 209.588862][ T5619] XFS (loop1): Mounting V5 Filesystem [ 209.688181][ T5619] XFS (loop1): Ending clean mount [ 209.699902][ T5619] XFS (loop1): Quotacheck needed: Please wait. [ 209.782421][ T5619] XFS (loop1): Quotacheck: Done. [ 209.954605][ T3941] XFS (loop1): Unmounting Filesystem [ 210.269371][ T5657] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 210.269371][ T5657] program syz.0.510 not setting count and/or reply_len properly [ 210.292620][ T5657] netlink: 'syz.0.510': attribute type 10 has an invalid length. [ 210.300477][ T5657] netlink: 40 bytes leftover after parsing attributes in process `syz.0.510'. [ 210.565809][ T3569] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 211.067558][ T5669] overlayfs: failed to resolve './file0': -2 [ 211.422367][ T5138] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 211.673690][ T5138] usb 2-1: Using ep0 maxpacket: 16 [ 211.793877][ T5138] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 211.823088][ T5138] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 211.833292][ T5138] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.845071][ T5138] usb 2-1: config 0 descriptor?? [ 212.516633][ T5675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.587193][ T5675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.624036][ T5683] loop4: detected capacity change from 0 to 32768 [ 212.658676][ T5138] hid-generic 0003:0158:0100.0005: unknown main item tag 0x1 [ 212.692984][ T5138] hid-generic 0003:0158:0100.0005: unexpected long global item [ 212.701149][ T5138] hid-generic: probe of 0003:0158:0100.0005 failed with error -22 [ 212.763174][ T5683] XFS (loop4): Mounting V5 Filesystem [ 212.876964][ T5683] XFS (loop4): Ending clean mount [ 212.918758][ T5140] usb 2-1: USB disconnect, device number 3 [ 212.919755][ T5694] loop3: detected capacity change from 0 to 32768 [ 212.948102][ T5683] XFS (loop4): Quotacheck needed: Please wait. [ 213.010585][ T5683] XFS (loop4): Quotacheck: Done. [ 213.228871][ T3700] XFS (loop4): Unmounting Filesystem [ 213.278710][ T3569] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 214.549600][ T5739] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 214.549600][ T5739] program syz.3.534 not setting count and/or reply_len properly [ 214.570181][ T5739] netlink: 'syz.3.534': attribute type 10 has an invalid length. [ 214.578232][ T5739] netlink: 40 bytes leftover after parsing attributes in process `syz.3.534'. [ 214.815718][ T3562] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 215.545307][ T5742] loop1: detected capacity change from 0 to 32768 [ 215.649916][ T5742] XFS (loop1): Mounting V5 Filesystem [ 215.879505][ T5742] XFS (loop1): Ending clean mount [ 215.906884][ T5742] XFS (loop1): Quotacheck needed: Please wait. [ 215.979352][ T5742] XFS (loop1): Quotacheck: Done. [ 216.195183][ T3941] XFS (loop1): Unmounting Filesystem [ 216.559984][ T26] audit: type=1326 audit(1719897759.453:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5777 comm="syz.2.552" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f221b575b99 code=0x0 [ 216.812373][ T3562] Bluetooth: hci3: command 0x0406 tx timeout [ 216.866672][ T3562] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 218.424338][ T5800] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 218.424338][ T5800] program syz.0.555 not setting count and/or reply_len properly [ 218.533359][ T5800] netlink: 'syz.0.555': attribute type 10 has an invalid length. [ 218.541292][ T5800] netlink: 40 bytes leftover after parsing attributes in process `syz.0.555'. [ 219.626401][ T26] audit: type=1326 audit(1719897762.523:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5817 comm="syz.2.566" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f221b575b99 code=0x0 [ 219.660438][ T3562] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 219.682754][ T5817] [ 219.685134][ T5817] ====================================================== [ 219.692167][ T5817] WARNING: possible circular locking dependency detected [ 219.699208][ T5817] 6.1.96-syzkaller #0 Not tainted [ 219.704250][ T5817] ------------------------------------------------------ [ 219.711324][ T5817] syz.2.566/5817 is trying to acquire lock: [ 219.717321][ T5817] ffff88814b7743f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x213/0x760 [ 219.729034][ T5817] [ 219.729034][ T5817] but task is already holding lock: [ 219.736508][ T5817] ffff88814b770558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1ad/0x10d0 [ 219.745871][ T5817] [ 219.745871][ T5817] which lock already depends on the new lock. [ 219.745871][ T5817] [ 219.756296][ T5817] [ 219.756296][ T5817] the existing dependency chain (in reverse order) is: [ 219.765416][ T5817] [ 219.765416][ T5817] -> #3 (sb_pagefaults){.+.+}-{0:0}: [ 219.772925][ T5817] lock_acquire+0x1f8/0x5a0 [ 219.778039][ T5817] percpu_down_read+0x44/0x1a0 [ 219.783371][ T5817] ext4_page_mkwrite+0x1ad/0x10d0 [ 219.788954][ T5817] do_page_mkwrite+0x1a1/0x5f0 [ 219.794275][ T5817] wp_page_shared+0x164/0x380 [ 219.799508][ T5817] handle_mm_fault+0x2525/0x5340 [ 219.804997][ T5817] exc_page_fault+0x26f/0x620 [ 219.810236][ T5817] asm_exc_page_fault+0x22/0x30 [ 219.815665][ T5817] [ 219.815665][ T5817] -> #2 (&mm->mmap_lock){++++}-{3:3}: [ 219.823323][ T5817] lock_acquire+0x1f8/0x5a0 [ 219.828360][ T5817] internal_get_user_pages_fast+0x224/0x2cf0 [ 219.834876][ T5817] __iov_iter_get_pages_alloc+0x3b1/0xa70 [ 219.841141][ T5817] iov_iter_get_pages2+0xcb/0x120 [ 219.846709][ T5817] bio_iov_iter_get_pages+0x359/0x1340 [ 219.852722][ T5817] iomap_dio_bio_iter+0xc86/0x1600 [ 219.858378][ T5817] __iomap_dio_rw+0x1271/0x2130 [ 219.863764][ T5817] iomap_dio_rw+0x42/0xa0 [ 219.868622][ T5817] ext4_file_write_iter+0x1464/0x1880 [ 219.874528][ T5817] vfs_write+0x7ae/0xba0 [ 219.879294][ T5817] ksys_write+0x19c/0x2c0 [ 219.884144][ T5817] do_syscall_64+0x3b/0xb0 [ 219.889102][ T5817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.895530][ T5817] [ 219.895530][ T5817] -> #1 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 219.904148][ T5817] lock_acquire+0x1f8/0x5a0 [ 219.909187][ T5817] down_read+0xad/0xa30 [ 219.913865][ T5817] ext4_bmap+0x4b/0x410 [ 219.918550][ T5817] bmap+0xa1/0xd0 [ 219.922713][ T5817] jbd2_journal_flush+0x5b5/0xc40 [ 219.928273][ T5817] ext4_ioctl+0x3986/0x5f60 [ 219.933305][ T5817] __se_sys_ioctl+0xf1/0x160 [ 219.938428][ T5817] do_syscall_64+0x3b/0xb0 [ 219.943376][ T5817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.949802][ T5817] [ 219.949802][ T5817] -> #0 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 219.958580][ T5817] validate_chain+0x1661/0x5950 [ 219.963967][ T5817] __lock_acquire+0x125b/0x1f80 [ 219.969348][ T5817] lock_acquire+0x1f8/0x5a0 [ 219.974381][ T5817] mutex_lock_io_nested+0x134/0xab0 [ 219.980125][ T5817] __jbd2_log_wait_for_space+0x213/0x760 [ 219.986298][ T5817] start_this_handle+0x1040/0x21b0 [ 219.991937][ T5817] jbd2__journal_start+0x2d1/0x5c0 [ 219.997575][ T5817] __ext4_journal_start_sb+0x19b/0x410 [ 220.003562][ T5817] ext4_dirty_inode+0x8b/0x100 [ 220.008855][ T5817] __mark_inode_dirty+0x331/0xf80 [ 220.014424][ T5817] __file_update_time+0x221/0x240 [ 220.020036][ T5817] file_update_time+0x34c/0x3c0 [ 220.025417][ T5817] ext4_page_mkwrite+0x1c4/0x10d0 [ 220.030970][ T5817] do_page_mkwrite+0x1a1/0x5f0 [ 220.036266][ T5817] handle_mm_fault+0x22eb/0x5340 [ 220.041730][ T5817] exc_page_fault+0x26f/0x620 [ 220.046936][ T5817] asm_exc_page_fault+0x22/0x30 [ 220.052317][ T5817] [ 220.052317][ T5817] other info that might help us debug this: [ 220.052317][ T5817] [ 220.062545][ T5817] Chain exists of: [ 220.062545][ T5817] &journal->j_checkpoint_mutex --> &mm->mmap_lock --> sb_pagefaults [ 220.062545][ T5817] [ 220.076460][ T5817] Possible unsafe locking scenario: [ 220.076460][ T5817] [ 220.083912][ T5817] CPU0 CPU1 [ 220.089278][ T5817] ---- ---- [ 220.094656][ T5817] lock(sb_pagefaults); [ 220.098905][ T5817] lock(&mm->mmap_lock); [ 220.105759][ T5817] lock(sb_pagefaults); [ 220.112528][ T5817] lock(&journal->j_checkpoint_mutex); [ 220.118078][ T5817] [ 220.118078][ T5817] *** DEADLOCK *** [ 220.118078][ T5817] [ 220.126223][ T5817] 2 locks held by syz.2.566/5817: [ 220.131243][ T5817] #0: ffff8880132897d8 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2e0 [ 220.141272][ T5817] #1: ffff88814b770558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1ad/0x10d0 [ 220.151031][ T5817] [ 220.151031][ T5817] stack backtrace: [ 220.157102][ T5817] CPU: 0 PID: 5817 Comm: syz.2.566 Not tainted 6.1.96-syzkaller #0 [ 220.165077][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 220.175132][ T5817] Call Trace: [ 220.178416][ T5817] [ 220.181349][ T5817] dump_stack_lvl+0x1e3/0x2cb [ 220.186051][ T5817] ? nf_tcp_handle_invalid+0x642/0x642 [ 220.191524][ T5817] ? print_circular_bug+0x12b/0x1a0 [ 220.196732][ T5817] check_noncircular+0x2fa/0x3b0 [ 220.201676][ T5817] ? add_chain_block+0x850/0x850 [ 220.206635][ T5817] ? lockdep_lock+0x11f/0x2a0 [ 220.211325][ T5817] ? _find_first_zero_bit+0xd0/0x100 [ 220.216619][ T5817] validate_chain+0x1661/0x5950 [ 220.221499][ T5817] ? reacquire_held_locks+0x660/0x660 [ 220.226884][ T5817] ? validate_chain+0x112/0x5950 [ 220.231834][ T5817] ? reacquire_held_locks+0x660/0x660 [ 220.237241][ T5817] ? reacquire_held_locks+0x660/0x660 [ 220.242628][ T5817] ? deref_stack_reg+0x17c/0x210 [ 220.247574][ T5817] ? 0xffffffffa00038c0 [ 220.251911][ T5817] ? 0xffffffffa00038c0 [ 220.256068][ T5817] ? mark_lock+0x9a/0x340 [ 220.260412][ T5817] __lock_acquire+0x125b/0x1f80 [ 220.265286][ T5817] lock_acquire+0x1f8/0x5a0 [ 220.269799][ T5817] ? __jbd2_log_wait_for_space+0x213/0x760 [ 220.275634][ T5817] ? __jbd2_log_wait_for_space+0x213/0x760 [ 220.281549][ T5817] ? read_lock_is_recursive+0x10/0x10 [ 220.286954][ T5817] ? __might_sleep+0xb0/0xb0 [ 220.291580][ T5817] ? __jbd2_log_wait_for_space+0x213/0x760 [ 220.297405][ T5817] mutex_lock_io_nested+0x134/0xab0 [ 220.302619][ T5817] ? __jbd2_log_wait_for_space+0x213/0x760 [ 220.308443][ T5817] ? __jbd2_log_wait_for_space+0x207/0x760 [ 220.314271][ T5817] ? __lock_acquire+0x1f80/0x1f80 [ 220.319323][ T5817] ? mutex_lock_interruptible_nested+0x20/0x20 [ 220.325503][ T5817] __jbd2_log_wait_for_space+0x213/0x760 [ 220.331155][ T5817] ? do_raw_write_lock+0x143/0x4e0 [ 220.336276][ T5817] ? jbd2_commit_block_csum_verify+0x4f0/0x4f0 [ 220.342445][ T5817] ? do_raw_read_unlock+0x70/0x70 [ 220.347481][ T5817] start_this_handle+0x1040/0x21b0 [ 220.352634][ T5817] ? jbd2__journal_start+0x144/0x5c0 [ 220.358036][ T5817] ? jbd2__journal_start+0x5c0/0x5c0 [ 220.363424][ T5817] ? __kasan_slab_alloc+0x65/0x70 [ 220.368541][ T5817] ? slab_post_alloc_hook+0x71/0x3a0 [ 220.373835][ T5817] ? rcu_is_watching+0x11/0xb0 [ 220.378603][ T5817] ? jbd2__journal_start+0x144/0x5c0 [ 220.383899][ T5817] jbd2__journal_start+0x2d1/0x5c0 [ 220.389106][ T5817] __ext4_journal_start_sb+0x19b/0x410 [ 220.394579][ T5817] ext4_dirty_inode+0x8b/0x100 [ 220.399358][ T5817] ? __ext4_expand_extra_isize+0x3d0/0x3d0 [ 220.405181][ T5817] __mark_inode_dirty+0x331/0xf80 [ 220.410224][ T5817] __file_update_time+0x221/0x240 [ 220.415262][ T5817] file_update_time+0x34c/0x3c0 [ 220.420128][ T5817] ? __file_remove_privs+0x640/0x640 [ 220.425452][ T5817] ext4_page_mkwrite+0x1c4/0x10d0 [ 220.430494][ T5817] ? ext4_change_inode_journal_flag+0x6e0/0x6e0 [ 220.436744][ T5817] ? count_memcg_event_mm+0x90/0x410 [ 220.442035][ T5817] ? put_page+0x250/0x250 [ 220.446369][ T5817] ? __lock_acquire+0x1f80/0x1f80 [ 220.451403][ T5817] ? mtree_range_walk+0x673/0x7c0 [ 220.456437][ T5817] do_page_mkwrite+0x1a1/0x5f0 [ 220.461212][ T5817] handle_mm_fault+0x22eb/0x5340 [ 220.466158][ T5817] ? mt_find+0x29a/0xc60 [ 220.470412][ T5817] ? mt_find+0x29a/0xc60 [ 220.474679][ T5817] ? numa_migrate_prep+0x250/0x250 [ 220.479833][ T5817] ? lock_mm_and_find_vma+0xae/0x2e0 [ 220.485138][ T5817] exc_page_fault+0x26f/0x620 [ 220.489831][ T5817] asm_exc_page_fault+0x22/0x30 [ 220.494701][ T5817] RIP: 0033:0x7f221b455c06 [ 220.499142][ T5817] Code: 00 00 00 00 be 08 00 00 00 48 89 df 49 83 c6 01 e8 ef ba fe ff 48 8b 53 38 48 8d 42 f8 48 89 43 38 8b 43 28 83 c0 08 89 43 28 <48> 89 6a f8 45 39 e6 0f 83 7d 00 00 00 48 8b 3c 24 49 8b 6d 30 4a [ 220.518949][ T5817] RSP: 002b:00007fffd8799090 EFLAGS: 00010202 [ 220.525024][ T5817] RAX: 0000000000006008 RBX: 00007f221c235720 RCX: 0000000000000000 [ 220.533001][ T5817] RDX: 0000001b3041a000 RSI: 0000000000000008 RDI: 00007f221c235720 [ 220.540991][ T5817] RBP: ffffffff81515179 R08: 00007f221abff068 R09: 0000000000000008 [ 220.548971][ T5817] R10: 000000008132a559 R11: 000000008132a55d R12: 0000000000000256 [ 220.556950][ T5817] R13: 00007f221b704038 R14: 0000000000000049 R15: ffffffffffffa000 [ 220.564934][ T5817] ? emit_mov_imm32+0x1e9/0x600 [ 220.569810][ T5817] [ 227.062284][ T3569] Bluetooth: hci0: command 0x0406 tx timeout